What is Debut.exe?
Debut.exe is part of Debut and developed by NCH Software according to the Debut.exe version information.
Debut.exe's description is "Debut Video Capture Software"
Debut.exe is digitally signed by NCH Software, Inc..
Debut.exe is usually located in the 'C:\Program Files (x86)\NCH Software\Debut\' folder.
None of the anti-virus scanners at VirusTotal reports anything malicious about Debut.exe.
If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.
Vendor and version information [?]
The following is the available information on Debut.exe:
| Property | Value |
|---|---|
| Product name | Debut |
| Company name | NCH Software |
| File description | Debut Video Capture Software |
| Internal name | Debut |
| Original filename | Debut.exe |
| Legal copyright | NCH Software |
| Product version | 5.46+ |
| File version | 5.46+ |
Here's a screenshot of the file properties when displayed by Windows Explorer:
| Product name | Debut |
| Company name | NCH Software |
| File description | Debut Video Capture Software |
| Internal name | Debut |
| Original filename | Debut.exe |
| Legal copyright | NCH Software |
| Product version | 5.46+ |
| File version | 5.46+ |
Digital signatures [?]
Debut.exe has a valid digital signature.
| Property | Value |
|---|---|
| Signer name | NCH Software, Inc. |
| Certificate issuer name | DigiCert EV Code Signing CA |
| Certificate serial number | 0a01c3ff8855f008c8e4fa63973252e6 |
VirusTotal report
None of the 71 anti-virus programs at VirusTotal detected the Debut.exe file.
Sandbox Report
The following information was gathered by executing the file inside Cuckoo Sandbox.
Summary
Successfully executed process in sandbox.
Summary
{
"file_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF190BC7F567482836.TMP",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\_debut_rl_cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"regkey_written": [
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DirectShow_EncoderMoniker",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\MostRecentApplication\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DirectShow_WaveFileFormatPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\FindPlay\\DefaultRecordFolder",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Zoom",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionWidth",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureLeft",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FullScreenSelected",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\MostRecentApplication\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\FilterData",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\Format",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionHeight",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\RD",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\CLSID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureRight",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Software\\SVar",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FirstRun",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureTop",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\FriendlyName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\WaveInId",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureMode",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureBottom",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\ClassManagerFlags"
],
"dll_loaded": [
"MMDevAPI.DLL",
"wdmaud.drv",
"gdi32.dll",
"C:\\Windows\\system32\\asycfilt.dll",
"kernel32.dll",
"UxTheme.dll",
"C:\\Windows\\system32\\ole32.dll",
"AUDIOSES.DLL",
"dwmapi.dll",
"C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll",
"API-MS-WIN-Service-Management-L1-1-0.dll",
"C:\\Windows\\syswow64\\MSCTF.dll",
"msacm32.drv",
"..\\debuthooksdll\\release\\debuthooksdll.dll",
"OLEAUT32.DLL",
"SspiCli.dll",
"midimap.dll",
"comctl32",
"ole32.dll",
"SHLWAPI.dll",
"CRYPTSP.dll",
"IMM32.dll",
"D3D10Warp.dll",
"API-MS-WIN-Service-winsvc-L1-1-0.dll",
"D3D10Level9.dll",
"WINTRUST.dll",
"MMDEVAPI.DLL",
"WindowsCodecs.dll",
"D3D11.dll",
"OLEAUT32.dll",
"debuthooksdll.dll",
"SHELL32.dll",
"RPCRT4.dll",
"psapi.dll",
"comctl32.dll",
"setupapi.dll",
"wmvcore.dll",
"C:\\Windows\\system32\\D3D10Warp.dll",
"avicap32.dll",
"Kernel32.dll",
"msdmo.dll",
"ADVAPI32.dll",
"SETUPAPI.dll",
"user32.dll",
"ddraw.dll"
],
"file_opened": [
"C:\\Windows\\System32\\wdmaud.drv",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Windows\\win.ini",
"C:\\ProgramData\\NCH Software\\Debut",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"C:\\ProgramData\\NCH Software"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressBurn\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Selections",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Registration\\NCH",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\WavePad\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Direct3D",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\WavePad\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark",
"HKEY_CURRENT_USER\\Software\\NCH Software\\VideoPad\\Settings",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Software",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw\\GammaCalibrator",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\msasn1",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{860BB310-5D01-11D0-BD3B-00A0C911CE86}",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\WebcamOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Instance",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\OverlayEffect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115",
"HKEY_CURRENT_USER\\Software\\Microsoft\\DirectShow\\PushClock",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoEffects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Debut\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows Media\\WMSDK\\Metering",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{860BB310-5D01-11D0-BD3B-00A0C911CE86}\\Instance",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Direct3D",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\System\\Setup",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\VFW",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}",
"HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressBurn\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Multimedia\\Audio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
"HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\WavePad\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Direct3D\\Drivers",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\DirectShow\\MediaObjects\\Categories\\860bb310-5d01-11d0-bd3b-00a0c911ce86",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\MediaResources\\msvideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw\\Compatibility",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties",
"HKEY_CLASSES_ROOT\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\\Instance\\Disabled",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\VideoPad\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressBurn\\Settings",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\MainWindow",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CLASSES_ROOT\\CLSID",
"HKEY_CLASSES_ROOT\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\\Instance",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension",
"HKEY_CLASSES_ROOT\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\FindPlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\OutputSettingsScreenCapture",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\DirectShow\\MediaObjects\\Categories\\33d9a762-90c8-11d0-bd43-00a0c911ce86",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Direct3D\\DX6TextureEnumInclusionList",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_CURRENT_USER\\Software\\NCH Software\\WavePad\\Settings",
"HKEY_CURRENT_USER\\Control Panel\\Desktop",
"HKEY_CLASSES_ROOT\\DirectShow\\MediaObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Multimedia\\MIDIMap",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\\Namespaces",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Debut\\Distributor",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_CURRENT_USER\\System\\CurrentControlSet\\Control\\MediaProperties\\PrivateProperties\\Joystick\\Winmm",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Debut\\Scheduler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Prism\\Settings",
"HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressBurn\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw\\MostRecentApplication",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\DRIVERS32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{d87a0b1a-8975-43e7-9879-c2912b61be65}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Prism\\Settings"
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\_debut_rl_cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"regkey_deleted": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Multimedia\\ActiveMovie\\Filter Cache"
],
"file_exists": [
"",
"C:\\ProgramData\\NCH Software\\Debut",
"C:\\ProgramData\\NCH Software",
"C:\\ProgramData\\NCH Software\\Debut\\splash.jpg",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin"
],
"mutex": [
"Local\\DDrawDriverObjectListMutex",
"Global\\DebutSubStatRun",
"Local\\__DDrawCheckExclMode__",
"Local\\MidiMapper_modLongMessage_RefCnt",
"Global\\DebutStarting",
"Local\\__DDrawExclMode__",
"Local\\DDrawWindowListMutex"
],
"file_failed": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\DebutCounts.txt",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\wdmaud.drv",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"guid": [
"{275c23e2-3747-11d0-9fea-00aa003f8646}",
"{33d9a762-90c8-11d0-bd43-00a0c911ce86}",
"{e436ebb1-524f-11ce-9f53-0020af0ba770}",
"{b79bb0b0-33c1-11d1-abe1-00a0c905f375}",
"{2faba4c7-4da9-4013-9697-20cc3fd40f85}",
"{cda42200-bd88-11d0-bd4e-00a0c911ce86}",
"{0000011a-0000-0000-c000-000000000046}",
"{00000000-0000-0000-c000-000000000046}",
"{e30629d2-27e5-11ce-875d-00608cb78066}",
"{060af76c-68dd-11d0-8fc1-00c04fd9189d}",
"{f64a6da6-e8af-4b7b-bca8-847ae765d538}",
"{56a868a9-0ad4-11ce-b03a-0020af0ba770}",
"{62be5d10-60eb-11d0-bd3b-00a0c911ce86}",
"{29840822-5b84-11d0-bd3b-00a0c911ce86}",
"{bf87b6e1-8c27-11d0-b3f0-00aa003761c5}",
"{4315d437-5b8c-11d0-bd3b-00a0c911ce86}",
"{93e5a4e0-2d50-11d2-abfa-00a0c9c6e38d}",
"{860bb310-5d01-11d0-bd3b-00a0c911ce86}",
"{30a99515-1527-4451-af9f-00c5f0234daf}",
"{56a86897-0ad4-11ce-b03a-0020af0ba770}",
"{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}",
"{275c23e1-3747-11d0-9fea-00aa003f8646}",
"{e436ebb3-524f-11ce-9f53-0020af0ba770}"
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Windows\\win.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"regkey_read": [
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\DX6TextureEnumInclusionList\\Size",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DirectShow_WaveFileFormatPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ForceFixedFramerate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ResizeType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_USE_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_CURRENT_USER\\System\\CurrentControlSet\\Control\\MediaProperties\\PrivateProperties\\Joystick\\Winmm\\wheel",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FollowCursor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\SS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wavemapper",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewAlphaSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableWiderSurfaces",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DV_Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_MAX_BITRATE",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Framerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_CHANNEL_NUM",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureRight",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave7",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_CODEC_MP4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableDDSCAPSInDDSD",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\DisplayTimestamp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave5",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Runs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave3",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Framerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSoundFromMouseClicks",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableMMX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureMode",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FirstRun",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\MP4_iPodMuxer",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightMiddleClickColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},2",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\ClassManagerFlags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ResizeKeepRatio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\Extensions\\NdrOleExtDLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Zoom",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Height",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave9",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\Downgraded",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi3",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ResizeKeepRatio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\UseNonLocalVidMem",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100\\ID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\FriendlyName",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAspectRatio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_BITRATE",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Width",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\SoundMoniker",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\RequireSDKLayers",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightMoveColor",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\UC",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightLeftClickColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\MP4_PSPMuxer",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Resize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DV_Channels",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewShadow",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamBubbleCount",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_BITRATE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WarnSpaceBelow",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Exposurerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\EnumerateAttachedSecondaries",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\DeviceState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi9",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WordWrap",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\RecordWhenRun",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ShowFrameRate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Direct3D\\RequireSDKLayers",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureTop",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureFPS",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\RD",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\FindPlay\\DefaultRecordFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ResizeType",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_TimeLapse",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{026e516e-b814-414b-83cd-856d6fef4822},2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamMPEG2Transport",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_CODEC_MP4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAspectRatioNum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAspectRatioDen",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSoundOnlyWhenRecording",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{a45c254e-df1c-4efd-8020-67d146a850e0},2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableAGPSupport",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionHeight",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FullScreenSelected",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ChangeFramerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ShowCursor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},6",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSound",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo1",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DV_Samplerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo3",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{026e516e-b814-414b-83cd-856d6fef4822},2",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSoundFromMic",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ShowHighlightCursor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\EnablePrintScreen",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightMoveRadius",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\LoadLastSelection",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\DX6TextureEnumInclusionList\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamVideoInputPin",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ChangeFramerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave2",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave8",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{a45c254e-df1c-4efd-8020-67d146a850e0},2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wdmaud.drv",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\WaveInId",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\EnableBalloonTips",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},6",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_USE_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ModeXOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureLeft",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Webcam",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_TimeLapse",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightClickDelay",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ShowBlanket",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\Key",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midimapper",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionWidth",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},2",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\InstallDate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\FlipNoVsync",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Resize",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_KEEP_CHANNEL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo7",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\Format",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCapture16bit",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\Drivers\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\Drivers\\Size",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_CURRENT_USER\\Control Panel\\Desktop\\SmoothScroll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi7",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi1",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\DisableAero",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo9",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightClickRadius",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi8",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo8",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ForceFixedFramerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Software\\SVar",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\ID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\UseMixer",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightRightClickColor",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Height",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Exposurerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ForceAGPSupport",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ActualSizePreview",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureMonitor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\EmulationOnly",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_LOSSLESS_TYPE_MP4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Width",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureBottom",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAudioInputPin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ForceRefreshRate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureHWND",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamFormat",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder"
],
"directory_enumerated": [
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ScheduleTasks\\*.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local"
],
"directory_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ScheduleTasks",
"C:\\ProgramData\\NCH Software\\Debut",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets",
"C:\\ProgramData\\NCH Software",
"C:\\Users\\cuck\\Videos\\Debut"
]
}Dropped
[
{
"yara": [],
"sha1": "95dfccba399c3f2cb5c7e80032c82a4b184cc9ad",
"name": "28e992d39b74f2ed_ps3%20hd%201080.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "28e992d39b74f2ed841c28a4a6607b987af3e3d5b23aaf4b5aa1ebb57fbae5b7",
"urls": [],
"crc32": "7C87F345",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/28e992d39b74f2ed_ps3%20hd%201080.dat",
"ssdeep": null,
"size": 514,
"sha512": "788d95e959590800e930556c52437e761d38b50b43beb47f6b1e645176e15b0dcb8a135ec754d01bd4341e5f060ad6f9947263ccfd35e5504c1eb7ea8d5dc9cd",
"pids": [
1268
],
"md5": "ba57e3b7caf1cb1e47d876ec899aeb5b"
},
{
"yara": [],
"sha1": "54aff21fc4e0f0d09af8dd44abaa42888ffe29c8",
"name": "e1a3e0e8bc40acb6_facebook%201080p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "e1a3e0e8bc40acb610fd5f6c68327ea6a8fdc1b92946d93c652f68c76bd3077c",
"urls": [],
"crc32": "3F7B68C6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/e1a3e0e8bc40acb6_facebook%201080p.dat",
"ssdeep": null,
"size": 514,
"sha512": "1a5a20b80f82e6b6d4b2222f507c1db16a308cc4fd8fe1c92d1b49c30207b84732136d0924d1cbade7fcc62562b336074d0596f6fa495be8e29c1ff9b16e553c",
"pids": [
1268
],
"md5": "64ef39c888747cd1dea4ecacb5e92b39"
},
{
"yara": [],
"sha1": "c81bdbfd3fb20da0dd71f6cad79ed2153ee10f9f",
"name": "044e6ddfb257caa5_youtube%20480p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "044e6ddfb257caa55e8280b6aa95aca6b83f47b20ab85cfe8aa8d3139d524370",
"urls": [],
"crc32": "B99CD86C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/044e6ddfb257caa5_youtube%20480p.dat",
"ssdeep": null,
"size": 480,
"sha512": "9eb5bf2143e8b6f0c77fb4fbfe4a331fa8285a1e67396da3772deddbe2e7c36583171762c52f50ea5a85157d451416225c5f981ac8d2e7a1881988aad606580b",
"pids": [
1268
],
"md5": "19a8f0278e3075155500b48b2168eb52"
},
{
"yara": [],
"sha1": "f117c453f6673b8650c34fe0a001d38932842a58",
"name": "219d757bf32ec79b_twitter%20mp4.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "219d757bf32ec79bd122717beef3de3ad885de9fdcd4c59db780df162945ba8a",
"urls": [],
"crc32": "548989C2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/219d757bf32ec79b_twitter%20mp4.dat",
"ssdeep": null,
"size": 512,
"sha512": "9e4a0ff6d52ed29d4bafb851abeb80ee5d359ca9f0ea932e5bf25cfce192a7a891c352cbd248446a4a1d15f3fb71293c2545a73ba286912e22132d13ce057b63",
"pids": [
1268
],
"md5": "d56d5d3fe0e651ab83277ec88c26813e"
},
{
"yara": [],
"sha1": "6df167e13f45e09ff7b38cdf426a3e3613573f8b",
"name": "3c952500d6cae6be_hd%202160p%20%284k%29.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "3c952500d6cae6be50efbfbea2f98d7d4548ac4bc508f31a646c80f62c99233e",
"urls": [],
"crc32": "59B252DE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/3c952500d6cae6be_hd%202160p%20%284k%29.dat",
"ssdeep": null,
"size": 785,
"sha512": "d40f6c373457bd35ffd48afc19231233a558ef33e9edd352d49b013a49b7cb02dd6480b9dd2635a788c764fc2a94910c5c6b32d8e785a131376448becb37e39f",
"pids": [
1268
],
"md5": "b9822951b7b2a73b0f4bc652508a6e79"
},
{
"yara": [],
"sha1": "eac37876249d0e31a37044588fec429fbf9bf262",
"name": "59e6aea2f285e5da_youtube%202160p%20%284k%29.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "59e6aea2f285e5da13ae7e3d52ba05958d93c427487660a227130352339a8d49",
"urls": [],
"crc32": "FA83293D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/59e6aea2f285e5da_youtube%202160p%20%284k%29.dat",
"ssdeep": null,
"size": 482,
"sha512": "8c8b6c07e0c71ce78780abd9e8a9320e49feb95cac93226ec1ca09251decc7903c81e88d55772c52cb8dff071457fa334156750283b2c6095528873ae275bf85",
"pids": [
1268
],
"md5": "abf4facec6baa36c37c1b3802981ab89"
},
{
"yara": [],
"sha1": "f6bdcbe27d8b61b188769a23ecf8cb6ab9f94901",
"name": "7443f283753edf90_360%20degree%20720p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "7443f283753edf90d5ddcb2d9cb65765b7ce3fc1f7b7196ada4e6e1115bcc8f0",
"urls": [],
"crc32": "C5DC3D63",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/7443f283753edf90_360%20degree%20720p.dat",
"ssdeep": null,
"size": 513,
"sha512": "74adfb6a78479b10a30a9ce5c46693e933afba6e4d21fe88d53c755480ec5d503f44195cc8851d57187ef49dba8261230cae5608319991d6bcda9e4716755304",
"pids": [
1268
],
"md5": "ffdd632f501b7eb6ce5e4db8f73c3320"
},
{
"yara": [],
"sha1": "b21066acb9e0b7c5209053922cb651fd000a7383",
"name": "ae7c8736652124a0__debut_rl_cuck",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\_debut_rl_cuck",
"type": "data",
"sha256": "ae7c8736652124a0079206e047807b27096a2aef6f5337480ec06c600932ccc3",
"urls": [],
"crc32": "C97F3593",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/ae7c8736652124a0__debut_rl_cuck",
"ssdeep": null,
"size": 8,
"sha512": "f4e6d331407bd0d5f3db99568d2eae3d03e2b8eceeb8539a252b9acc94828d5a32680875ce20b5e36ec4359189f59e47ddaefd5d54d4064b26a95eee96398b3b",
"pids": [
1268
],
"md5": "a561f7bf2237dd16913f6b3ba5888bce"
},
{
"yara": [],
"sha1": "b33f38169bb7a0b7fee3a5dc29d3202a7a0a0480",
"name": "4cdc325306da411f_internet%20video.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "4cdc325306da411f6c50f319d657a51f1e30fd634e2ac8f03f3730e9ca6f5057",
"urls": [],
"crc32": "A54284A0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/4cdc325306da411f_internet%20video.dat",
"ssdeep": null,
"size": 477,
"sha512": "b892950f89fbb07c954fe1da55581928250c9fac3c8615ffbee5490876c53b7c8399e291e40fa94a22e524e4c9d446dea406eccdfa5c1616fffec09afc1e7ea6",
"pids": [
1268
],
"md5": "4e5856065c3d03ecb61b54b9067ed05c"
},
{
"yara": [],
"sha1": "f833f37a89a2f3600a8a2b8d2b1dce8f426bed40",
"name": "97a1f7fe65255316_tv%20pal.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "97a1f7fe65255316c6627c6145d6ca6d2c8cb66c77184a9016f4158a63169968",
"urls": [],
"crc32": "2998AB54",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/97a1f7fe65255316_tv%20pal.dat",
"ssdeep": null,
"size": 782,
"sha512": "bdcfddbe168aee2c7b0b3285dd7bacb0175808a27f0cbb7833489a62103d383a0994b2c4b216323d1695bedb8706c94fa231ac10284c7d0362df98f00fcab65b",
"pids": [
1268
],
"md5": "99e315e7c7bd15cfcc0c358565463a5f"
},
{
"yara": [],
"sha1": "c1aedbf2fdf5291e48778198a141b0daac515552",
"name": "fc6b6bb79c5a8f13_hd%201080p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "fc6b6bb79c5a8f135bec52c41b379a87185cae73839e7d0dc3caffc0bc48c53e",
"urls": [],
"crc32": "5D70D9DD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/fc6b6bb79c5a8f13_hd%201080p.dat",
"ssdeep": null,
"size": 784,
"sha512": "71e489d574f046eb0ca14c7c900c1b68439b5f517d53f855427768451965892e16bff26130adb3dae89ca090d9ab85e214b6d4b0f4a3f61477dcfcd3a3cf70cc",
"pids": [
1268
],
"md5": "b288c537993e01dfca0de33abf4eb7e8"
},
{
"yara": [],
"sha1": "4ec30d0685f247ac1c5c0f62c17ccbba028614ec",
"name": "4bb8225c6a0b3b5f_hd%201440p%20%282k%29.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "4bb8225c6a0b3b5f6cb57a475437b6c565c060bd701a423a8d6fe2a64d7b9e41",
"urls": [],
"crc32": "4228EAAE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/4bb8225c6a0b3b5f_hd%201440p%20%282k%29.dat",
"ssdeep": null,
"size": 785,
"sha512": "be35702cd6f7bb7412ae3cf630983c9e5fc4c2a5732d930827afb85776c9997f39d6e93d97a2657ad858a4fa8d890a62f1baa4445f58e43cad73bfa4c52789ed",
"pids": [
1268
],
"md5": "5fef7dfd22d6c5cb8303b0abf256b388"
},
{
"yara": [],
"sha1": "b989d0d98bd5f7c935484eee1bbe6a4694cd9834",
"name": "680bfffbf9e1ff79_animated%20gif.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"type": "ASCII text, with no line terminators",
"sha256": "680bfffbf9e1ff79d15bcb0bc943c445381385a808b4ae529910e9f9affde328",
"urls": [],
"crc32": "E694C52B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/680bfffbf9e1ff79_animated%20gif.dat",
"ssdeep": null,
"size": 243,
"sha512": "1ba3dc6bdb51f7b2a7ad1a773ccfef4161355a6105a14f7ae1cfec019aab5c4b85ea7a10954780e4ebfb2b96f7052ae1dfef984146379af192937629f76a4437",
"pids": [
1268
],
"md5": "8137254358e734351892936cea21cbfe"
},
{
"yara": [],
"sha1": "cca97e0648c08d70fc0d535fc61396ff385f3edb",
"name": "865c6a0f8e362f3e_ps3%20720.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "865c6a0f8e362f3e133497a66862dab56d4512e49148c5ad1a16617dee7c17cf",
"urls": [],
"crc32": "6740B9EA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/865c6a0f8e362f3e_ps3%20720.dat",
"ssdeep": null,
"size": 512,
"sha512": "6cdd2b10326cb6d24e820ee04149a8f287554bb9a4b70c06408a9cb8a13d663f356c798cb371bce19ab54a179b49447200fd68766a4abf529e2994e4213478ae",
"pids": [
1268
],
"md5": "12dda845e3f91cec585d3c9aca4835e8"
},
{
"yara": [],
"sha1": "ff10cd5ed5d5e8215c875df3c0ca86738570fea9",
"name": "7722ffe1d33387da_widescreen%20tv.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "7722ffe1d33387da4be5b4cac96be1de86b60a2f46ca6ab405c1f072b69c7767",
"urls": [],
"crc32": "09AA56A2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/7722ffe1d33387da_widescreen%20tv.dat",
"ssdeep": null,
"size": 783,
"sha512": "176975abaca449f9cc2d499298f5121215607cbb1a84cffa463901fd3a4aea2d63220ff7869b6f1c1e0daf0de1fa089f84b4271d265dc3dac0c350be4c57cfea",
"pids": [
1268
],
"md5": "b8a0c4ea37cc85958da5d380097ee305"
},
{
"yara": [],
"sha1": "7fcd784ff47900d3100e6145fa0d90667ac8c8b8",
"name": "f58aaf20dbeb8098_facebook%20480p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "f58aaf20dbeb809875a6cf3c449634e7e23a89605fd295f92a69e24bab4a38c3",
"urls": [],
"crc32": "65B0ECC2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/f58aaf20dbeb8098_facebook%20480p.dat",
"ssdeep": null,
"size": 511,
"sha512": "fef1facd1d965d785b43d43ec8818116de33f49c32d719186683a59e488ab206784a0532765fdd6b9867e0bf03a2cf50ca9c84199afa2beeab956aa008d5519f",
"pids": [
1268
],
"md5": "1ac69389c7281d2e43e9567db498064f"
},
{
"yara": [],
"sha1": "ddfc3d8c33703fa2ac962065c7b19241704c8733",
"name": "0d53bb3c2eaf89db_360%20degree%201920p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "0d53bb3c2eaf89db67cdf858098cb06275b87e2029e55ae243962577ecbaa551",
"urls": [],
"crc32": "E517E65D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/0d53bb3c2eaf89db_360%20degree%201920p.dat",
"ssdeep": null,
"size": 515,
"sha512": "3e5a0af1544a7976d3b377a5b3cb3fda07d6f0e6c49cf9581317ebc98f472a8fe26968107ce4ae19bff93b28a6295e2244b2d8788d6ca58cdca2367f22ba7464",
"pids": [
1268
],
"md5": "8aca98bb6853a157629f624340b897d7"
},
{
"yara": [],
"sha1": "6a334d7041081f2452c06a1c2c10e28bf34e66d5",
"name": "1d27ad1c99772218_360%20degree%20960p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "1d27ad1c99772218c1383e9b49e75a4012f00a31faa2a96a29f1447666b69177",
"urls": [],
"crc32": "CE8F83E1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/1d27ad1c99772218_360%20degree%20960p.dat",
"ssdeep": null,
"size": 513,
"sha512": "1dfb68b4e32c00ed5f5334ef4f3cb8d55ed74ca8c6ddf581dec3f0122af6184db6abae2cd741c9b38a95cb4afa35c01957a0e78ac360a4a1f3ac07cb4f185dc4",
"pids": [
1268
],
"md5": "a886c8426a9258886c23f3b45031d045"
},
{
"yara": [],
"sha1": "bee69753de9193333c5ee2126d6325c0a7507888",
"name": "5dc0bec14b06f7f8_360%20degree%201280p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "5dc0bec14b06f7f83d44173fb887f42f51c7c4aa3090738863f6a1778410232d",
"urls": [],
"crc32": "A1AB5D10",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/5dc0bec14b06f7f8_360%20degree%201280p.dat",
"ssdeep": null,
"size": 515,
"sha512": "897322df78edb17d1cc9e1a2a6863dc5dd4ab9e39545466e75a0dae3e123a5ce5b3b0f548b6acdff501381f56a1d9cb74119a51a82ecb5e13c23338ab6b691fc",
"pids": [
1268
],
"md5": "f6f7cbef641b5489624a7d96b639d975"
},
{
"yara": [],
"sha1": "0b1d57222eb3fa04f3451eca3e01795bb6318c0f",
"name": "3316407985513240_720p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "3316407985513240d9f33c9abd87898923dfd355db4130f264e7cf9765662186",
"urls": [],
"crc32": "31019835",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/3316407985513240_720p.dat",
"ssdeep": null,
"size": 783,
"sha512": "dfbea0e4cfc6a049d8979d289217d379c19029b596f3bebce0a66c37768b76bfa6f6ff72886aacb651334e75c509feaa6a7e035a4d1d38bce2776f9f62c74eab",
"pids": [
1268
],
"md5": "099dd62892cc889fd7bbb923ead0f085"
},
{
"yara": [],
"sha1": "ce5df1c73e6d400446bec6bda1a804e23bfb480b",
"name": "bfae7034b645d8ca_facebook%20720p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "bfae7034b645d8ca4590e5c6770f6244a35537ad8452d683faf3ba3faacbe429",
"urls": [],
"crc32": "9B334FC4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/bfae7034b645d8ca_facebook%20720p.dat",
"ssdeep": null,
"size": 513,
"sha512": "6a40725bbd4144a16d66827247025bf54648ffbb8b18bd778c822830af307099b6197a33ba24ad77623b528a17a97f8158d51d5aade61815903b7069f6ad98e9",
"pids": [
1268
],
"md5": "fd8b0dce9b99dc06a4ba223dedc45578"
},
{
"yara": [],
"sha1": "af6b5b7e0929e7d8b35d8d37f6c75925da8b7f1a",
"name": "93abf4ee81cc0171_tv%20ntsc.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "93abf4ee81cc017165ee53c698f3030c18e76f5a8269fb75608fd2e2b136cc1c",
"urls": [],
"crc32": "3CB8A75E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/93abf4ee81cc0171_tv%20ntsc.dat",
"ssdeep": null,
"size": 782,
"sha512": "9fbee7241c1846a880e57271d86f8e6ffa3e8ac876e6c95ab96ca5e3ebbc4dd7b038644587cc1eb5e0e58460aec5e505009d8e9ce4b56dd8597930b6790eab2a",
"pids": [
1268
],
"md5": "139e8dea21e501784b304af69f9f65a7"
},
{
"yara": [],
"sha1": "ddff8deb29f6541b53aa37b509f1039448530a90",
"name": "bd6d771088abf1bc_youtube%201080p%20hd.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "bd6d771088abf1bc972c17558b040c9e3a67510041c2d00707488b1534ea4f14",
"urls": [],
"crc32": "147CB7DD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/bd6d771088abf1bc_youtube%201080p%20hd.dat",
"ssdeep": null,
"size": 482,
"sha512": "997e9e4d791d7cf0e161e80264dbc86a6bb3cdf14a185874e8d1510b520945cbdcac610064ce596ca3bf6dc90ed225ae5152ea206a84bf79b4e77f9177140d4f",
"pids": [
1268
],
"md5": "a2e7cf92700cb5f41709195a6f113b9b"
},
{
"yara": [],
"sha1": "2dd5dae51bf1577d3284234dffb6a8584433a988",
"name": "b63f3f75f37b9f35_youtube%201440p%20%282k%29.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "b63f3f75f37b9f35791826e43aeb5e93ba2a8bb810dd9d4f4f257e4529b10c7b",
"urls": [],
"crc32": "2DF93DA0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/b63f3f75f37b9f35_youtube%201440p%20%282k%29.dat",
"ssdeep": null,
"size": 482,
"sha512": "549a50a509114644755bdd49ebdeefce8bfd5b5c0f588206bdd97bc03491db93e6b9494132aef535837a5f4ed7b2faf1dffcb5a6b206c4f027c2618b2a885717",
"pids": [
1268
],
"md5": "febc8754fdb299b0acd1a5051abebe0f"
},
{
"yara": [],
"sha1": "d4c3a4c1cb7c00a6865ccd3f2c462bf9c7f6c919",
"name": "f7f4dd177e90e3dc_youtube%20720p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "f7f4dd177e90e3dc77166cbcb7ab56766adcd20dc5b88165fb40d5923f1ce445",
"urls": [],
"crc32": "2C40F6B9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/f7f4dd177e90e3dc_youtube%20720p.dat",
"ssdeep": null,
"size": 481,
"sha512": "fdf24b3363f745c1987070de2611d7433e851a1988d31298ea478f6c2d35c7c0ae2b77e18c06eadd559cd791e77f4083bd0b767c4fee449f362c483712f0c172",
"pids": [
1268
],
"md5": "9ba0dbfbc1ca33904f63c11dea6c14fe"
},
{
"yara": [],
"sha1": "165515ad5712cdb3f56608843c767a9a6d08ab9b",
"name": "e67e6d756370aa6f_360%20degree%20640p.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "e67e6d756370aa6f48d085def05207b27d7d6d0daa357bb3e7ca264b483aa906",
"urls": [],
"crc32": "395D4D47",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/e67e6d756370aa6f_360%20degree%20640p.dat",
"ssdeep": null,
"size": 512,
"sha512": "27fa32c29de8a210439714bd8794e4d457bfe165852dacb07c6ae1bf0d95d85ae60fdd1504b0ec36ad226ccee5622b205fd9ae845cd933d320a64b00fc3845dd",
"pids": [
1268
],
"md5": "51460d6b1042a05a18328262f4722c7d"
},
{
"yara": [],
"sha1": "1dc7e5a6041a9d9b63d30766ef101cc4a862ffe9",
"name": "e244f623d37cd37f_vimeo%20mp4.dat",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"type": "ASCII text, with very long lines, with no line terminators",
"sha256": "e244f623d37cd37f9eee1f3c660d607e61980baa595ac829b8dc7ff94ddcadf3",
"urls": [],
"crc32": "12224939",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/550\/files\/e244f623d37cd37f_vimeo%20mp4.dat",
"ssdeep": null,
"size": 512,
"sha512": "f9bf24a96ed8ab0a6b81eac87cd1924e691ea3c1d35a12f7bc61859b3c2a1a4e41e734bd4f9d21f080161e32a801a04a170f195e7907a6be49699d54a4970a7c",
"pids": [
1268
],
"md5": "936a7194e3032d2ef90d9861fdc5c18f"
}
]Generic
[
{
"process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"process_name": "125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"pid": 1268,
"summary": {
"file_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\~DF190BC7F567482836.TMP",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\_debut_rl_cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"regkey_written": [
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DirectShow_EncoderMoniker",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\MostRecentApplication\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DirectShow_WaveFileFormatPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\FindPlay\\DefaultRecordFolder",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Zoom",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionWidth",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureLeft",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FullScreenSelected",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\MostRecentApplication\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\FilterData",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\Format",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionHeight",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\RD",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\CLSID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureRight",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Software\\SVar",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FirstRun",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureTop",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\FriendlyName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\WaveInId",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureMode",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureBottom",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\ClassManagerFlags"
],
"dll_loaded": [
"MMDevAPI.DLL",
"wdmaud.drv",
"gdi32.dll",
"C:\\Windows\\system32\\asycfilt.dll",
"kernel32.dll",
"UxTheme.dll",
"C:\\Windows\\system32\\ole32.dll",
"AUDIOSES.DLL",
"dwmapi.dll",
"C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll",
"API-MS-WIN-Service-Management-L1-1-0.dll",
"C:\\Windows\\syswow64\\MSCTF.dll",
"msacm32.drv",
"..\\debuthooksdll\\release\\debuthooksdll.dll",
"OLEAUT32.DLL",
"SspiCli.dll",
"midimap.dll",
"comctl32",
"ole32.dll",
"SHLWAPI.dll",
"CRYPTSP.dll",
"IMM32.dll",
"D3D10Warp.dll",
"API-MS-WIN-Service-winsvc-L1-1-0.dll",
"D3D10Level9.dll",
"WINTRUST.dll",
"MMDEVAPI.DLL",
"WindowsCodecs.dll",
"D3D11.dll",
"OLEAUT32.dll",
"debuthooksdll.dll",
"SHELL32.dll",
"RPCRT4.dll",
"psapi.dll",
"comctl32.dll",
"setupapi.dll",
"wmvcore.dll",
"C:\\Windows\\system32\\D3D10Warp.dll",
"avicap32.dll",
"Kernel32.dll",
"msdmo.dll",
"ADVAPI32.dll",
"SETUPAPI.dll",
"user32.dll",
"ddraw.dll"
],
"file_opened": [
"C:\\Windows\\System32\\wdmaud.drv",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Windows\\win.ini",
"C:\\ProgramData\\NCH Software\\Debut",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"C:\\ProgramData\\NCH Software"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressBurn\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Selections",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Registration\\NCH",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\WavePad\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Direct3D",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\WavePad\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark",
"HKEY_CURRENT_USER\\Software\\NCH Software\\VideoPad\\Settings",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Software",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw\\GammaCalibrator",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\msasn1",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{860BB310-5D01-11D0-BD3B-00A0C911CE86}",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\WebcamOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Instance",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\OverlayEffect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115",
"HKEY_CURRENT_USER\\Software\\Microsoft\\DirectShow\\PushClock",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoEffects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Debut\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows Media\\WMSDK\\Metering",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{860BB310-5D01-11D0-BD3B-00A0C911CE86}\\Instance",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Direct3D",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\System\\Setup",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\VFW",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}",
"HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressBurn\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Multimedia\\Audio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
"HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\WavePad\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Direct3D\\Drivers",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\DirectShow\\MediaObjects\\Categories\\860bb310-5d01-11d0-bd3b-00a0c911ce86",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\MediaResources\\msvideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw\\Compatibility",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties",
"HKEY_CLASSES_ROOT\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\\Instance\\Disabled",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\VideoPad\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressBurn\\Settings",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\MainWindow",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CLASSES_ROOT\\CLSID",
"HKEY_CLASSES_ROOT\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\\Instance",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension",
"HKEY_CLASSES_ROOT\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\FindPlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\OutputSettingsScreenCapture",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\DirectShow\\MediaObjects\\Categories\\33d9a762-90c8-11d0-bd43-00a0c911ce86",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Direct3D\\DX6TextureEnumInclusionList",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_CURRENT_USER\\Software\\NCH Software\\WavePad\\Settings",
"HKEY_CURRENT_USER\\Control Panel\\Desktop",
"HKEY_CLASSES_ROOT\\DirectShow\\MediaObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Multimedia\\MIDIMap",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\\Namespaces",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Debut\\Distributor",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_CURRENT_USER\\System\\CurrentControlSet\\Control\\MediaProperties\\PrivateProperties\\Joystick\\Winmm",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Debut\\Scheduler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Prism\\Settings",
"HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressBurn\\Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectDraw\\MostRecentApplication",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\DRIVERS32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{d87a0b1a-8975-43e7-9879-c2912b61be65}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}",
"HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Prism\\Settings"
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\_debut_rl_cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"regkey_deleted": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Multimedia\\ActiveMovie\\Filter Cache"
],
"file_exists": [
"",
"C:\\ProgramData\\NCH Software\\Debut",
"C:\\ProgramData\\NCH Software",
"C:\\ProgramData\\NCH Software\\Debut\\splash.jpg",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin"
],
"mutex": [
"Local\\DDrawDriverObjectListMutex",
"Global\\DebutSubStatRun",
"Local\\__DDrawCheckExclMode__",
"Local\\MidiMapper_modLongMessage_RefCnt",
"Global\\DebutStarting",
"Local\\__DDrawExclMode__",
"Local\\DDrawWindowListMutex"
],
"file_failed": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\DebutCounts.txt",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\wdmaud.drv",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"guid": [
"{275c23e2-3747-11d0-9fea-00aa003f8646}",
"{33d9a762-90c8-11d0-bd43-00a0c911ce86}",
"{e436ebb1-524f-11ce-9f53-0020af0ba770}",
"{b79bb0b0-33c1-11d1-abe1-00a0c905f375}",
"{2faba4c7-4da9-4013-9697-20cc3fd40f85}",
"{cda42200-bd88-11d0-bd4e-00a0c911ce86}",
"{0000011a-0000-0000-c000-000000000046}",
"{00000000-0000-0000-c000-000000000046}",
"{e30629d2-27e5-11ce-875d-00608cb78066}",
"{060af76c-68dd-11d0-8fc1-00c04fd9189d}",
"{f64a6da6-e8af-4b7b-bca8-847ae765d538}",
"{56a868a9-0ad4-11ce-b03a-0020af0ba770}",
"{62be5d10-60eb-11d0-bd3b-00a0c911ce86}",
"{29840822-5b84-11d0-bd3b-00a0c911ce86}",
"{bf87b6e1-8c27-11d0-b3f0-00aa003761c5}",
"{4315d437-5b8c-11d0-bd3b-00a0c911ce86}",
"{93e5a4e0-2d50-11d2-abfa-00a0c9c6e38d}",
"{860bb310-5d01-11d0-bd3b-00a0c911ce86}",
"{30a99515-1527-4451-af9f-00c5f0234daf}",
"{56a86897-0ad4-11ce-b03a-0020af0ba770}",
"{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}",
"{275c23e1-3747-11d0-9fea-00aa003f8646}",
"{e436ebb3-524f-11ce-9f53-0020af0ba770}"
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201080p%20HD.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201920p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%201280p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20480p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Twitter%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20960p.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99.bin",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20640p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%202160p%20%284K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Animated%20GIF.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Widescreen%20TV.dat",
"C:\\Windows\\win.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Vimeo%20MP4.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20HD%201080.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\360%20Degree%20720p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20NTSC.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Internet%20Video.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\Facebook%201080p.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\YouTube%201440p%20%282K%29.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\PS3%20720.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\TV%20PAL.dat",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets\\HD%201080p.dat"
],
"regkey_read": [
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\DX6TextureEnumInclusionList\\Size",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DirectShow_WaveFileFormatPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ForceFixedFramerate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ResizeType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_USE_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_CURRENT_USER\\System\\CurrentControlSet\\Control\\MediaProperties\\PrivateProperties\\Joystick\\Winmm\\wheel",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FollowCursor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\SS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wavemapper",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewAlphaSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableWiderSurfaces",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DV_Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_MAX_BITRATE",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Framerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_CHANNEL_NUM",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureRight",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave7",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_CODEC_MP4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableDDSCAPSInDDSD",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\DisplayTimestamp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave5",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Runs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave3",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Framerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSoundFromMouseClicks",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableMMX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureMode",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FirstRun",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\MP4_iPodMuxer",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightMiddleClickColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},2",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\ClassManagerFlags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ResizeKeepRatio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\Extensions\\NdrOleExtDLL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Zoom",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Height",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave9",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\Downgraded",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi3",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ResizeKeepRatio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MsGolf98\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\UseNonLocalVidMem",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100\\ID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\FriendlyName",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAspectRatio",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_BITRATE",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Width",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ScorchedPlanet\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\SoundMoniker",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\RequireSDKLayers",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightMoveColor",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\UC",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightLeftClickColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\MP4_PSPMuxer",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Resize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DV_Channels",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewShadow",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamBubbleCount",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_BITRATE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WarnSpaceBelow",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Exposurerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\EnumerateAttachedSecondaries",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\DeviceState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi9",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WordWrap",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\RecordWhenRun",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ShowFrameRate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Direct3D\\RequireSDKLayers",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureTop",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureFPS",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\RD",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\FindPlay\\DefaultRecordFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ResizeType",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_TimeLapse",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{026e516e-b814-414b-83cd-856d6fef4822},2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamMPEG2Transport",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_CODEC_MP4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAspectRatioNum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAspectRatioDen",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSoundOnlyWhenRecording",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{a45c254e-df1c-4efd-8020-67d146a850e0},2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\DisableAGPSupport",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionHeight",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraftDemo\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\FullScreenSelected",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ChangeFramerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ShowCursor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{1da5d803-d492-4edd-8c23-e0c0ffee7f0e},0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},6",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\CLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSound",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo1",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AVI_DV_Samplerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo3",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{026e516e-b814-414b-83cd-856d6fef4822},2",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureSoundFromMic",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ShowHighlightCursor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\EnablePrintScreen",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightMoveRadius",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\LoadLastSelection",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\DX6TextureEnumInclusionList\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Bug!\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Savage\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamVideoInputPin",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_ChangeFramerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave2",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Rogue Squadron\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wave8",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Terracide\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{a45c254e-df1c-4efd-8020-67d146a850e0},2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\wdmaud.drv",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\WaveInId",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\EnableBalloonTips",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Capture\\{d87a0b1a-8975-43e7-9879-c2912b61be65}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},6",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_USE_QUALITY_SCALE",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ModeXOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureLeft",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft100\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\Webcam",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_TimeLapse",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NortonSystemInfo\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightClickDelay",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ShowBlanket",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisQualityBenchmark\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\Key",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midimapper",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenSelectionWidth",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},2",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\InstallDate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\MMDevices\\Audio\\Render\\{c8ce7349-e519-42ea-bfb7-698f1844ee25}\\Properties\\{b3f8fa53-0004-438e-9003-51a46e139bfc},1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\FlipNoVsync",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\DemolitionDerby2\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_Resize",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\AUDIO_KEEP_CHANNEL",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\Diablo\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo7",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\Format",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCapture16bit",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\Drivers\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Direct3D\\Drivers\\Size",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_CURRENT_USER\\Control Panel\\Desktop\\SmoothScroll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\SilentThunder\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi7",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi1",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\DisableAero",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo9",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightClickRadius",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\midi8",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Drivers32\\msvideo8",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\ScreenVideoSettings\\EditOutput_ForceFixedFramerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ZiffDavisWinMarkBenchmark\\ID",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Software\\SVar",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\MortalKombat3\\Flags",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Registration\\ID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\ActiveMovie\\devenum\\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\\Microphone (High Definition Aud\\UseMixer",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\HighlightRightClickColor",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Height",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Exposurerate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\ThirdDimension\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ForceAGPSupport",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ActualSizePreview",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\CaptureMonitor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\EmulationOnly",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\VIDEO_LOSSLESS_TYPE_MP4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay\\ID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\StarCraft115\\Flags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\Compatibility\\NHLPowerPlay\\Name",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\VideoOutput\\EditOutput_Width",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureBottom",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamAudioInputPin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\DirectDraw\\ForceRefreshRate",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\ScreenCaptureHWND",
"HKEY_CURRENT_USER\\Software\\NCH Software\\Debut\\Settings\\WebcamFormat",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder"
],
"directory_enumerated": [
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ScheduleTasks\\*.dat",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local"
],
"directory_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ScheduleTasks",
"C:\\ProgramData\\NCH Software\\Debut",
"C:\\Users\\cuck\\AppData\\Roaming\\NCH Software\\Debut\\ComputerPresets",
"C:\\ProgramData\\NCH Software",
"C:\\Users\\cuck\\Videos\\Debut"
]
},
"first_seen": 1561373590.7344,
"ppid": 2308
},
{
"process_path": "C:\\Windows\\System32\\lsass.exe",
"process_name": "lsass.exe",
"pid": 476,
"summary": {},
"first_seen": 1561373590.3281,
"ppid": 376
}
]Signatures
[
{
"markcount": 3,
"families": [],
"description": "Queries for the computername",
"severity": 1,
"marks": [
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1561373590.9374,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 148
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1561373591.1244,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 1236
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1561373591.3284,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 4882
}
],
"references": [],
"name": "antivm_queries_computername"
},
{
"markcount": 1,
"families": [],
"description": "This executable has a PDB path",
"severity": 1,
"marks": [
{
"category": "pdb_path",
"ioc": "c:\\sourcecode\\debut\\release\\Debut.pdb",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "has_pdb"
},
{
"markcount": 1,
"families": [],
"description": "Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available",
"severity": 1,
"marks": [
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "GlobalMemoryStatusEx",
"return_value": 1,
"arguments": {},
"time": 1561373591.5464,
"tid": 2500,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 7610
}
],
"references": [],
"name": "antivm_memory_available"
},
{
"markcount": 2,
"families": [],
"description": "The file contains an unknown PE resource name possibly indicative of a packer",
"severity": 1,
"marks": [
{
"category": "resource name",
"ioc": "WAVE",
"type": "ioc",
"description": null
},
{
"category": "resource name",
"ioc": "None",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "pe_unknown_resource_name"
},
{
"markcount": 1,
"families": [],
"description": "Allocates read-write-execute memory (usually to unpack itself)",
"severity": 2,
"marks": [
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1268,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 45056,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x745f4000"
},
"time": 1561373591.2344,
"tid": 2740,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1268,
"type": "call",
"cid": 3443
}
],
"references": [],
"name": "allocates_rwx"
},
{
"markcount": 9,
"families": [],
"description": "Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation",
"severity": 2,
"marks": [
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512170496,
"total_number_of_free_bytes": 23512170496,
"total_number_of_bytes": 34252779520
},
"time": 1561373592.0934,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 8940
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512072192,
"total_number_of_free_bytes": 23512072192,
"total_number_of_bytes": 34252779520
},
"time": 1561373607.0934,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 56585
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512072192,
"total_number_of_free_bytes": 23512072192,
"total_number_of_bytes": 34252779520
},
"time": 1561373622.0934,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 104464
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512072192,
"total_number_of_free_bytes": 23512072192,
"total_number_of_bytes": 34252779520
},
"time": 1561373637.0934,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 155792
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512072192,
"total_number_of_free_bytes": 23512072192,
"total_number_of_bytes": 34252779520
},
"time": 1561373652.0934,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 207391
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512072192,
"total_number_of_free_bytes": 23512072192,
"total_number_of_bytes": 34252779520
},
"time": 1561373667.0934,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 258511
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512072192,
"total_number_of_free_bytes": 23512072192,
"total_number_of_bytes": 34252779520
},
"time": 1561373682.1564,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 309698
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512072192,
"total_number_of_free_bytes": 23512072192,
"total_number_of_bytes": 34252779520
},
"time": 1561373697.1564,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 360938
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Users\\cuck\\Videos\\Debut",
"free_bytes_available": 23512006656,
"total_number_of_free_bytes": 23512006656,
"total_number_of_bytes": 34252779520
},
"time": 1561373712.1564,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 412151
}
],
"references": [],
"name": "antivm_disk_size"
},
{
"markcount": 1,
"families": [],
"description": "Detects the presence of Wine emulator",
"severity": 3,
"marks": [
{
"call": {
"category": "system",
"status": 0,
"stacktrace": [],
"last_error": 0,
"nt_status": -1073741515,
"api": "LdrGetProcedureAddress",
"return_value": 3221225785,
"arguments": {
"ordinal": 0,
"module": "kernel32",
"module_address": "0x75bb0000",
"function_address": "0x0050b8a4",
"function_name": "wine_get_unix_file_name"
},
"time": 1561373590.9374,
"tid": 2740,
"flags": {}
},
"pid": 1268,
"type": "call",
"cid": 135
}
],
"references": [],
"name": "antiemu_wine"
}
]Yara
The Yara rules did not detect anything in the file.
Network
{
"tls": [],
"udp": [
{
"src": "192.168.56.101",
"dst": "192.168.56.255",
"offset": 546,
"time": 3.071967124939,
"dport": 137,
"sport": 137
},
{
"src": "192.168.56.101",
"dst": "192.168.56.255",
"offset": 5226,
"time": 9.1089091300964,
"dport": 138,
"sport": 138
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7070,
"time": 2.9991290569305,
"dport": 5355,
"sport": 51001
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7398,
"time": 1.0146839618683,
"dport": 5355,
"sport": 53595
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7726,
"time": 3.0126810073853,
"dport": 5355,
"sport": 53848
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 8054,
"time": 1.5181720256805,
"dport": 5355,
"sport": 54255
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 8382,
"time": -0.11478495597839,
"dport": 5355,
"sport": 55314
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 8710,
"time": 1.5493161678314,
"dport": 1900,
"sport": 1900
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 28120,
"time": 1.0506119728088,
"dport": 3702,
"sport": 49152
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 36504,
"time": 3.2198779582977,
"dport": 1900,
"sport": 53598
}
],
"dns_servers": [],
"http": [],
"icmp": [],
"smtp": [],
"tcp": [],
"smtp_ex": [],
"mitm": [],
"hosts": [],
"pcap_sha256": "934a614ca143d35e92229a5a57e81131b2fb03b4e7b93c62a25812555a4be0b6",
"dns": [],
"http_ex": [],
"domains": [],
"dead_hosts": [],
"sorted_pcap_sha256": "6091c7f2d3a2c74bbfaa8277f7765b44cb459cc130e39f913ddcea7e5eb99e89",
"irc": [],
"https_ex": []
}Screenshots
Hashes [?]
| Property | Value |
|---|---|
| MD5 | 71b1ead5141a4f5e64c0359bddc8a791 |
| SHA256 | 125272acbe11e2a783d67e894cc56efc1ddc42f48b9a541ac8aeb47c3a700d99 |
Error Messages
These are some of the error messages that can appear related to debut.exe:
debut.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
debut.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
Debut Video Capture Software has stopped working.
End Program - debut.exe. This program is not responding.
debut.exe is not a valid Win32 application.
debut.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
What will you do with Debut.exe?
To help other users, please let us know what you will do with Debut.exe:
Malware or legitimate?
If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.
And now some shameless self promotion ;)
Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.
If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.
Comments
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
No comments posted yet.