Action | Path | Val_Name | Val_Data |
---|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs | 9 | 30 00 30 00 30 00 30 00 71 00 30 00 68 00 62 00 2E 00 6A 00 70 00 67 00 00 00 58 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs | 10 | 64 00 6D 00 63 00 37 00 33 00 31 00 34 00 34 00 00 00 4C 00 32 00 00 00 00 00 00 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/Folder | 4 | 64 00 6D 00 63 00 37 00 33 00 31 00 34 00 34 00 00 00 4C 00 32 00 00 00 00 00 00 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/.jpg | 0 | 30 00 30 00 30 00 30 00 71 00 30 00 68 00 62 00 2E 00 6A 00 70 00 67 00 00 00 58 |
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/.jpg | MRUListEx | 00 00 00 00 FF FF FF FF
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090220110903 | CachePath | "%USERPROFILE%Local SettingsHistoryHistory.IE5MSHist012011090220110903"
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090220110903 | CachePrefix | ":2011090220110903: "
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090220110903 | CacheLimit | 0x00002000
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090220110903 | CacheOptions | 0x0000000B
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Internet Settings/5.0/Cache/Extensible Cache/MSHist012011090220110903 | CacheRepair | 0x00000000
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/ShellNoRoam/MUICache | C://Documents and Settings//dmc73144//rnm.exe | "rnm"
|
added | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/WinRAR SFX | C%%Documents and Settings%dmc73144 | "C:/Documents and Settings/dmc73144"
|
Action | Path | Val_Name | Val_Data | Mod_Val_Data |
---|
modified | HKLM/SOFTWARE/Microsoft/Cryptography/RNG | Seed | 40 60 E8 2A 2B B1 38 92 69 DC 78 A2 FB D2 7F 54 BE A9 DF 42 F8 01 54 D1 09 44 2F | 65 F7 18 81 4C D9 41 1F 1F 79 3D B4 67 54 D5 0D E9 CB 00 DC 0E 08 9B B0 CA 01 D4 |
modified | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs | MRUListEx | 03 00 00 00 02 00 00 00 00 00 00 00 08 00 00 00 07 00 00 00 06 00 00 00 05 00 00 | 0A 00 00 00 09 00 00 00 03 00 00 00 02 00 00 00 00 00 00 00 08 00 00 00 07 00 00 |
modified | HKU/S-1-5-21-1844237615-562591055-839522115-1004/Software/Microsoft/Windows/CurrentVersion/Explorer/RecentDocs/Folder | MRUListEx | 01 00 00 00 03 00 00 00 02 00 00 00 00 00 00 00 FF FF FF FF | 04 00 00 00 01 00 00 00 03 00 00 00 02 00 00 00 00 00 00 00 FF FF FF FF |