Scribd
Upload
139 views

Hkey Current User

The document contains records of modifications made to the registry of a computer, including the creation and editing of keys and values related to software installations and recent documents. Keys and values were written or copied for applications such as DownloadManager, GameRanger, Windows Live Mail, PowerISO, and the Windows shell. Binary and string values were added or modified containing filenames, URLs, settings, and other application data.

Uploaded by

tw09s
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
139 views

Hkey Current User

The document contains records of modifications made to the registry of a computer, including the creation and editing of keys and values related to software installations and recent documents. Keys and values were written or copied for applications such as DownloadManager, GameRanger, Windows Live Mail, PowerISO, and the Windows shell. Binary and string values were added or modified containing filenames, URLs, settings, and other application data.

Uploaded by

tw09s
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 5

isolation_writecopy HKEY_CURRENT_USER\Software\DownloadManager\346

Value=Downloaded
REG_NONE=#60#53#f1#05#00#00#00#00
Value=Speed
REG_DWORD=#27#da#02#00
isolation_writecopy HKEY_CURRENT_USER\Software\DownloadManager\346\ChList
Value=0
REG_NONE=#00#00#00#00#ff#ff#ff#ff#00#00#00#00#00#00#00#00
isolation_full HKEY_CURRENT_USER\Software\GameRanger
Value=ExecutablePath
REG_SZ~%AppData%\GameRanger\GameRanger\GameRanger.exe#2300
isolation_full HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Unins
tall\GameRanger
Value=Comments
REG_SZ~GameRanger - play your friends online#2300
Value=DisplayName
REG_SZ~GameRanger#2300
Value=DisplayIcon
REG_SZ~%AppData%\GameRanger\GameRanger\GameRanger.exe#2300
Value=HelpLink
REG_SZ~http://www.GameRanger.com/support/#2300
Value=InstallLocation
REG_SZ~%AppData%\GameRanger\GameRanger#2300
Value=Publisher
REG_SZ~GameRanger Technologies#2300
Value=URLInfoAbout
REG_SZ~http://www.GameRanger.com/#2300
Value=NoModify
REG_DWORD=#01#00#00#00
Value=NoRemove
REG_DWORD=#00#00#00#00
Value=NoRepair
REG_DWORD=#01#00#00#00
Value=UninstallString
REG_SZ~%AppData%\GameRanger\GameRanger\GameRanger.exe /uninstall#2300
Value=InstallDate
REG_SZ~20110801#2300
Value=EstimatedSize
REG_DWORD=#f1#9a#31#00
isolation_writecopy HKEY_CURRENT_USER\Software\Microsoft\Windows Live Mail
Value=SqmSrvSuccessCount HTTPMail
REG_DWORD=#69#00#00#00
Value=SqmSrvSuccessCount POP3
REG_DWORD=#81#01#00#00
isolation_writecopy HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersi
on\AppCompatFlags\Compatibility Assistant\Persisted
Value~%Personal%\Downloads\Programs\GameRangerSetup.exe
REG_DWORD=#01#00#00#00
isolation_writecopy HKEY_CURRENT_USER\Software\PowerISO
Value=Reopen0
REG_SZ~%Profile%\Downloads\Praetorians\ims-pre.bin#2300
Value=Reopen1
REG_SZ~%Personal%\Downloads\Praetorians_2.iso#2300

isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M


icrosoft\Windows\Shell\BagMRU
Value=NodeSlots
REG_BINARY=#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#
02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02
#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#02#0
2#02#02#02#02#02#02#02
Value=MRUListEx
REG_BINARY=#1f#00#00#00#02#00#00#00#01#00#00#00#00#00#00#00#5f#00#00#00#10#00#
00#00#17#00#00#00#03#00#00#00#04#00#00#00#56#00#00#00#48#00#00#00#1e#00#00#00#2d
#00#00#00#39#00#00#00#47#00#00#00#51#00#00#00#43#00#00#00#54#00#00#00#2b#00#00#0
0#2c#00#00#00#42#00#00#00#26#00#00#00#20#00#00#00#30#00#00#00#28#00#00#00#3b#00#
00#00#5e#00#00#00#3d#00#00#00#5c#00#00#00#18#00#00#00#5b#00#00#00#5d#00#00#00#5a
#00#00#00#59#00#00#00#1b#00#00#00#58#00#00#00#3c#00#00#00#57#00#00#00#55#00#00#0
0#2e#00#00#00#53#00#00#00#52#00#00#00#50#00#00#00#4e#00#00#00#4a#00#00#00#4f#00#

00#00#4b#00#00#00#36#00#00#00#4c#00#00#00#4d#00#00#00#49#00#00#00#46#00#00#00#45
#00#00#00#44#00#00#00#3e#00#00#00#41#00#00#00#40#00#00#00#3f#00#00#00#14#00#00#0
0#38#00#00#00#3a#00#00#00#35#00#00#00#31#00#00#00#37#00#00#00#33#00#00#00#34#00#
00#00#32#00#00#00#2f#00#00#00#27#00#00#00#24#00#00#00#2a#00#00#00#05#00#00#00#29
#00#00#00#25#00#00#00#23#00#00#00#22#00#00#00#21#00#00#00#1d#00#00#00#1c#00#00#0
0#13#00#00#00#19#00#00#00#1a#00#00#00#16#00#00#00#15#00#00#00#12#00#00#00#11#00#
00#00#0b#00#00#00#0f#00#00#00#0e#00#00#00#0c#00#00#00#0d#00#00#00#08#00#00#00#0a
#00#00#00#09#00#00#00#06#00#00#00#07#00#00#00#ff#ff#ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\0
Value=MRUListEx
REG_BINARY=#05#00#00#00#01#00#00#00#09#00#00#00#0b#00#00#00#03#00#00#00#0c#00#
00#00#0d#00#00#00#0a#00#00#00#10#00#00#00#00#00#00#00#06#00#00#00#08#00#00#00#0f
#00#00#00#0e#00#00#00#07#00#00#00#02#00#00#00#04#00#00#00#ff#ff#ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\0\1
Value=MRUListEx
REG_BINARY=#36#00#00#00#18#00#00#00#0e#00#00#00#35#00#00#00#2f#00#00#00#1d#00#
00#00#02#00#00#00#2e#00#00#00#34#00#00#00#33#00#00#00#32#00#00#00#31#00#00#00#30
#00#00#00#0b#00#00#00#26#00#00#00#27#00#00#00#29#00#00#00#28#00#00#00#2b#00#00#0
0#0a#00#00#00#2a#00#00#00#2c#00#00#00#22#00#00#00#2d#00#00#00#23#00#00#00#20#00#
00#00#25#00#00#00#1f#00#00#00#24#00#00#00#21#00#00#00#1e#00#00#00#1a#00#00#00#09
#00#00#00#16#00#00#00#1b#00#00#00#13#00#00#00#12#00#00#00#15#00#00#00#1c#00#00#0
0#19#00#00#00#17#00#00#00#14#00#00#00#10#00#00#00#11#00#00#00#07#00#00#00#0f#00#
00#00#0d#00#00#00#0c#00#00#00#01#00#00#00#06#00#00#00#03#00#00#00#08#00#00#00#04
#00#00#00#05#00#00#00#00#00#00#00#ff#ff#ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\0\1\54\1
Value=MRUListEx
REG_BINARY=#00#00#00#00#ff#ff#ff#ff
Value=0
REG_BINARY=#56#00#31#00#00#00#00#00#f9#3e#23#87#10#00#64#65#76#70#72#61#31#34#
00#00#3e#00#08#00#04#00#ef#be#f9#3e#26#86#f9#3e#23#87#2a#00#00#00#c7#89#02#00#00
#00#32#00#00#00#00#00#00#00#00#00#00#00#00#00#00#00#64#00#65#00#76#00#70#00#72#0
0#61#00#31#00#34#00#00#00#18#00#00#00
isolation_full HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Micros
oft\Windows\Shell\BagMRU\0\1\54\1\0
Value=NodeSlot
REG_DWORD=#03#05#00#00
Value=MRUListEx
REG_BINARY=#ff#ff#ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\0\5\0
Value=MRUListEx
REG_BINARY=#03#00#00#00#00#00#00#00#01#00#00#00#04#00#00#00#02#00#00#00#ff#ff#
ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\1\3\4
Value=MRUListEx
REG_BINARY=#03#00#00#00#00#00#00#00#04#00#00#00#01#00#00#00#02#00#00#00#ff#ff#
ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\2

Value=MRUListEx
REG_BINARY=#00#00#00#00#05#00#00#00#01#00#00#00#07#00#00#00#06#00#00#00#04#00#
00#00#09#00#00#00#08#00#00#00#03#00#00#00#02#00#00#00#ff#ff#ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\2\0
Value=MRUListEx
REG_BINARY=#04#00#00#00#00#00#00#00#05#00#00#00#08#00#00#00#07#00#00#00#01#00#
00#00#03#00#00#00#06#00#00#00#02#00#00#00#ff#ff#ff#ff
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\BagMRU\2\0\0\0
Value=MRUListEx
REG_BINARY=#03#00#00#00#04#00#00#00#08#00#00#00#00#00#00#00#01#00#00#00#05#00#
00#00#07#00#00#00#02#00#00#00#06#00#00#00#ff#ff#ff#ff
isolation_full HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Micros
oft\Windows\Shell\Bags\1283
isolation_full HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Micros
oft\Windows\Shell\Bags\1283\Shell
Value=KnownFolderDerivedFolderType
REG_SZ~{57807898-8C4F-4462-BB63-71042380B109}#2300
Value=SniffedFolderType
REG_SZ~Generic#2300
isolation_full HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Micros
oft\Windows\Shell\Bags\1283\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}
Value=Rev
REG_DWORD=#00#00#00#00
Value=FFlags
REG_DWORD=#01#00#20#41
Value=Vid
REG_SZ~{137E7700-3573-11CF-AE69-08002B2E1262}#2300
Value=Mode
REG_DWORD=#04#00#00#00
Value=LogicalViewMode
REG_DWORD=#01#00#00#00
Value=IconSize
REG_DWORD=#10#00#00#00
Value=ColInfo
REG_BINARY=#00#00#00#00#00#00#00#00#00#00#00#00#00#00#00#00#fd#df#df#fd#10#00#
00#00#00#00#00#00#00#00#00#00#04#00#00#00#18#00#00#00#30#f1#25#b7#ef#47#1a#10#a5
#f1#02#60#8c#9e#eb#ac#0a#00#00#00#10#01#00#00#30#f1#25#b7#ef#47#1a#10#a5#f1#02#6
0#8c#9e#eb#ac#0e#00#00#00#78#00#00#00#30#f1#25#b7#ef#47#1a#10#a5#f1#02#60#8c#9e#
eb#ac#04#00#00#00#78#00#00#00#30#f1#25#b7#ef#47#1a#10#a5#f1#02#60#8c#9e#eb#ac#0c
#00#00#00#50#00#00#00
Value=Sort
REG_BINARY=#00#00#00#00#00#00#00#00#00#00#00#00#00#00#00#00#01#00#00#00#30#f1#
25#b7#ef#47#1a#10#a5#f1#02#60#8c#9e#eb#ac#0a#00#00#00#01#00#00#00
Value=GroupView
REG_DWORD=#00#00#00#00
Value=GroupByKey:FMTID
REG_SZ~{00000000-0000-0000-0000-000000000000}#2300
Value=GroupByKey:PID
REG_DWORD=#00#00#00#00
Value=GroupByDirection
REG_DWORD=#01#00#00#00
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M

icrosoft\Windows\Shell\Bags\AllFolders\Shell
Value=MinPos1366x768x96(1).x
REG_DWORD=#00#83#ff#ff
Value=MinPos1366x768x96(1).y
REG_DWORD=#00#83#ff#ff
Value=WinPos1366x768x96(1).left
REG_DWORD=#41#02#00#00
Value=WinPos1366x768x96(1).top
REG_DWORD=#81#00#00#00
Value=WinPos1366x768x96(1).right
REG_DWORD=#41#05#00#00
Value=WinPos1366x768x96(1).bottom
REG_DWORD=#d9#02#00#00
isolation_writecopy HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\M
icrosoft\Windows\Shell\MuiCache
Value~%Profile%\Downloads\Praetorians\crack\devpra14\praetorians.exe
REG_SZ~praetorians.exe#2300

You might also like