

HKEY_LOCAL_MACHINE

[SOFTWARE\rising]
   [SOFTWARE\rising\REC]
   |___ֵ:InstallPath            ֵ:REG_SZ                      ֵ:C:\Program Files (x86)\Rising\REC
   |___ֵ:DataPath               ֵ:REG_SZ                      ֵ:C:\ProgramData\Rising\REC
   |___ֵ:libver13               ֵ:REG_SZ                      ֵ:34.1120.0001
   |___ֵ:libtime13              ֵ:REG_SZ                      ֵ:2022-11-20 02:54:21
   |___ֵ:Version                ֵ:REG_SZ                      ֵ:3.0.50.28
   |___ֵ:UpdateTime             ֵ:REG_SZ                      ֵ:2022-11-19 12:00:39
   |___ֵ:autotest               ֵ:REG_DWORD                   ֵ:0
   |___ֵ:LastUseMode            ֵ:REG_DWORD                   ֵ:1


MoveFileEx Reg : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations

\??\C:\WINDOWS\system32\gamingservicesproxy.dll.0
