gamesNet Search
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 8,592 |
| Threat Level: | 80 % (High) |
| Infected Computers: | 15,332 |
| First Seen: | July 20, 2017 |
| Last Seen: | January 24, 2026 |
| OS(es) Affected: | Windows |
The gamesNet Search browser extension by Medianetnow.com is said to help users search the Internet for free games, redesign their new tab, and change their default search provider to Play.eanswers.com. The gamesNet Search is a re-branded version of the arcadeNet Search extension from the same site—Medianetnow.com. Both versions may redirect users to Play.eanswers.com whenever they type keywords in the search bar and open a new tab. The gamesNet Search browser extension may open pop-up windows and present users with Adobe Flash games from Better.cantstopplaying.com, which is related to alternative extensions like the iPlay Search, the GoPlay Search and the gamesZone Search. Not only that, but the gamesNet Search extension has a clone on the following pages at the Chrome Web Store:
- gamesNet Start - Chrome.google.com/webstore/detail/gamesnet-start/cpomfoinmnaaldhgbambfllldigchdip
- netGamer Start - Chrome.google.com/webstore/detail/netgamer-start/nhhboodmfnbbdoibnnikbchlocibjhbh
The gamesNet Search software and its clones are ad-supported browser extensions, which are designed to drive Web traffic to Enaswers.com. Also, Web surfers may be redirected to Games.njoyapps[.]com/wim/lp/offer/?t1=18&t=cantstopplaying and might be suggested to download the browserGamer Search by Njoyapps.com. The browserGamer Search extension by Njoyapps.com can be found on the Chrome Web Store at Chrome.google.com/webstore/detail/browsergamer-search/bighoobcbdbecgaknbokemncieflnbgp. You will want to know that if you follow the instructions on Games.njoyapps.com/wim/lp/offer/?t1=18&t=cantstopplaying your default search provider would be changed one more time to Games.searchalgo.com. The site mentioned before is part of a network of portals and software deployment platforms, which are associated with dozens of ad-supported browser extensions, which are configured to push Internet traffic to Searchalgo.com.
The gamesNet Search extension and its variants are deemed as Potentially Unwanted Programs (PUPs) that may cause several browser redirects until you reach the search results page on Search.yahoo.com. It is suspected that the company SearchAlgo employs many software developers who are tasked with rebranding and releasing new browser extensions, which are the main source of Internet traffic to Searchalgo.com. The gamesNet Search extension may collect usage statistics like your browsing history and keywords on Play.eanswers.com to help advertisers on Eanswers.com, and Search.yahoo.com offer targeted advertisements on your screen. PC users that are not interested in personalized advertisements based on their recent online activity may not like the gamesNet Search (gamesNet Start/netGamer Start) extension. You can remove unwanted extensions via the Extensions Manager, but you may need help with erasing the tracking cookies downloaded by gamesNet Search.
Table of Contents
Analysis Report
General information
| Family Name: | Trojan.Gamehack.A |
|---|---|
| Signature status: | No Signature |
Known Samples
Known Samples
This section lists other file samples believed to be associated with this family.|
MD5:
7f12a981bf442181221b2e995922ffc4
SHA1:
6b56c6e86c18c088b6a70646907a85773128f595
SHA256:
8EC81D61911EEBE8152173A351990DC227EA39E27FEFAF2F076E60BB73AC235E
File Size:
925.70 KB, 925696 bytes
|
|
MD5:
f374af6af3a2525db5fed9cd84e3e2f7
SHA1:
c7fcb958e5db96f131bb32b02666d30cb42773ae
SHA256:
451C7BDDCD521053CFFD63747424DC345439139091D17AD6F203A14EAFF9A4F3
File Size:
1.92 MB, 1916416 bytes
|
|
MD5:
59f7b35726e486e7595107e55c3dad1d
SHA1:
343a38b2676ecf92f26287718f62d621bd8613e3
SHA256:
1E426BB5D49154A99D72F64BE1F3729002D3AA3796A284F319E9A56A5CB7F8FB
File Size:
6.28 MB, 6279168 bytes
|
Windows Portable Executable Attributes
- File doesn't have "Rich" header
- File doesn't have debug information
- File doesn't have exports table
- File doesn't have relocations information
- File doesn't have resources
- File doesn't have security information
- File has TLS information
- File is 32-bit executable
- File is either console or GUI application
- File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
Show More
- File is Native application (NOT .NET application)
- File is not packed
- IMAGE_FILE_DLL is not set inside PE header (Executable)
- IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)
File Icons
File Icons
This section displays icon resources found within family samples. Malware often replicates icons commonly associated with legitimate software to mislead users into believing the malware is safe.
Windows PE Version Information
Windows PE Version Information
This section displays values and attributes that have been set in the Windows file version information data structure for samples within this family. To mislead users, malware actors often add fake version information mimicking legitimate software.| Name | Value |
|---|---|
| Company Name | Piasiniengineering |
| File Version | 0.0.0.0 |
| Legal Copyright | Piasiniengineering |
| Legal Trademarks | Piasiniengineering |
| Original Filename | SerialSuite.exe |
| Product Name | Serial Suite |
| Product Version | 2.0.0.0 |
File Traits
- 2+ executable sections
- HighEntropy
- No Version Info
- x86
Block Information
Block Information
During analysis, EnigmaSoft breaks file samples into logical blocks for classification and comparison with other samples. Blocks can be used to generate malware detection rules and to group file samples into families based on shared source code, functionality and other distinguishing attributes and characteristics. This section lists a summary of this block data, as well as its classification by EnigmaSoft. A visual representation of the block data is also displayed, where available.| Total Blocks: | 13,530 |
|---|---|
| Potentially Malicious Blocks: | 2,317 |
| Whitelisted Blocks: | 2,661 |
| Unknown Blocks: | 8,552 |
Visual Map
?
?
?
x
x
?
?
0
?
x
x
0
?
?
?
?
?
0
0
?
0
x
x
x
?
?
?
0
?
0
x
?
?
x
?
0
?
x
x
?
0
?
?
x
?
?
?
?
?
?
?
0
x
?
?
?
x
?
0
?
0
?
?
?
?
?
?
?
x
0
?
?
?
?
?
0
0
0
0
?
?
x
?
?
?
?
?
?
0
x
?
?
?
?
?
x
?
?
?
x
?
0
?
x
?
?
x
?
?
?
?
x
?
?
?
?
x
?
0
?
?
?
?
0
0
?
?
0
x
?
x
x
?
x
0
?
x
?
?
?
?
?
?
?
?
?
?
x
?
?
x
0
0
?
x
0
?
?
x
x
x
?
x
x
?
x
0
0
?
?
0
0
x
?
x
x
?
x
0
x
0
x
0
?
?
x
?
x
?
0
?
?
0
0
x
?
?
?
0
0
?
x
?
x
?
?
?
?
?
0
?
0
0
?
?
0
?
?
?
?
0
?
?
?
?
0
?
?
?
x
?
?
?
?
?
?
?
x
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
x
?
?
?
0
0
?
?
?
?
?
?
?
?
?
?
0
x
0
0
?
?
0
x
x
0
0
x
0
x
?
0
?
?
?
?
0
?
0
0
x
?
?
x
0
0
x
x
x
0
x
0
?
x
x
?
?
0
?
?
?
?
?
x
0
x
0
x
?
?
x
?
?
0
x
?
?
x
0
x
0
x
x
0
?
0
?
0
?
x
x
x
x
?
?
0
?
?
?
?
?
?
x
?
?
?
?
?
0
?
x
x
0
?
?
?
?
?
x
x
0
0
?
0
x
0
x
0
?
?
?
x
?
x
?
?
x
0
0
x
?
?
?
0
?
?
0
0
?
0
?
0
0
?
?
0
?
?
?
x
0
?
?
0
?
0
?
0
x
?
0
?
?
0
0
0
0
0
?
?
0
?
0
?
0
?
?
0
?
x
0
0
?
?
?
?
x
?
x
?
?
?
x
x
0
0
0
0
x
0
?
0
?
0
x
?
0
?
x
0
0
0
?
x
0
x
0
0
?
0
?
?
?
?
0
x
?
?
?
?
?
?
?
0
0
0
0
0
?
0
x
?
x
0
?
?
?
0
0
0
?
x
x
0
?
?
?
?
0
?
?
?
?
0
?
?
?
0
x
?
0
?
?
?
0
?
?
?
0
?
?
?
x
?
?
x
0
?
x
x
x
x
0
0
?
?
?
x
x
0
x
0
0
x
?
x
?
?
?
?
x
0
?
x
?
?
x
?
0
0
?
?
?
x
x
x
?
?
0
0
0
0
x
?
?
?
x
x
?
?
?
?
?
?
?
?
0
0
?
?
?
0
?
?
?
0
0
0
x
?
x
x
?
?
0
0
?
?
?
?
?
0
?
x
x
?
?
?
?
?
0
x
?
?
0
?
?
?
x
?
?
?
0
?
x
?
?
?
x
?
?
?
?
?
?
?
x
?
?
?
x
0
x
0
?
?
?
x
?
x
?
?
?
?
?
x
x
0
x
?
?
?
?
?
?
?
?
x
0
?
?
?
x
?
?
?
0
x
x
?
?
?
?
?
?
?
0
?
?
?
x
0
?
x
x
?
?
?
?
?
?
x
?
x
?
0
?
?
?
x
?
x
?
0
?
?
?
?
?
?
?
?
x
?
x
0
?
0
?
x
?
0
?
x
?
?
x
?
?
x
?
?
0
?
?
?
?
?
x
x
?
x
?
?
?
0
?
?
?
?
?
x
x
?
?
?
?
?
0
?
?
0
?
x
0
0
?
?
?
x
?
?
?
x
?
x
?
?
?
?
0
?
?
?
?
?
x
0
?
0
?
x
?
0
x
x
?
0
x
x
0
?
0
x
?
?
?
?
0
?
?
?
?
?
?
?
?
?
x
0
?
?
?
?
?
0
?
x
?
0
?
x
?
?
?
?
x
0
0
x
?
?
?
0
?
?
0
x
?
?
?
?
?
x
0
x
?
0
x
x
?
?
?
?
?
?
?
0
0
?
?
?
x
x
?
0
?
?
?
?
0
x
?
?
?
?
?
?
?
?
?
?
?
x
x
?
?
?
?
?
0
?
?
?
0
?
0
?
?
?
?
?
?
0
?
0
?
?
?
?
0
?
x
x
x
0
?
?
?
?
?
?
?
?
x
0
x
?
?
?
?
0
?
?
?
0
x
0
?
?
0
x
?
?
?
0
?
0
x
x
x
?
0
?
0
?
?
?
?
?
?
?
?
?
x
?
?
?
0
?
0
0
0
0
0
0
0
0
0
0
0
0
0
?
0
?
?
0
?
?
0
0
?
?
?
?
?
0
?
0
?
0
0
0
?
?
0
0
0
0
0
0
0
0
0
0
?
x
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
1
?
0
0
0
?
?
?
0
0
?
?
0
0
0
0
1
0
0
1
0
1
0
0
?
?
0
0
0
?
0
0
1
1
0
0
0
0
0
0
?
0
0
0
0
0
0
?
0
0
0
0
0
0
1
1
?
0
?
0
?
?
?
?
?
0
?
?
0
?
?
?
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
?
0
?
0
?
?
0
?
0
?
?
0
0
0
0
0
1
?
?
0
0
?
0
?
?
?
x
0
0
0
0
?
0
0
0
0
?
0
0
0
0
0
0
0
?
0
?
?
?
0
0
0
?
0
0
?
0
?
0
?
0
?
0
?
0
0
0
?
?
0
0
0
?
?
0
0
0
?
?
?
?
?
?
0
0
0
0
0
0
0
0
?
?
?
?
?
0
0
x
x
?
0
0
?
?
0
?
0
1
0
?
?
?
?
?
?
?
?
?
0
0
0
0
x
0
x
0
x
0
0
0
0
0
0
?
0
?
?
?
0
?
0
0
?
?
?
?
?
0
?
?
?
?
?
?
x
x
x
?
?
x
?
?
?
?
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
?
x
0
0
?
?
?
?
0
0
0
0
0
0
?
?
0
?
x
x
0
?
0
?
?
?
?
?
0
?
0
?
0
0
?
0
?
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
?
0
0
?
0
0
1
0
?
?
?
?
?
?
?
0
?
?
?
0
0
0
?
?
?
?
0
0
0
0
0
0
0
0
?
?
?
?
?
?
0
?
0
0
0
0
?
0
0
0
0
0
?
?
?
0
?
?
?
0
0
0
?
0
0
?
?
0
0
0
?
0
?
0
?
?
0
0
?
0
?
0
0
0
?
0
?
?
?
?
?
?
0
?
0
0
?
?
?
?
?
?
0
?
0
0
?
0
0
?
?
?
?
0
0
0
0
0
0
0
0
0
?
0
?
0
0
?
0
?
?
?
?
?
?
?
?
0
?
0
0
0
?
0
?
?
0
?
?
0
0
0
?
?
?
0
?
?
0
0
0
0
0
?
0
0
0
0
0
0
?
?
?
0
0
?
?
?
?
?
?
0
?
?
?
?
?
?
?
?
0
?
?
0
0
?
0
0
0
?
?
0
?
?
?
?
?
?
0
?
0
0
?
?
0
0
0
?
?
?
?
?
?
?
?
?
?
0
0
?
?
0
?
?
?
?
?
?
0
?
?
0
0
0
0
0
0
?
?
?
?
?
0
?
0
0
0
0
0
0
0
0
0
0
0
?
?
?
?
?
0
?
0
0
0
0
0
?
?
?
?
?
?
?
?
0
?
0
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
0
0
0
0
0
?
?
?
?
?
?
0
?
?
0
?
0
?
0
?
0
0
0
?
0
0
0
0
0
0
?
x
0
0
0
0
0
?
?
?
0
0
0
0
0
0
?
0
0
?
?
?
?
?
x
?
0
?
0
0
0
0
0
0
0
0
0
0
?
0
0
?
0
0
0
0
0
0
0
0
?
?
?
?
?
?
0
?
?
?
0
0
0
0
0
0
0
?
0
0
0
0
0
0
0
0
?
0
?
?
?
?
?
?
?
0
0
?
?
?
?
0
0
0
0
?
0
0
?
0
0
0
?
?
?
?
?
0
x
x
?
?
?
?
0
x
?
0
x
?
0
?
?
x
?
x
?
0
?
?
?
?
?
?
?
0
?
?
?
?
?
0
?
?
x
?
?
0
x
?
?
0
?
?
0
?
?
x
x
?
x
x
?
?
?
0
?
?
?
0
?
?
x
0
x
?
?
?
x
?
0
?
0
?
?
?
0
x
?
?
?
?
?
?
?
?
0
?
x
x
0
x
?
?
?
?
?
?
?
?
?
?
0
?
?
x
?
?
x
x
x
x
?
?
?
0
?
?
?
x
0
x
0
?
?
?
?
?
0
?
?
0
?
?
?
x
?
x
?
?
?
0
x
x
?
x
?
?
?
x
?
?
?
0
?
?
?
?
x
?
x
?
?
0
0
?
x
?
x
?
x
?
?
?
0
?
?
?
?
?
?
?
?
?
?
?
0
x
?
0
?
?
?
x
0
0
x
x
0
x
?
?
0
?
0
0
?
?
?
?
?
?
x
?
x
?
0
?
0
x
x
0
?
?
?
?
?
0
?
?
?
0
?
?
?
?
?
0
x
?
?
?
?
?
?
x
?
?
?
?
?
?
?
?
0
x
?
?
?
?
x
?
?
?
?
?
?
?
x
?
?
?
?
0
?
?
0
?
x
x
...
Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block
? - Unknown Block
x - Potentially Malicious Block
Files Modified
Files Modified
This section lists files that were created, modified, moved and/or deleted by samples in this family. File system activity can provide valuable insight into how malware functions on the operating system.| File | Attributes |
|---|---|
| c:\windows\system.ini | Generic Read,Write Data,Write Attributes,Write extended,Append data |
Registry Modifications
Registry Modifications
This section lists registry keys and values that were created, modified and/or deleted by samples in this family. Windows Registry activity can provide valuable insight into malware functionality. Additionally, malware often creates registry values to allow itself to automatically start and indefinitely persist after an initial infection has compromised the system.| Key::Value | Data | API Name |
|---|---|---|
| HKCU\software\microsoft\windows\currentversion\explorer\advanced::hidden | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center::antivirusoverride | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center::antivirusdisablenotify | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center::firewalldisablenotify | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center::firewalloverride | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center::updatesdisablenotify | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center::uacdisablenotify | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center\svc::antivirusoverride | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center\svc::antivirusdisablenotify | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center\svc::firewalldisablenotify | RegNtPreCreateKey |
Show More
| HKLM\software\wow6432node\microsoft\security center\svc::firewalloverride | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center\svc::updatesdisablenotify | RegNtPreCreateKey | |
| HKLM\software\wow6432node\microsoft\security center\svc::uacdisablenotify | RegNtPreCreateKey | |
| HKCU\software\microsoft\windows\currentversion\internet settings::globaluseroffline | RegNtPreCreateKey | |
| HKLM\software\microsoft\windows\currentversion\policies\system::enablelua | RegNtPreCreateKey | |
| HKLM\system\controlset001\services\sharedaccess\parameters\firewallpolicy\standardprofile::enablefirewall | RegNtPreCreateKey | |
| HKLM\system\controlset001\services\sharedaccess\parameters\firewallpolicy\standardprofile::donotallowexceptions | RegNtPreCreateKey | |
| HKLM\system\controlset001\services\sharedaccess\parameters\firewallpolicy\standardprofile::disablenotifications | RegNtPreCreateKey | |
| HKCU\software\apcr\1214104697::1919251317 | 扱 | RegNtPreCreateKey |
| HKCU\software\apcr\1214104697::-456464662 | RegNtPreCreateKey | |
| HKCU\software\apcr\1214104697::1462786655 | RegNtPreCreateKey | |
| HKCU\software\apcr\1214104697::-912929324 | # | RegNtPreCreateKey |
| HKCU\software\apcr\1214104697::1006321993 | Č | RegNtPreCreateKey |
| HKCU\software\apcr\1214104697::-1369393986 | http://ecosukces.nazwa.pl/images/button.gif http://nurstravel. | RegNtPreCreateKey |
| HKCU\software\apcr\1214104697::549857331 | RegNtPreCreateKey | |
| HKCU\software\apcr::u1_0 | 윣렴 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_0 | ♄ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_0 | 権ă | RegNtPreCreateKey |
| HKCU\software\apcr::u4_0 | RegNtPreCreateKey | |
| HKCU\software\apcr::u1_1 | 腖ֆ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_1 | 唱牥 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_1 | ᥜ獦 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_1 | 獵牥 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_2 | 마Ⱙ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_2 | 삮 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_2 | 賃 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_2 | | RegNtPreCreateKey |
| HKCU\software\apcr::u1_3 | ൽጾ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_3 | 簛地 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_3 | ぶ嘳 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_3 | 婟地 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_4 | 릮蟒 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_4 | 픃즕 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_4 | ꟽ좖 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_4 | 췔즕 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_5 | ⽒ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_5 | 斆㯻 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_5 | ⭠㫸 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_5 | 䅉㯻 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_6 | 燖岩 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_6 | 鋺깠 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_6 | RegNtPreCreateKey | |
| HKCU\software\apcr::u4_6 | 뒾깠 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_7 | 뢍ꋗ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_7 | 㑈 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_7 | 䈚⇅ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_7 | ⠳ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_8 | 㒩秚 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_8 | 蕾錫 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_8 | 鈨 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_8 | 鮨錫 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_9 | 헅䁟 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_9 | ᖱ֑ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_9 | 攴Ғ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_9 | ༝֑ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_10 | 蟬 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_10 | 饻矶 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_10 | 盵 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_10 | 芒矶 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_11 | 諍쿖 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_11 | | RegNtPreCreateKey |
| HKCU\software\apcr::u3_11 | 鰮 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_11 | | RegNtPreCreateKey |
| HKCU\software\apcr::u1_12 | 껼甥 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_12 | 炥峁 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_12 | ͕巂 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_12 | 楼峁 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_13 | ﯴଋ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_13 | Ｖ켦 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_13 | 뛘츥 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_13 | RegNtPreCreateKey | |
| HKCU\software\apcr::u1_14 | 믁匐 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_14 | 䱉䆌 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_14 | 㩏䂏 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_14 | 偦䆌 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_15 | 鑡珑 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_15 | 풬돱 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_15 | ꧲닲 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_15 | 쏛돱 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_16 | ؾ爛 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_16 | ⿻♗ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_16 | 嵹❔ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_16 | 㝐♗ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_17 | ֮弧 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_17 | 褂颼 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_17 | 샬馿 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_17 | 颼 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_18 | RegNtPreCreateKey | |
| HKCU\software\apcr::u2_18 | ߣଢ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_18 | 琓ਡ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_18 | Ḻଢ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_19 | ᴯỦ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_19 | 袍綇 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_19 | ﮆ粄 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_19 | 醯綇 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_20 | 행ᴈ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_20 | ᷉ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_20 | 漍 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_20 | Ԥ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_21 | 䌒湷 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_21 | 慀扒 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_21 | ኰ捑 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_21 | 碙扒 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_22 | RegNtPreCreateKey | |
| HKCU\software\apcr::u2_22 | 쿉풷 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_22 | 蘧햴 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_22 | 풷 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_23 | 錄퍸 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_23 | 䙚䜝 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_23 | 㖪䘞 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_23 | 徃䜝 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_24 | 逯 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_24 | 쭢릂 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_24 | 룑뢁 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_24 | 틸릂 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_25 | 둆㸪 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_25 | 崘⯨ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_25 | ⱄ⫫ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_25 | 䙭⯨ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_26 | 籨苑 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_26 | ꀻ鹍 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_26 | 폋齎 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_26 | 맢鹍 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_27 | 泈텺 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_27 | ຐႳ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_27 | 䝾ᆰ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_27 | ⵗႳ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_28 | Ж짃 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_28 | 耳茘 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_28 | 쫥舛 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_28 | ꃌ茘 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_29 | 삓蟧 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_29 | ග | RegNtPreCreateKey |
| HKCU\software\apcr::u3_29 | 繨 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_29 | ᑁ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_30 | 磑⢤ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_30 | 鵇柣 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_30 | 曠 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_30 | 螶柣 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_31 | ï쬟 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_31 | RegNtPreCreateKey | |
| HKCU\software\apcr::u3_31 | RegNtPreCreateKey | |
| HKCU\software\apcr::u4_31 | RegNtPreCreateKey | |
| HKCU\software\apcr::u1_32 | RegNtPreCreateKey | |
| HKCU\software\apcr::u2_32 | 璹䲮 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_32 | ҉䶭 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_32 | 溠䲮 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_33 | ⢵迵 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_33 | 쀈뼓 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_33 | 蠼븐 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_33 | 뼓 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_34 | 썒 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_34 | 䢁ㅹ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_34 | 㾣ぺ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_34 | 喊ㅹ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_35 | ࠬ㊓ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_35 | 푼ꏞ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_35 | ꋖꋝ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_35 | 죿ꏞ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_36 | ⳃ⦩ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_36 | ⛋ᙄ | RegNtPreCreateKey |
| HKCU\software\apcr::u3_36 | 噝ᝇ | RegNtPreCreateKey |
| HKCU\software\apcr::u4_36 | 㱴ᙄ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_37 | èꥆ | RegNtPreCreateKey |
| HKCU\software\apcr::u2_37 | 넿袩 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_37 | 엀親 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_37 | 꿩袩 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_38 | 뎄뀱 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_38 | | RegNtPreCreateKey |
| HKCU\software\apcr::u3_38 | 䥷兀 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_38 | ⍞ | RegNtPreCreateKey |
| HKCU\software\apcr::u1_39 | 㿒付 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_39 | 詭浴 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_39 | ﳺ汷 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_39 | 雓浴 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_40 | ﹴ뼖 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_40 | RegNtPreCreateKey | |
| HKCU\software\apcr::u3_40 | RegNtPreCreateKey | |
| HKCU\software\apcr::u4_40 | RegNtPreCreateKey | |
| HKCU\software\apcr::u1_41 | RegNtPreCreateKey | |
| HKCU\software\apcr::u2_41 | 朞刿 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_41 | ប匼 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_41 | 綽刿 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_42 | ŝ瓦 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_42 | 쒤 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_42 | 鬛얧 | RegNtPreCreateKey |
| HKCU\software\apcr::u4_42 | 쒤 | RegNtPreCreateKey |
| HKCU\software\apcr::u1_43 | ⾔씿 | RegNtPreCreateKey |
| HKCU\software\apcr::u2_43 | 祰㜊 | RegNtPreCreateKey |
| HKCU\software\apcr::u3_43 | ຎ㘉 | RegNtPreCreateKey |
133 additional registry modifications are not displayed above.
