Action | Path | Val_Name | Val_Data |
---|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs | 9 | 30 00 30 00 30 00 30 00 71 00 30 00 68 00 62 00 2E 00 6A 00 70 00 67 00 00 00 58 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs | 10 | 64 00 6D 00 63 00 37 00 33 00 31 00 34 00 34 00 00 00 4C 00 32 00 00 00 00 00 00 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/Folder | 4 | 64 00 6D 00 63 00 37 00 33 00 31 00 34 00 34 00 00 00 4C 00 32 00 00 00 00 00 00 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/.jpg | 0 | 30 00 30 00 30 00 30 00 71 00 30 00 68 00 62 00 2E 00 6A 00 70 00 67 00 00 00 58 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/.jpg | MRUListEx | 00 00 00 00 FF FF FF FF
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090920110910 | CachePath | "%USERPROFILE%Local SettingsHistoryHistory.IE5MSHist012011090920110910"
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090920110910 | CachePrefix | ":2011090920110910: "
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090920110910 | CacheLimit | 0x00002000
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090920110910 | CacheOptions | 0x0000000B
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090920110910 | CacheRepair | 0x00000000
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/ShellNoRoam/MUICache | C://Documents and Settings//dmc73144//rnm.exe | "rnm"
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/WinRAR SFX | C%%Documents and Settings%dmc73144 | "C:/Documents and Settings/dmc73144"
|
Action | Path | Val_Name | Val_Data | Mod_Val_Data |
---|
modified | HKLM/SOFTWARE/Microsoft/Cryptography/RNG | Seed | 96 01 7C CE 00 35 81 50 4E 54 A9 9A 4B A6 DA D4 6C DD 02 0D 81 9E 73 44 21 9A 98 | 4D DD F5 8E E8 D9 00 B9 D5 E4 65 46 17 75 C7 3C E4 6D 0D B8 A3 39 13 3C A5 74 52 |
modified | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs | MRUListEx | 03 00 00 00 02 00 00 00 00 00 00 00 08 00 00 00 07 00 00 00 06 00 00 00 05 00 00 | 0A 00 00 00 09 00 00 00 03 00 00 00 02 00 00 00 00 00 00 00 08 00 00 00 07 00 00 |
modified | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/Folder | MRUListEx | 01 00 00 00 03 00 00 00 02 00 00 00 00 00 00 00 FF FF FF FF | 04 00 00 00 01 00 00 00 03 00 00 00 02 00 00 00 00 00 00 00 FF FF FF FF |