Yes, as we know, there is no Internet Explorer in the PE, so some of these things it won't find. Your screenshot reads like this: 1. MSRA was able to open the FEATURE_ZONE_ELEVATION key in the registry. 2. MSRA was not able to find a value called msra.exe 3. MSRA was not able to find a value called * 4. MSRA closed the FEATURE_ZONE_ELEVATION key. OK so now know that MSRA wants to do something with that key. What that is, we do not know at this point. However, it may not do anything. I do not know what FEATURE_ZONE_ELEVATION is for, but maybe you can research that. It may be like Image Execution Options, in which is a registry key that contains a list of programs that are not allowed to open. So it may be perfectly fine for it not be able to find that key after all. So what you need to do next is run this app on a real OS and watch it with ProcMon. Then find where MSRA looks for that key in the real OS and see what it does. It may well be that in Windows, that key isn't there either. To sum up, getting a NAME NOT FOUND message in ProcMon doesn't mean there is a problem. It may be perfectly normal behaviour.