

HKEY_LOCAL_MACHINE

[SOFTWARE\rising]
   [SOFTWARE\rising\REC]
   |___ֵ:InstallPath            ֵ:REG_SZ                      ֵ:C:\Program Files (x86)\Rising\REC
   |___ֵ:DataPath               ֵ:REG_SZ                      ֵ:C:\ProgramData\Rising\REC
   |___ֵ:libver13               ֵ:REG_SZ                      ֵ:35.0128.0001
   |___ֵ:libtime13              ֵ:REG_SZ                      ֵ:2023-01-28 02:54:09
   |___ֵ:Version                ֵ:REG_SZ                      ֵ:3.0.50.35
   |___ֵ:UpdateTime             ֵ:REG_SZ                      ֵ:2023-01-10 12:02:08
   |___ֵ:autotest               ֵ:REG_DWORD                   ֵ:0
   |___ֵ:LastUseMode            ֵ:REG_DWORD                   ֵ:1


MoveFileEx Reg : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations

\??\C:\Windows\system32\spool\DRIVERS\x64\3\New\MXDWDRV.DLL
\??\C:\Windows\system32\spool\DRIVERS\x64\3\MXDWDRV.DLL
\??\C:\Windows\system32\spool\DRIVERS\x64\3\New\PJLMON.DLL
\??\C:\Windows\system32\spool\DRIVERS\x64\3\PJLMON.DLL
\??\C:\Windows\system32\spool\DRIVERS\W32X86\3\New\mxdwdrv.dll
\??\C:\Windows\system32\spool\DRIVERS\W32X86\3\mxdwdrv.dll
\??\C:\Windows\system32\spool\DRIVERS\W32X86\3\New\PrintConfig.dll
\??\C:\Windows\system32\spool\DRIVERS\W32X86\3\PrintConfig.dll
\??\C:\Windows\system32\spool\DRIVERS\x64\3\New\PrintConfig.dll
\??\C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
\??\C:\Users\ruixi\AppData\Local\Temp\nsp24CE.tmp\7z-out\
