|
Key
|
Name
|
Value
|
Times
|
| HKLM\SOFTWARE\CLASSES\.ASP
|
|
aspfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.BAT
|
|
batfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CER
|
|
CERFile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CHM
|
|
chm.file
|
1 |
| HKLM\SOFTWARE\CLASSES\.CMD
|
|
cmdfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.COM
|
|
comfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CPL
|
|
cplfile
|
1 |
| HKLM\SOFTWARE\CLASSES\.CRT
|
|
CERFile
|
1 |
| HKLM\SOFTWARE\CLASSES\.EXE
|
|
exefile
|
3 |
| HKLM\SOFTWARE\CLASSES\AUTOPROXYTYPES\APPLICATION/X-INTERNET-SIGNUP
|
Default |
0x00000000
|
1 |
| HKLM\SOFTWARE\CLASSES\AUTOPROXYTYPES\APPLICATION/X-INTERNET-SIGNUP
|
DllFile |
%SystemRoot%\system32\iedkcs32.dll
|
2 |
| HKLM\SOFTWARE\CLASSES\AUTOPROXYTYPES\APPLICATION/X-INTERNET-SIGNUP
|
FileExtensions |
.ins
|
2 |
| HKLM\SOFTWARE\CLASSES\AUTOPROXYTYPES\APPLICATION/X-NS-PROXY-AUTOCONFIG
|
Default |
0x01000000
|
1 |
| HKLM\SOFTWARE\CLASSES\AUTOPROXYTYPES\APPLICATION/X-NS-PROXY-AUTOCONFIG
|
DllFile |
%SystemRoot%\system32\jsproxy.dll
|
2 |
| HKLM\SOFTWARE\CLASSES\AUTOPROXYTYPES\APPLICATION/X-NS-PROXY-AUTOCONFIG
|
FileExtensions |
.pac;.jvs;.js
|
2 |
| HKLM\SOFTWARE\CLASSES\AUTOPROXYTYPES\APPLICATION/X-NS-PROXY-AUTOCONFIG
|
Flags |
0x01000000
|
1 |
| HKLM\SOFTWARE\CLASSES\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\INPROCSERVER32
|
|
%SystemRoot%\system32\SHELL32.dll
|
1 |
| HKLM\SOFTWARE\CLASSES\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\INPROCSERVER32
|
|
C:\WINDOWS\system32\urlmon.dll
|
2 |
| HKLM\SOFTWARE\CLASSES\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\INPROCSERVER32
|
ThreadingModel |
Both
|
1 |
| HKLM\SOFTWARE\CLASSES\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\INPROCSERVER32
|
|
%SystemRoot%\system32\shdocvw.dll
|
2 |
| HKLM\SOFTWARE\CLASSES\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\INPROCSERVER32
|
ThreadingModel |
Apartment
|
1 |
| HKLM\SOFTWARE\CLASSES\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\SHELLFOLDER
|
WantsParseDisplayName |
|
1 |
| HKLM\SOFTWARE\CLASSES\CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}\INPROCSERVER32
|
|
shell32.dll
|
1 |
| HKLM\SOFTWARE\CLASSES\DIRECTORY
|
AlwaysShowExt |
|
1 |
| HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\FOLDEREXTENSIONS\{FBEB8A05-BEEE-4442-804E-409D6C4515E9}
|
DriveMask |
32
|
1 |
| HKLM\SOFTWARE\CLASSES\EXEFILE\SHELL\OPEN\COMMAND
|
|
"%1" %*
|
2 |
| HKLM\SOFTWARE\CLASSES\INTERFACE\{000214E6-0000-0000-C000-000000000046}\PROXYSTUBCLSID32
|
|
{bf50b68e-29b8-4386-ae9c-9734d5117cd5}
|
1 |
| HKLM\SOFTWARE\CLASSES\INTERFACE\{79EAC9C4-BAF9-11CE-8C82-00AA004BA90B}\PROXYSTUBCLSID32
|
|
{B8DA6310-E19B-11D0-933C-00A0C90DCAA9}
|
1 |
| HKLM\SOFTWARE\CLASSES\INTERFACE\{93F2F68C-1D1B-11D3-A30E-00C04F79ABD1}\PROXYSTUBCLSID32
|
|
{bf50b68e-29b8-4386-ae9c-9734d5117cd5}
|
1 |
| HKLM\SOFTWARE\CLASSES\INTERFACE\{B722BCCB-4E68-101B-A2BC-00AA00404770}\PROXYSTUBCLSID32
|
|
{B8DA6310-E19B-11D0-933C-00A0C90DCAA9}
|
1 |
| HKLM\SOFTWARE\CLASSES\INTERFACE\{EAB22AC1-30C1-11CF-A7EB-0000C05BAE0B}\TYPELIB
|
|
{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}
|
1 |
| HKLM\SOFTWARE\CLASSES\MIME\DATABASE\CONTENT TYPE\TEXT/HTML
|
Extension |
.htm
|
4 |
| HKLM\SOFTWARE\Microsoft\CTF\SystemShared\
|
CUAS |
0
|
1 |
| HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
|
UrlEncoding |
0x00000000
|
2 |
| HKLM\SYSTEM\CurrentControlSet\Control\Session Manager
|
CriticalSectionTimeout |
2592000
|
1 |
| HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Linkage
|
Export |
0x5c004400650076006900630065005c004e0065007400420054005f005400
|
1 |
| HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage
|
Bind |
0x5c004400650076006900630065005c007b00310041004400340035004200
|
2 |
| HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1AD45B38-4060-4F73-BB1E-A0439A2D97EB}
|
DhcpServer |
255.255.255.255
|
2 |
| HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1AD45B38-4060-4F73-BB1E-A0439A2D97EB}
|
EnableDHCP |
0
|
1 |
| HKLM\SYSTEM\CurrentControlSet\Services\Winsock\Parameters
|
Transports |
0x5400630070006900700000004e0065007400420049004f00530000000000
|
2 |
| HKLM\SYSTEM\Setup
|
OsLoaderPath |
\
|
2 |
| HKLM\SYSTEM\Setup
|
SystemPartition |
\Device\HarddiskVolume1
|
2 |
| HKLM\SYSTEM\Setup
|
SystemSetupInProgress |
0
|
1 |
| HKLM\SYSTEM\WPA\MediaCenter
|
Installed |
0
|
1 |
| HKLM\Software\Classes\CLSID\{871c5380-42a0-1069-a2ea-08002b30309d}\InProcServer32
|
|
%SystemRoot%\system32\shdocvw.dll
|
1 |
| HKLM\Software\Microsoft\COM3
|
Com+Enabled |
1
|
2 |
| HKLM\Software\Microsoft\COM3
|
REGDBVersion |
0x0700000000000000
|
4 |
| HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS
|
* |
1
|
1 |
| HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL
|
* |
1
|
1 |
| HKLM\Software\Microsoft\Tracing
|
EnableConsoleTracing |
0
|
1 |
| HKLM\Software\Microsoft\Tracing\RASAPI32
|
ConsoleTracingMask |
4294901760
|
2 |
| HKLM\Software\Microsoft\Tracing\RASAPI32
|
EnableConsoleTracing |
0
|
2 |
| HKLM\Software\Microsoft\Tracing\RASAPI32
|
EnableFileTracing |
0
|
2 |
| HKLM\Software\Microsoft\Tracing\RASAPI32
|
FileDirectory |
%windir%\tracing
|
4 |
| HKLM\Software\Microsoft\Tracing\RASAPI32
|
FileTracingMask |
4294901760
|
2 |
| HKLM\Software\Microsoft\Tracing\RASAPI32
|
MaxFileSize |
1048576
|
2 |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
|
AllUsersProfile |
All Users
|
2 |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
|
DefaultUserProfile |
Default User
|
2 |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
|
ProfilesDirectory |
%SystemDrive%\Documents and Settings
|
4 |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-842925246-1425521274-308236825-500
|
ProfileImagePath |
%SystemDrive%\Documents and Settings\Administrator
|
2 |
| HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows
|
AppInit_DLLs |
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion
|
CommonFilesDir |
C:\Program Files\Common Files
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion
|
DevicePath |
%SystemRoot%\inf
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion
|
ProgramFilesDir |
C:\Program Files
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation
|
CutList |
0x4100700070006c00690063006100740069006f006e002000460069006c00
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
|
{AEB6717E-7E19-11d0-97EE-00C04FD91972} |
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Common AppData |
%ALLUSERSPROFILE%\Application Data
|
1 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
DriverCachePath |
%SystemRoot%\Driver Cache
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
LogLevel |
0
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
ServicePackCachePath |
c:\windows\ServicePackFiles\ServicePackCache
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
ServicePackSourcePath |
D:\
|
2 |
| HKLM\Software\Microsoft\Windows\CurrentVersion\Setup
|
SourcePath |
D:\
|
2 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
AuthenticodeEnabled |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
DefaultLevel |
262144
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
PolicyScope |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
|
TransparentEnabled |
1
|
3 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
ItemData |
0x5eab304f957a49896a006c1c31154015
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
ItemSize |
779
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
ItemData |
0x67b0d48b343a3fd3bce9dc646704f394
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
ItemSize |
517
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
ItemData |
0x327802dcfef8c893dc8ab006dd847d1d
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
ItemSize |
918
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
ItemData |
0xbd9a2adb42ebd8560e250e4df8162f67
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
ItemSize |
229
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
HashAlg |
32771
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
ItemData |
0x386b085f84ecf669d36b956a22c01e80
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
ItemSize |
370
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}
|
SaferFlags |
0
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}
|
ItemData |
%HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache%OLK*
|
1 |
| HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}
|
SaferFlags |
0
|
1 |
| HKLM\System\CurrentControlSet\Control\ComputerName\ActiveComputerName
|
ComputerName |
PC
|
4 |
| HKLM\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmm
|
wheel |
1
|
1 |
| HKLM\System\CurrentControlSet\Control\ProductOptions
|
ProductType |
WinNT
|
1 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
ComSpec |
%SystemRoot%\system32\cmd.exe
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
FP_NO_HOST_CHECK |
NO
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
NUMBER_OF_PROCESSORS |
1
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
OS |
Windows_NT
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
PATHEXT |
.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
PROCESSOR_ARCHITECTURE |
x86
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
PROCESSOR_IDENTIFIER |
x86 Family 6 Model 3 Stepping 3, GenuineIntel
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
PROCESSOR_LEVEL |
6
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
PROCESSOR_REVISION |
0303
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
Path |
%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
TEMP |
%SystemRoot%\TEMP
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
TMP |
%SystemRoot%\TEMP
|
4 |
| HKLM\System\CurrentControlSet\Control\Session Manager\Environment
|
windir |
%SystemRoot%
|
4 |
| HKLM\System\CurrentControlSet\Control\Terminal Server
|
TSAppCompat |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\LDAP
|
LdapClientIntegrity |
1
|
2 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
|
Domain |
|
11 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
|
Hostname |
pc
|
11 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
|
NameServer |
|
2 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
|
UseDomainNameDevolution |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock
|
HelperDllName |
%SystemRoot%\System32\wshtcpip.dll
|
1 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock
|
Mapping |
0x0b0000000300000002000000010000000600000002000000010000000000
|
1 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock
|
MaxSockaddrLength |
16
|
1 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock
|
MinSockaddrLength |
16
|
1 |
| HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock
|
UseDelayedAcceptance |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters
|
WinSock_Registry_Version |
2.0
|
4 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5
|
Num_Catalog_Entries |
3
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5
|
Serial_Access_Num |
4
|
2 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
|
DisplayString |
Tcpip
|
4 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
|
Enabled |
1
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
|
LibraryPath |
%SystemRoot%\System32\mswsock.dll
|
2 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
|
ProviderId |
0x409d05229e7ecf11ae5a00aa00a7112b
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
|
StoresServiceClassInfo |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
|
SupportedNameSpace |
12
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
|
Version |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
|
DisplayString |
NTDS
|
4 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
|
Enabled |
1
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
|
LibraryPath |
%SystemRoot%\System32\winrnr.dll
|
2 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
|
ProviderId |
0xee37263b80e5cf11a55500c04fd8d4ac
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
|
StoresServiceClassInfo |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
|
SupportedNameSpace |
32
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
|
Version |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
|
DisplayString |
Network Location Awareness (NLA) Namespace
|
4 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
|
Enabled |
1
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
|
LibraryPath |
%SystemRoot%\System32\mswsock.dll
|
2 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
|
ProviderId |
0x3a244266a83ba64abaa52e0bd71fdd83
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
|
StoresServiceClassInfo |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
|
SupportedNameSpace |
15
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
|
Version |
0
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
|
Next_Catalog_Entry_ID |
1012
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
|
Num_Catalog_Entries |
11
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
|
Serial_Access_Num |
4
|
2 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004
|
PackedCatalogItem |
%SystemRoot%\system32\rsvpsp.d
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005
|
PackedCatalogItem |
%SystemRoot%\system32\rsvpsp.d
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011
|
PackedCatalogItem |
%SystemRoot%\system32\mswsock.
|
1 |
| HKLM\System\Setup
|
SystemSetupInProgress |
0
|
4 |
| HKLM\System\WPA\PnP
|
seed |
1274198464
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Environment
|
TEMP |
%USERPROFILE%\Local Settings\Temp
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Environment
|
TMP |
%USERPROFILE%\Local Settings\Temp
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Keyboard Layout\Toggle
|
Language Hotkey |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Keyboard Layout\Toggle
|
Layout Hotkey |
2
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
|
EnableHttp1_1 |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
|
EnableNegotiate |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
|
MimeExclusionListForCache |
multipart/mixed multipart/x-mixed-replace multipart/x-byteranges
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
|
WarnOnPost |
0x01000000
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
|
ParseAutoexec |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\
|
ShellState |
0x2400000038080000000000000000000000000000010000000d0000000000
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
DontPrettyPath |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
Filter |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
Hidden |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
HideFileExt |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
HideIcons |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
MapNetDrvBtn |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
NoNetCrawling |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
SeparateProcess |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
ShowCompColor |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
ShowInfoTip |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
ShowSuperHidden |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
|
WebView |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094da8-30a0-11dd-817b-806d6172696f}\
|
Data |
0x000000005c005c003f005c0049004400450023004300640052006f006d00
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094da8-30a0-11dd-817b-806d6172696f}\
|
Generation |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094daa-30a0-11dd-817b-806d6172696f}\
|
Data |
0x000000005c005c003f005c00530054004f00520041004700450023005600
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{a1094daa-30a0-11dd-817b-806d6172696f}\
|
Generation |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
|
Cache |
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
AppData |
%USERPROFILE%\Application Data
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Cache |
%USERPROFILE%\Local Settings\Temporary Internet Files
|
3 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Cookies |
%USERPROFILE%\Cookies
|
3 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
History |
%USERPROFILE%\Local Settings\History
|
3 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Local Settings |
%USERPROFILE%\Local Settings
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
|
Personal |
%USERPROFILE%\My Documents
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
|
Signature |
Client UrlCache MMF Ver 5.2
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
|
CacheLimit |
163410
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
|
CachePrefix |
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
|
PerUserItem |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
|
CacheLimit |
8192
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
|
CachePrefix |
Cookie:
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
|
PerUserItem |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
|
CacheLimit |
8192
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
|
CachePrefix |
Visited:
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
|
PerUserItem |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
|
IntranetName |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
|
ProxyBypass |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\\ProtocolDefaults\
|
http |
3
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
|
1806 |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
|
Flags |
33
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
|
Flags |
219
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
|
Flags |
71
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
|
1A10 |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
|
Flags |
1
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
|
Flags |
3
|
2 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401 |
0x010000007c6c9c7cc0da56ab0ac5c801
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\Windows\ShellNoRoam\MUICache
|
LangID |
0x0904
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\windows\CurrentVersion\Internet Settings
|
MigrateProxy |
1
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\windows\CurrentVersion\Internet Settings
|
ProxyEnable |
0
|
1 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
|
DefaultConnectionSettings |
0x3c0000000200000009000000000000000000000000000000000000000000
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings |
0x3c0000000400000009000000000000000000000000000000000000000000
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Volatile Environment
|
APPDATA |
C:\Documents and Settings\Administrator\Application Data
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Volatile Environment
|
CLIENTNAME |
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Volatile Environment
|
HOMEDRIVE |
C:
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Volatile Environment
|
HOMEPATH |
\Documents and Settings\Administrator
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Volatile Environment
|
HOMESHARE |
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Volatile Environment
|
LOGONSERVER |
\\PC
|
4 |
| HKU\S-1-5-21-842925246-1425521274-308236825-500\Volatile Environment
|
SESSIONNAME |
Console
|
4 |
expand all
