Search notes:

Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization\HvSocket

TODO

This registry is somehow related to the Service SIDs:

S-1-5-80-2620808479-2171380039-3191355562-2070425692-3097948119
S-1-5-80-1523878533-411328482-2798077809-3098663872-2604013308 (?)
S-1-5-80-979556362-403687129-3954533659-2335141334-1547273080
S-1-5-80-880578595-1860270145-482643319-2788375705-1540778122