|
Key
|
Name
|
Value
|
Times
|
| HKLM\SOFTWARE\CLASSES\.ASP
|
|
aspfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.BAT
|
|
batfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CER
|
|
CERFile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CHM
|
|
chm.file
|
1 |
| HKLM\SOFTWARE\CLASSES\.CMD
|
|
cmdfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.COM
|
|
comfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CPL
|
|
cplfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CRT
|
|
CERFile
|
1 |
| HKLM\SOFTWARE\CLASSES\.EXE
|
|
exefile
|
3 |
| HKLM\SOFTWARE\CLASSES\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\INPROCSERVER32
|
|
%SystemRoot%\system32\SHELL32.dll
|
1 |
| HKLM\SOFTWARE\CLASSES\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\INPROCSERVER32
|
|
C:\WINDOWS\system32\urlmon.dll
|
2 |
| HKLM\SOFTWARE\CLASSES\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\INPROCSERVER32
|
ThreadingModel |
Both
|
1 |
| HKLM\SOFTWARE\CLASSES\CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}\INPROCSERVER32
|
|
shell32.dll
|
1 |
| HKLM\SOFTWARE\CLASSES\DIRECTORY
|
AlwaysShowExt |
|
1 |
| HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\FOLDEREXTENSIONS\{FBEB8A05-BEEE-4442-804E-409D6C4515E9}
|
DriveMask |
32
|
1 |
| HKLM\SOFTWARE\CLASSES\EXEFILE\SHELL\OPEN\COMMAND
|
|
"%1" %*
|
2 |
| HKLM\SOFTWARE\Microsoft\CTF\SystemShared\
|
CUAS |
0
|
1 |
| HKLM\SYSTEM\CurrentControlSet\Control\Session Manager
|
CriticalSectionTimeout |
2592000
|
1 |
| HKLM\SYSTEM\Setup
|
OsLoaderPath |
\
|
2 |
| HKLM\SYSTEM\Setup
|
SystemPartition |
\Device\HarddiskVolume1
|
2 |
| HKLM\SYSTEM\Setup
|
SystemSetupInProgress |
0
|
1 |
| HKLM\SYSTEM\WPA\MediaCenter
|
Installed |
0
|
1 |
| HKLM\Software\Microsoft\.NETFramework
|
InstallRoot |
C:\WINDOWS\Microsoft.NET\Framework\
|
9 |
| HKLM\Software\Microsoft\.NETFramework\Policy\\v4.0
|
30319 |
30319-30319
|
1 |
| HKLM\Software\Microsoft\COM3
|
Com+Enabled |
1
|
2 |
| HKLM\Software\Microsoft\COM3
|
REGDBVersion |
0x0b00000000000000
|
2 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL |
0x421127aa20cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System,2.0.0.0,,b77a5c561934e089,MSIL |
0x8a57dea520cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL |
0x18bb1ba420cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL |
0x9cbf64a520cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL |
0x028b82a120cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL |
0x1ab45fb020cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL |
0xb4074cae20cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86 |
0x58d936a320cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL |
0xa6ff4ea820cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
System.Xml,2.0.0.0,,b77a5c561934e089,MSIL |
0xca1b97a220cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\GACChangeNotification\Default
|
mscorlib,2.0.0.0,,b77a5c561934e089,x86 |
0xa8ce1d9f20cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
|
LatestIndex |
117
|
3 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\291a02d0\6
|
DisplayName |
System.Xml,2.0.0.0,,b77a5c561934e089
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\291a02d0\6
|
LastModTime |
0xca1b97a220cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\291a02d0\6
|
SIG |
0xe129b85668d5c94a83901a595a688da0546fb0968a3ad8f39d84fd920ec9
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\291a02d0\6
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\643db07b\1c
|
DisplayName |
System.Web,2.0.0.0,,b03f5f7f11d50a3a
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\643db07b\1c
|
LastModTime |
0x58d936a320cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\643db07b\1c
|
SIG |
0x257ea63099a54b47b394ae802aab504d19f0e298ec19246fcdb594503704
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\643db07b\1c
|
Status |
8194
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\6abb48d8\40
|
DisplayName |
System.Management,2.0.0.0,,b03f5f7f11d50a3a
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\6abb48d8\40
|
LastModTime |
0x1ab45fb020cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\6abb48d8\40
|
SIG |
0x3e169fe688ba0044a1e06d7325a897046350b207203b659a3f4acb1d6fd4
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\6abb48d8\40
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\7f729234\b
|
DisplayName |
System.Deployment,2.0.0.0,,b03f5f7f11d50a3a
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\7f729234\b
|
LastModTime |
0x9cbf64a520cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\7f729234\b
|
SIG |
0xaa6a30bb5ee45e4395aee8e3e013862cc3e045ee0eeb054e6d82e3b4dc36
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\7f729234\b
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6e9ac653\7
|
DisplayName |
System,2.0.0.0,,b77a5c561934e089
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6e9ac653\7
|
LastModTime |
0x8a57dea520cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6e9ac653\7
|
SIG |
0x7739f7fe32588e438bd70fda47be005ca87ed832d6e6b76aa0302a427ffe
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6e9ac653\7
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\67e63d5c\5
|
DisplayName |
System.Configuration,2.0.0.0,,b03f5f7f11d50a3a
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\67e63d5c\5
|
LastModTime |
0x18bb1ba420cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\67e63d5c\5
|
SIG |
0x13b985b524af744ea7870ebe1b5d5d0658961b3f64a74093492875c9d8f1
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\67e63d5c\5
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\7949fb97\42
|
DisplayName |
Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\7949fb97\42
|
LastModTime |
0x421127aa20cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\7949fb97\42
|
SIG |
0x8d608f73d22b3548baf6a7faf89c5f230b86a6a7c448b7f134ef800ede26
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\7949fb97\42
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9
|
DisplayName |
System.Drawing,2.0.0.0,,b03f5f7f11d50a3a
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9
|
LastModTime |
0x028b82a120cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9
|
SIG |
0xd13b44b636575b40b535819858133665d8507ae68706294dda848b7a1e72
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\3fcdfaca\9
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\319545b3\8
|
DisplayName |
mscorlib,2.0.0.0,,b77a5c561934e089
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\319545b3\8
|
LastModTime |
0xa8ce1d9f20cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\319545b3\8
|
Modules |
sortkey.nlp|sorttbls.nlp|big5.nlp|bopomofo.nlp|ksc.nlp|prc.nlp|prcp.nlp|xjis.nlp|normidna.nlp|normnfc.nlp|normnfd.nlp|normnfkc.nlp|normnfkd.nlp
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\319545b3\8
|
SIG |
0x61498a5bb093b143a337bdf5962ece99bd6c58fc8f03105a020331f4a600
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\319545b3\8
|
Status |
8198
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\268e923b\10
|
DisplayName |
System.Windows.Forms,2.0.0.0,,b77a5c561934e089
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\268e923b\10
|
LastModTime |
0xa6ff4ea820cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\268e923b\10
|
SIG |
0x44a949e4640e604da04329762516a96e6e1fa3a76770071df15dc4d908f9
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\268e923b\10
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\61a5c1bb\1d
|
DisplayName |
System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\61a5c1bb\1d
|
LastModTime |
0xb4074cae20cfcb01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\61a5c1bb\1d
|
SIG |
0x564f729ebc6f6b4bb3dc6f535b33f8fbd8487686c42a2af9e970a5ba9956
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\61a5c1bb\1d
|
Status |
4098
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\3c74e9a9\8
|
ConfigMask |
4361
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\3c74e9a9\8
|
ConfigString |
ZAP--0000-0000
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\3c74e9a9\8
|
DisplayName |
mscorlib,2.0.0.0,,b77a5c561934e089
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\3c74e9a9\8
|
ILDependencies |
0xc5e25079b3459531080000000200000000000000
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\3c74e9a9\8
|
MVID |
0x642534209e13d16e93b80a628742d2ee
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\3c74e9a9\8
|
Status |
0
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\52628d2e\46
|
ConfigMask |
4361
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\52628d2e\46
|
ConfigString |
ZAP--0000-0000
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\52628d2e\46
|
DisplayName |
Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\52628d2e\46
|
ILDependencies |
0x6410990c3b928e26100000000200000000000000c0d4c76dcafacd3f0900
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\52628d2e\46
|
MVID |
0x900525e192ca3d523143207ac11ae5f5
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\52628d2e\46
|
NIDependencies |
0xc6381918a9e9743c0800000002000000000000004f7cbc303282491d0700
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\52628d2e\46
|
Status |
0
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\1d498232\7
|
ConfigMask |
4361
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\1d498232\7
|
ConfigString |
ZAP--0000-0000
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\1d498232\7
|
DisplayName |
System,2.0.0.0,,b77a5c561934e089
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\1d498232\7
|
ILDependencies |
0xd8d44b425c3de667050000000200000000000000578dab19d0021a290600
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\1d498232\7
|
MVID |
0x36dbfcf62e07d819b3de533898868ecf
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\1d498232\7
|
NIDependencies |
0xc6381918a9e9743c080000000200000000000000
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\1d498232\7
|
Status |
0
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index75
|
ILUsageMask |
0xffffffffffffffffff01
|
1 |
| HKLM\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index75
|
NIUsageMask |
0xfffffffffffffffff1
|
1 |
| HKLM\Software\Microsoft\Fusion\PublisherPolicy\Default
|
Latest |
1
|
1 |
| HKLM\Software\Microsoft\Fusion\PublisherPolicy\Default
|
LegacyPolicyTimeStamp |
0x0000000000000000
|
1 |
| HKLM\Software\Microsoft\Fusion\PublisherPolicy\Default
|
index1 |
0x00
|
1 |
| HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS
|
* |
1
|
1 |
| HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL
|
* |
1
|
1 |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mscoree.dll
|
CheckAppHelp |
1
|
1 |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mscorwks.dll
|
CheckAppHelp |
1
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion
|
DevicePath |
%SystemRoot%\inf
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation
|
CutList |
0x4100700070006c00690063006100740069006f006e002000460069006c00
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
|
{AEB6717E-7E19-11d0-97EE-00C04FD91972} |
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Common Desktop |
%ALLUSERSPROFILE%\Desktop
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Common Documents |
%ALLUSERSPROFILE%\Documents
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
DriverCachePath |
%SystemRoot%\Driver Cache
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
LogLevel |
0
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
ServicePackCachePath |
c:\windows\ServicePackFiles\ServicePackCache
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
ServicePackSourcePath |
D:\
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
SourcePath |
D:\
|
2 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
AuthenticodeEnabled |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
DefaultLevel |
262144
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
PolicyScope |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
TransparentEnabled |
1
|
3 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
ItemData |
0x5eab304f957a49896a006c1c31154015
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
ItemSize |
779
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
ItemData |
0x67b0d48b343a3fd3bce9dc646704f394
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
ItemSize |
517
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
ItemData |
0x327802dcfef8c893dc8ab006dd847d1d
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
ItemSize |
918
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
ItemData |
0xbd9a2adb42ebd8560e250e4df8162f67
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
ItemSize |
229
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
ItemData |
0x386b085f84ecf669d36b956a22c01e80
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
ItemSize |
370
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}
|
ItemData |
%HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache%OLK*
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}
|
SaferFlags |
0
|
1 |
| HKLM\System\CurrentControlSet\Control\ComputerName\ActiveComputerName
|
ComputerName |
PC
|
2 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
|
Domain |
|
1 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
|
Hostname |
pc
|
1 |
| HKLM\System\Setup
|
SystemSetupInProgress |
0
|
2 |
| HKLM\System\WPA\PnP
|
seed |
1274198464
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Keyboard Layout\Toggle
|
Language Hotkey |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Keyboard Layout\Toggle
|
Layout Hotkey |
2
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\
|
ShellState |
0x2400000038080000000000000000000000000000010000000d0000000000
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
DontPrettyPath |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
Filter |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
Hidden |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
HideFileExt |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
HideIcons |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
MapNetDrvBtn |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
NoNetCrawling |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
SeparateProcess |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
ShowCompColor |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
ShowInfoTip |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
ShowSuperHidden |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
WebView |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094da8-30a0-11dd-817b-806d6172696f}\
|
Data |
0x000000005c005c003f005c0049004400450023004300640052006f006d00
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094da8-30a0-11dd-817b-806d6172696f}\
|
Generation |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094daa-30a0-11dd-817b-806d6172696f}\
|
Data |
0x000000005c005c003f005c00530054004f00520041004700450023005600
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094daa-30a0-11dd-817b-806d6172696f}\
|
Generation |
1
|
5 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
|
Cache |
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
AppData |
%USERPROFILE%\Application Data
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Cache |
%USERPROFILE%\Local Settings\Temporary Internet Files
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Cookies |
%USERPROFILE%\Cookies
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Desktop |
%USERPROFILE%\Desktop
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Personal |
%USERPROFILE%\My Documents
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
|
1806 |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
|
Flags |
33
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
|
Flags |
219
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
|
Flags |
71
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
|
Flags |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
|
Flags |
3
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\ShellNoRoam\MUICache
|
LangID |
0x0904
|
1 |