{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\SysWOW64\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsVerifyHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\SysWOW64\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsGetSignature",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsCreateHash",
    "Dll":  "C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\SysWOW64\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\SysWOW64\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\2.5.29.32",
    "PSChildName":  "2.5.29.32",
    "FuncName":  "FormatVerisignExtension",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllFormatObject\\1.3.6.1.5.5.7.3.4",
    "PSChildName":  "1.3.6.1.5.5.7.3.4",
    "FuncName":  "FormatPKIXEmailProtection",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptEncodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "EncodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "EncodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Encode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllEncodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoEncode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.4",
    "PSChildName":  "1.2.840.113549.1.9.16.2.4",
    "FuncName":  "EssContentHintDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.3",
    "PSChildName":  "1.2.840.113549.1.9.16.2.3",
    "FuncName":  "EssMLHistoryDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.2",
    "PSChildName":  "1.2.840.113549.1.9.16.2.2",
    "FuncName":  "EssSecurityLabelDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.12",
    "PSChildName":  "1.2.840.113549.1.9.16.2.12",
    "FuncName":  "EssSignCertificateDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.11",
    "PSChildName":  "1.2.840.113549.1.9.16.2.11",
    "FuncName":  "EssKeyExchPreferenceDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.2.1",
    "PSChildName":  "1.2.840.113549.1.9.16.2.1",
    "FuncName":  "EssReceiptRequestDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObjectEx\\1.2.840.113549.1.9.16.1.1",
    "PSChildName":  "1.2.840.113549.1.9.16.1.1",
    "FuncName":  "EssReceiptDecodeEx",
    "Dll":  "C:\\Windows\\System32\\inetcomm.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.4",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.3",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.3",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.4.2",
    "PSChildName":  "1.3.6.1.4.1.311.2.4.2",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.4",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.4",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.30",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.30",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.28",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.28",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.27",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.27",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.26",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.26",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.25",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.25",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.20",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.20",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.15",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.15",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.12",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.12",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.11",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.11",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.2.1.10",
    "PSChildName":  "1.3.6.1.4.1.311.2.1.10",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.4",
    "PSChildName":  "1.3.6.1.4.1.311.16.4",
    "FuncName":  "DecodeRecipientID",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.16.1.1",
    "PSChildName":  "1.3.6.1.4.1.311.16.1.1",
    "FuncName":  "DecodeAttrSequence",
    "Dll":  "C:\\Windows\\System32\\cryptdlg.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.3",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.3",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.2",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.2",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\1.3.6.1.4.1.311.12.2.1",
    "PSChildName":  "1.3.6.1.4.1.311.12.2.1",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2223",
    "PSChildName":  "#2223",
    "FuncName":  "WVTAsn1CatMemberInfo2Decode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2222",
    "PSChildName":  "#2222",
    "FuncName":  "WVTAsn1CatMemberInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2221",
    "PSChildName":  "#2221",
    "FuncName":  "WVTAsn1CatNameValueDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2130",
    "PSChildName":  "#2130",
    "FuncName":  "WVTAsn1SpcSigInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2012",
    "PSChildName":  "#2012",
    "FuncName":  "WVTAsn1SealingTimestampAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2011",
    "PSChildName":  "#2011",
    "FuncName":  "WVTAsn1SealingSignatureAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2010",
    "PSChildName":  "#2010",
    "FuncName":  "WVTAsn1IntentToSealAttributeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2009",
    "PSChildName":  "#2009",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2008",
    "PSChildName":  "#2008",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2007",
    "PSChildName":  "#2007",
    "FuncName":  "WVTAsn1SpcSpOpusInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2006",
    "PSChildName":  "#2006",
    "FuncName":  "WVTAsn1SpcStatementTypeDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2005",
    "PSChildName":  "#2005",
    "FuncName":  "WVTAsn1SpcLinkDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2004",
    "PSChildName":  "#2004",
    "FuncName":  "WVTAsn1SpcPeImageDataDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2003",
    "PSChildName":  "#2003",
    "FuncName":  "WVTAsn1SpcIndirectDataContentDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2002",
    "PSChildName":  "#2002",
    "FuncName":  "WVTAsn1SpcFinancialCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2001",
    "PSChildName":  "#2001",
    "FuncName":  "WVTAsn1SpcMinimalCriteriaInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 1\\CryptDllDecodeObject\\#2000",
    "PSChildName":  "#2000",
    "FuncName":  "WVTAsn1SpcSpAgencyInfoDecode",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "DbgUiContinue",
    "Dll":  "C:\\Windows\\System32\\ntdll.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipVerifyHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "AutoApproveHash",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "VerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPVerifyIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllVerifyIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipVerify",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyDelSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipDelSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsDelSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "RemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPRemoveSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllRemoveSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipRemove",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyPutSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipPutSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsPutSignature",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "PutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPPutSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllPutSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipPut",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "IsMyFileExtension",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "PsIsMyFileType",
    "Dll":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\pwrshsip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipIsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "IsFileSupportedName",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPIsMyTypeOfFile",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllIsMyFileType2\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipIsFmt2",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetSignature",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\mysip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7xSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "GetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPGetSignedDataMsg",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSignedDataMsg\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGet",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetSealedDigest\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetSealedDigest",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipGetCaps",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPGetCaps",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllGetCaps\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipGetCap",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "PSChildName":  "{E59B6E68-3312-4738-961F-DB9405B2DDCB}",
    "FuncName":  "MyCreateHash",
    "Dll":  "C:\\temp\\MySip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A43-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{DE351A42-8E59-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "PSChildName":  "{D1D04F0C-9ABA-430D-B0E4-D7E96ACCE66C}",
    "FuncName":  "EappxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "PSChildName":  "{CF78C6DE-64A2-4799-B506-89ADFF5D16D6}",
    "FuncName":  "EappxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AABA-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB9-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "PSChildName":  "{C689AAB8-8E78-11D0-8C47-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "PSChildName":  "{9F3053C5-439D-4BF7-8A77-04F0450A1D9F}",
    "FuncName":  "EsdSipCreateHash",
    "Dll":  "C:\\Windows\\System32\\EsdSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "PSChildName":  "{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}",
    "FuncName":  "CryptSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\WINTRUST.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "PSChildName":  "{603BCC1F-4B59-4E08-B724-D2C6297EF351}",
    "FuncName":  "GetLegitMSSignature",
    "Dll":  "C:\\temp\\MySIP.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "PSChildName":  "{5598CFF1-68DB-4340-B57F-1CACF88C9A51}",
    "FuncName":  "P7SipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{1A610570-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "PSChildName":  "{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "PSChildName":  "{0F5F58B3-AADE-4B9A-A434-95742D92ECEB}",
    "FuncName":  "AppxBundleSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "PSChildName":  "{0AC5DF4B-CE07-4DE2-B76E-23C839A09FD1}",
    "FuncName":  "AppxSipCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\AppxSip.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "PSChildName":  "{06C9E010-38CE-11D4-A2A3-00104BD35090}",
    "FuncName":  "CreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\wshext.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{000C10F1-0000-0000-C000-000000000046}",
    "PSChildName":  "{000C10F1-0000-0000-C000-000000000046}",
    "FuncName":  "MsiSIPCreateIndirectData",
    "Dll":  "C:\\Windows\\System32\\MSISIP.DLL"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CryptSIPDllCreateIndirectData\\{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "PSChildName":  "{00000000-DEAD-BEEF-DEAD-DEADBABECAFE}",
    "FuncName":  "GtSipCreate",
    "Dll":  "C:\\Users\\Administrator\\Downloads\\GTSIPProvider.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\Ldap",
    "PSChildName":  "Ldap",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}
{
    "Path":  "Microsoft.PowerShell.Core\\Registry::HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\OID\\EncodingType 0\\CertDllOpenStoreProv\\#16",
    "PSChildName":  "#16",
    "FuncName":  "LdapProvOpenStore",
    "Dll":  "C:\\Windows\\System32\\cryptnet.dll"
}