Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- **********************************************************************
- FileTypeDiag version 1.0.0.7
- http://www.pretentiousname.com/miscsoft/index.html#FileTypeDiag
- **********************************************************************
- OS Bitness: 64-bit
- MajorVersion: 6
- MinorVersion: 1
- BuildNumber: 7601
- PlatformId: 2
- CSDVersion: "Service Pack 1"
- ServicePackMajor: 1
- ServicePackMinor: 0
- SuiteMask: 0x100
- ProductType: 1
- (Reserved): 0
- **********************************************************************
- File-type dump for ".exe"
- **********************************************************************
- 64 HKCR\*\
- 64 HKCR\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta"
- 64 HKCR\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size"
- 64 HKCR\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta"
- 64 HKCR\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size"
- 64 HKCR\*: "AlwaysShowExt" is REG_SZ: ""
- 64 HKCR\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 64 HKCR\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 64 HKCR\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 64 HKCR\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKCR\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 64 HKCR\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKCR\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKCR\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 64 HKCR\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 64 HKCR\*: "NoStaticDefaultVerb" is REG_SZ: ""
- 64 HKCR\*: "NoRecentDocs" is REG_SZ: ""
- 64 HKCR\*\OpenWithList\
- 64 HKCR\*\OpenWithList\Excel.exe\
- 64 HKCR\*\OpenWithList\IExplore.exe\
- 64 HKCR\*\OpenWithList\MSPaint.exe\
- 64 HKCR\*\OpenWithList\MSPaint.exe: "" is REG_SZ: ""
- 64 HKCR\*\OpenWithList\notepad.exe\
- 64 HKCR\*\OpenWithList\notepad.exe: "" is REG_SZ: ""
- 64 HKCR\*\OpenWithList\Winword.exe\
- 64 HKCR\*\OpenWithList\WordPad.exe\
- 64 HKCR\*\OpenWithList\WordPad.exe: "" is REG_SZ: ""
- 64 HKCR\*\shell\
- 64 HKCR\*\shell\Open with Sublime Text\
- 64 HKCR\*\shell\Open with Sublime Text\command\
- 64 HKCR\*\shell\Open with Sublime Text\command: "" is REG_SZ: "D:\Program Files\Sublime Text 3\sublime_text.exe "%1""
- 64 HKCR\*\shell\removeproperties\
- 64 HKCR\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment"
- 64 HKCR\*\shell\removeproperties\DropTarget\
- 64 HKCR\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}"
- 64 HKCR\*\shellex\
- 64 HKCR\*\shellex\ContextMenuHandlers\
- 64 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\
- 64 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}"
- 64 HKCR\*\shellex\ContextMenuHandlers\ANotepad++64\
- 64 HKCR\*\shellex\ContextMenuHandlers\ANotepad++64: "" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}"
- 64 HKCR\*\shellex\ContextMenuHandlers\BriefcaseMenu\
- 64 HKCR\*\shellex\ContextMenuHandlers\BriefcaseMenu: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 64 HKCR\*\shellex\ContextMenuHandlers\DropboxExt\
- 64 HKCR\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}"
- 64 HKCR\*\shellex\ContextMenuHandlers\GDContextMenu\
- 64 HKCR\*\shellex\ContextMenuHandlers\GDContextMenu: "" is REG_SZ: "{BB02B294-8425-42E5-983F-41A1FA970CD6}"
- 64 HKCR\*\shellex\ContextMenuHandlers\Gonzales\
- 64 HKCR\*\shellex\ContextMenuHandlers\Gonzales: "" is REG_SZ: "{A50F8401-953F-4C11-8B77-1278C6C7C3F4}"
- 64 HKCR\*\shellex\ContextMenuHandlers\Open With\
- 64 HKCR\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}"
- 64 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\
- 64 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}"
- 64 HKCR\*\shellex\ContextMenuHandlers\PowerISO\
- 64 HKCR\*\shellex\ContextMenuHandlers\PowerISO: "" is REG_SZ: "{967B2D40-8B7D-4127-9049-61EA0C2C6DCE}"
- 64 HKCR\*\shellex\ContextMenuHandlers\SDECon32\
- 64 HKCR\*\shellex\ContextMenuHandlers\SDECon32: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 64 HKCR\*\shellex\ContextMenuHandlers\SDECon64\
- 64 HKCR\*\shellex\ContextMenuHandlers\SDECon64: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 64 HKCR\*\shellex\ContextMenuHandlers\Sharing\
- 64 HKCR\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
- 64 HKCR\*\shellex\ContextMenuHandlers\ShellExtLib\
- 64 HKCR\*\shellex\ContextMenuHandlers\ShellExtLib: "" is REG_SZ: "{cd56defa-0dfb-3d98-8bf5-804d9de45d90}"
- 64 HKCR\*\shellex\ContextMenuHandlers\WinRAR\
- 64 HKCR\*\shellex\ContextMenuHandlers\WinRAR: "" is REG_SZ: "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
- 64 HKCR\*\shellex\ContextMenuHandlers\WinRAR32\
- 64 HKCR\*\shellex\ContextMenuHandlers\WinRAR32: "" is REG_SZ: "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
- 64 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\
- 64 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin"
- 64 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\
- 64 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin"
- 64 HKCR\*\shellex\PropertySheetHandlers\
- 64 HKCR\*\shellex\PropertySheetHandlers\BriefcasePage\
- 64 HKCR\*\shellex\PropertySheetHandlers\BriefcasePage: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 64 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu\
- 64 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"
- 64 HKCR\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\
- 64 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\
- 64 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page"
- 64 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\
- 64 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page"
- ----------------------------------------------------------------------
- 64 HKCU\Software\Classes\*\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Classes\*\
- 64 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta"
- 64 HKLM\Software\Classes\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size"
- 64 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta"
- 64 HKLM\Software\Classes\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size"
- 64 HKLM\Software\Classes\*: "AlwaysShowExt" is REG_SZ: ""
- 64 HKLM\Software\Classes\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 64 HKLM\Software\Classes\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 64 HKLM\Software\Classes\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 64 HKLM\Software\Classes\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKLM\Software\Classes\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 64 HKLM\Software\Classes\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKLM\Software\Classes\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKLM\Software\Classes\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 64 HKLM\Software\Classes\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 64 HKLM\Software\Classes\*: "NoStaticDefaultVerb" is REG_SZ: ""
- 64 HKLM\Software\Classes\*: "NoRecentDocs" is REG_SZ: ""
- 64 HKLM\Software\Classes\*\OpenWithList\
- 64 HKLM\Software\Classes\*\OpenWithList\Excel.exe\
- 64 HKLM\Software\Classes\*\OpenWithList\IExplore.exe\
- 64 HKLM\Software\Classes\*\OpenWithList\MSPaint.exe\
- 64 HKLM\Software\Classes\*\OpenWithList\MSPaint.exe: "" is REG_SZ: ""
- 64 HKLM\Software\Classes\*\OpenWithList\notepad.exe\
- 64 HKLM\Software\Classes\*\OpenWithList\notepad.exe: "" is REG_SZ: ""
- 64 HKLM\Software\Classes\*\OpenWithList\Winword.exe\
- 64 HKLM\Software\Classes\*\OpenWithList\WordPad.exe\
- 64 HKLM\Software\Classes\*\OpenWithList\WordPad.exe: "" is REG_SZ: ""
- 64 HKLM\Software\Classes\*\shell\
- 64 HKLM\Software\Classes\*\shell\Open with Sublime Text\
- 64 HKLM\Software\Classes\*\shell\Open with Sublime Text\command\
- 64 HKLM\Software\Classes\*\shell\Open with Sublime Text\command: "" is REG_SZ: "D:\Program Files\Sublime Text 3\sublime_text.exe "%1""
- 64 HKLM\Software\Classes\*\shell\removeproperties\
- 64 HKLM\Software\Classes\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment"
- 64 HKLM\Software\Classes\*\shell\removeproperties\DropTarget\
- 64 HKLM\Software\Classes\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}"
- 64 HKLM\Software\Classes\*\shellex\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ANotepad++64\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ANotepad++64: "" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\BriefcaseMenu\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\BriefcaseMenu: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\GDContextMenu\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\GDContextMenu: "" is REG_SZ: "{BB02B294-8425-42E5-983F-41A1FA970CD6}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Gonzales\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Gonzales: "" is REG_SZ: "{A50F8401-953F-4C11-8B77-1278C6C7C3F4}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\PowerISO\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\PowerISO: "" is REG_SZ: "{967B2D40-8B7D-4127-9049-61EA0C2C6DCE}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon32\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon32: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon64\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon64: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ShellExtLib\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ShellExtLib: "" is REG_SZ: "{cd56defa-0dfb-3d98-8bf5-804d9de45d90}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR: "" is REG_SZ: "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR32\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR32: "" is REG_SZ: "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin"
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\
- 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin"
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\BriefcasePage\
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\BriefcasePage: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu\
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page"
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\
- 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page"
- **********************************************************************
- 32 HKCR\*\
- 32 HKCR\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta"
- 32 HKCR\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size"
- 32 HKCR\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta"
- 32 HKCR\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size"
- 32 HKCR\*: "AlwaysShowExt" is REG_SZ: ""
- 32 HKCR\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 32 HKCR\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 32 HKCR\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 32 HKCR\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKCR\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 32 HKCR\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKCR\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKCR\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 32 HKCR\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 32 HKCR\*: "NoStaticDefaultVerb" is REG_SZ: ""
- 32 HKCR\*: "NoRecentDocs" is REG_SZ: ""
- 32 HKCR\*\OpenWithList\
- 32 HKCR\*\OpenWithList\Excel.exe\
- 32 HKCR\*\OpenWithList\IExplore.exe\
- 32 HKCR\*\OpenWithList\MSPaint.exe\
- 32 HKCR\*\OpenWithList\MSPaint.exe: "" is REG_SZ: ""
- 32 HKCR\*\OpenWithList\notepad.exe\
- 32 HKCR\*\OpenWithList\notepad.exe: "" is REG_SZ: ""
- 32 HKCR\*\OpenWithList\Winword.exe\
- 32 HKCR\*\OpenWithList\WordPad.exe\
- 32 HKCR\*\OpenWithList\WordPad.exe: "" is REG_SZ: ""
- 32 HKCR\*\shell\
- 32 HKCR\*\shell\Open with Sublime Text\
- 32 HKCR\*\shell\Open with Sublime Text\command\
- 32 HKCR\*\shell\Open with Sublime Text\command: "" is REG_SZ: "D:\Program Files\Sublime Text 3\sublime_text.exe "%1""
- 32 HKCR\*\shell\removeproperties\
- 32 HKCR\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment"
- 32 HKCR\*\shell\removeproperties\DropTarget\
- 32 HKCR\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}"
- 32 HKCR\*\shellex\
- 32 HKCR\*\shellex\ContextMenuHandlers\
- 32 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\
- 32 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}"
- 32 HKCR\*\shellex\ContextMenuHandlers\ANotepad++64\
- 32 HKCR\*\shellex\ContextMenuHandlers\ANotepad++64: "" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}"
- 32 HKCR\*\shellex\ContextMenuHandlers\BriefcaseMenu\
- 32 HKCR\*\shellex\ContextMenuHandlers\BriefcaseMenu: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 32 HKCR\*\shellex\ContextMenuHandlers\DropboxExt\
- 32 HKCR\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}"
- 32 HKCR\*\shellex\ContextMenuHandlers\GDContextMenu\
- 32 HKCR\*\shellex\ContextMenuHandlers\GDContextMenu: "" is REG_SZ: "{BB02B294-8425-42E5-983F-41A1FA970CD6}"
- 32 HKCR\*\shellex\ContextMenuHandlers\Gonzales\
- 32 HKCR\*\shellex\ContextMenuHandlers\Gonzales: "" is REG_SZ: "{A50F8401-953F-4C11-8B77-1278C6C7C3F4}"
- 32 HKCR\*\shellex\ContextMenuHandlers\Open With\
- 32 HKCR\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}"
- 32 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\
- 32 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}"
- 32 HKCR\*\shellex\ContextMenuHandlers\PowerISO\
- 32 HKCR\*\shellex\ContextMenuHandlers\PowerISO: "" is REG_SZ: "{967B2D40-8B7D-4127-9049-61EA0C2C6DCE}"
- 32 HKCR\*\shellex\ContextMenuHandlers\SDECon32\
- 32 HKCR\*\shellex\ContextMenuHandlers\SDECon32: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 32 HKCR\*\shellex\ContextMenuHandlers\SDECon64\
- 32 HKCR\*\shellex\ContextMenuHandlers\SDECon64: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 32 HKCR\*\shellex\ContextMenuHandlers\Sharing\
- 32 HKCR\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
- 32 HKCR\*\shellex\ContextMenuHandlers\ShellExtLib\
- 32 HKCR\*\shellex\ContextMenuHandlers\ShellExtLib: "" is REG_SZ: "{cd56defa-0dfb-3d98-8bf5-804d9de45d90}"
- 32 HKCR\*\shellex\ContextMenuHandlers\WinRAR\
- 32 HKCR\*\shellex\ContextMenuHandlers\WinRAR: "" is REG_SZ: "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
- 32 HKCR\*\shellex\ContextMenuHandlers\WinRAR32\
- 32 HKCR\*\shellex\ContextMenuHandlers\WinRAR32: "" is REG_SZ: "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
- 32 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\
- 32 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin"
- 32 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\
- 32 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin"
- 32 HKCR\*\shellex\PropertySheetHandlers\
- 32 HKCR\*\shellex\PropertySheetHandlers\BriefcasePage\
- 32 HKCR\*\shellex\PropertySheetHandlers\BriefcasePage: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 32 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu\
- 32 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"
- 32 HKCR\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\
- 32 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\
- 32 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page"
- 32 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\
- 32 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page"
- ----------------------------------------------------------------------
- 32 HKCU\Software\Classes\*\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Classes\*\
- 32 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta"
- 32 HKLM\Software\Classes\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size"
- 32 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta"
- 32 HKLM\Software\Classes\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size"
- 32 HKLM\Software\Classes\*: "AlwaysShowExt" is REG_SZ: ""
- 32 HKLM\Software\Classes\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 32 HKLM\Software\Classes\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 32 HKLM\Software\Classes\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 32 HKLM\Software\Classes\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKLM\Software\Classes\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 32 HKLM\Software\Classes\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKLM\Software\Classes\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKLM\Software\Classes\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 32 HKLM\Software\Classes\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 32 HKLM\Software\Classes\*: "NoStaticDefaultVerb" is REG_SZ: ""
- 32 HKLM\Software\Classes\*: "NoRecentDocs" is REG_SZ: ""
- 32 HKLM\Software\Classes\*\OpenWithList\
- 32 HKLM\Software\Classes\*\OpenWithList\Excel.exe\
- 32 HKLM\Software\Classes\*\OpenWithList\IExplore.exe\
- 32 HKLM\Software\Classes\*\OpenWithList\MSPaint.exe\
- 32 HKLM\Software\Classes\*\OpenWithList\MSPaint.exe: "" is REG_SZ: ""
- 32 HKLM\Software\Classes\*\OpenWithList\notepad.exe\
- 32 HKLM\Software\Classes\*\OpenWithList\notepad.exe: "" is REG_SZ: ""
- 32 HKLM\Software\Classes\*\OpenWithList\Winword.exe\
- 32 HKLM\Software\Classes\*\OpenWithList\WordPad.exe\
- 32 HKLM\Software\Classes\*\OpenWithList\WordPad.exe: "" is REG_SZ: ""
- 32 HKLM\Software\Classes\*\shell\
- 32 HKLM\Software\Classes\*\shell\Open with Sublime Text\
- 32 HKLM\Software\Classes\*\shell\Open with Sublime Text\command\
- 32 HKLM\Software\Classes\*\shell\Open with Sublime Text\command: "" is REG_SZ: "D:\Program Files\Sublime Text 3\sublime_text.exe "%1""
- 32 HKLM\Software\Classes\*\shell\removeproperties\
- 32 HKLM\Software\Classes\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment"
- 32 HKLM\Software\Classes\*\shell\removeproperties\DropTarget\
- 32 HKLM\Software\Classes\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}"
- 32 HKLM\Software\Classes\*\shellex\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ANotepad++64\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ANotepad++64: "" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\BriefcaseMenu\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\BriefcaseMenu: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\GDContextMenu\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\GDContextMenu: "" is REG_SZ: "{BB02B294-8425-42E5-983F-41A1FA970CD6}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Gonzales\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Gonzales: "" is REG_SZ: "{A50F8401-953F-4C11-8B77-1278C6C7C3F4}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\PowerISO\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\PowerISO: "" is REG_SZ: "{967B2D40-8B7D-4127-9049-61EA0C2C6DCE}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon32\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon32: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon64\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\SDECon64: "" is REG_SZ: "{44176360-2BBF-4EC1-93CE-384B8681A0BC}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ShellExtLib\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ShellExtLib: "" is REG_SZ: "{cd56defa-0dfb-3d98-8bf5-804d9de45d90}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR: "" is REG_SZ: "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR32\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WinRAR32: "" is REG_SZ: "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin"
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\
- 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin"
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\BriefcasePage\
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\BriefcasePage: "" is REG_SZ: "{85BBD920-42A0-1069-A2E4-08002B30309D}"
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu\
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page"
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\
- 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page"
- **********************************************************************
- 64 HKCR\AllFilesystemObjects\
- 64 HKCR\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 64 HKCR\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 64 HKCR\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 64 HKCR\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKCR\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 64 HKCR\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKCR\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKCR\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 64 HKCR\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 64 HKCR\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: ""
- 64 HKCR\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: ""
- 64 HKCR\AllFilesystemObjects\shellex\
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu\
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu: "" is REG_SZ: "{f3d06e7c-1e45-4a26-847e-f9fcdee59be0}"
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}"
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}"
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension\
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension: "" is REG_SZ: "{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}"
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\
- 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 64 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\
- 64 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 64 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\
- ----------------------------------------------------------------------
- 64 HKCU\Software\Classes\AllFilesystemObjects\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Classes\AllFilesystemObjects\
- 64 HKLM\Software\Classes\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 64 HKLM\Software\Classes\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: ""
- 64 HKLM\Software\Classes\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: ""
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu: "" is REG_SZ: "{f3d06e7c-1e45-4a26-847e-f9fcdee59be0}"
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}"
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}"
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension: "" is REG_SZ: "{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}"
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\
- **********************************************************************
- 32 HKCR\AllFilesystemObjects\
- 32 HKCR\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 32 HKCR\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 32 HKCR\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 32 HKCR\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKCR\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 32 HKCR\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKCR\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKCR\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 32 HKCR\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 32 HKCR\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: ""
- 32 HKCR\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: ""
- 32 HKCR\AllFilesystemObjects\shellex\
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu\
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu: "" is REG_SZ: "{f3d06e7c-1e45-4a26-847e-f9fcdee59be0}"
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}"
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}"
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension\
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension: "" is REG_SZ: "{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}"
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\
- 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 32 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\
- 32 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 32 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\
- ----------------------------------------------------------------------
- 32 HKCU\Software\Classes\AllFilesystemObjects\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Classes\AllFilesystemObjects\
- 32 HKLM\Software\Classes\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated"
- 32 HKLM\Software\Classes\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: ""
- 32 HKLM\Software\Classes\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: ""
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyAsPathMenu: "" is REG_SZ: "{f3d06e7c-1e45-4a26-847e-f9fcdee59be0}"
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}"
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}"
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\UnlockerShellExtension: "" is REG_SZ: "{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}"
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\
- 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\
- **********************************************************************
- 64 HKCR\.exe\
- 64 HKCR\.exe: "" is REG_SZ: "exefile"
- 64 HKCR\.exe: "Content Type" is REG_SZ: "application/x-msdownload"
- 64 HKCR\.exe\PersistentHandler\
- 64 HKCR\.exe\PersistentHandler: "" is REG_SZ: "{098f2470-bae0-11cd-b579-08002b30bfeb}"
- ----------------------------------------------------------------------
- 64 HKCU\Software\Classes\.exe\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Classes\.exe\
- 64 HKLM\Software\Classes\.exe: "" is REG_SZ: "exefile"
- 64 HKLM\Software\Classes\.exe: "Content Type" is REG_SZ: "application/x-msdownload"
- 64 HKLM\Software\Classes\.exe\PersistentHandler\
- 64 HKLM\Software\Classes\.exe\PersistentHandler: "" is REG_SZ: "{098f2470-bae0-11cd-b579-08002b30bfeb}"
- ======================================================================
- 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\
- 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList\
- 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids\
- 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids: "exefile" is REG_NONE
- ----------------------------------------------------------------------
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\ -- Does not exist
- ======================================================================
- 64 HKCR\SystemFileAssociations\.exe\
- 64 HKCR\SystemFileAssociations\.exe: "FullDetails" is REG_SZ: "prop:System.PropGroup.Description;System.FileDescription;System.ItemTypeText;System.FileVersion;System.Software.ProductName;System.Software.ProductVersion;System.Copyright;*System.Category;*System.Comment;System.Size;System.DateModified;System.Language;*System.Trademarks;*System.OriginalFileName"
- 64 HKCR\SystemFileAssociations\.exe: "InfoTip" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- 64 HKCR\SystemFileAssociations\.exe: "TileInfo" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- ----------------------------------------------------------------------
- 64 HKCU\Software\Classes\SystemFileAssociations\.exe\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Classes\SystemFileAssociations\.exe\
- 64 HKLM\Software\Classes\SystemFileAssociations\.exe: "FullDetails" is REG_SZ: "prop:System.PropGroup.Description;System.FileDescription;System.ItemTypeText;System.FileVersion;System.Software.ProductName;System.Software.ProductVersion;System.Copyright;*System.Category;*System.Comment;System.Size;System.DateModified;System.Language;*System.Trademarks;*System.OriginalFileName"
- 64 HKLM\Software\Classes\SystemFileAssociations\.exe: "InfoTip" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- 64 HKLM\Software\Classes\SystemFileAssociations\.exe: "TileInfo" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- ======================================================================
- 64 HKCR\exefile\
- 64 HKCR\exefile: "" is REG_SZ: "Application"
- 64 HKCR\exefile: "EditFlags" is REG_BINARY
- 64 HKCR\exefile: "FriendlyTypeName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\shell32.dll,-10156" --> "@C:\Windows\System32\shell32.dll,-10156" --> "Application"
- 64 HKCR\exefile\DefaultIcon\
- 64 HKCR\exefile\DefaultIcon: "" is REG_SZ: "%1"
- 64 HKCR\exefile\shell\
- 64 HKCR\exefile\shell\open\
- 64 HKCR\exefile\shell\open: "EditFlags" is REG_BINARY
- 64 HKCR\exefile\shell\open: "" is REG_SZ: ""%1" %*"
- 64 HKCR\exefile\shell\open\command\
- 64 HKCR\exefile\shell\open\command: "" is REG_SZ: ""%1" %*"
- 64 HKCR\exefile\shell\open\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 64 HKCR\exefile\shell\runas\
- 64 HKCR\exefile\shell\runas: "HasLUAShield" is REG_SZ: ""
- 64 HKCR\exefile\shell\runas\command\
- 64 HKCR\exefile\shell\runas\command: "" is REG_SZ: ""%1" %*"
- 64 HKCR\exefile\shell\runas\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 64 HKCR\exefile\shell\runasuser\
- 64 HKCR\exefile\shell\runasuser: "" is REG_SZ: "@shell32.dll,-50944" --> "Run as di&fferent user"
- 64 HKCR\exefile\shell\runasuser: "Extended" is REG_SZ: ""
- 64 HKCR\exefile\shell\runasuser: "SuppressionPolicyEx" is REG_SZ: "{F211AA05-D4DF-4370-A2A0-9F19C09756A7}"
- 64 HKCR\exefile\shell\runasuser\command\
- 64 HKCR\exefile\shell\runasuser\command: "DelegateExecute" is REG_SZ: "{ea72d00e-4960-42fa-ba92-7792a7944c1d}"
- 64 HKCR\exefile\shellex\
- 64 HKCR\exefile\shellex\ContextMenuHandlers\
- 64 HKCR\exefile\shellex\ContextMenuHandlers: "" is REG_SZ: "Compatibility"
- 64 HKCR\exefile\shellex\ContextMenuHandlers\Compatibility\
- 64 HKCR\exefile\shellex\ContextMenuHandlers\Compatibility: "" is REG_SZ: "{1d27f844-3a1f-4410-85ac-14651078412d}"
- 64 HKCR\exefile\shellex\DropHandler\
- 64 HKCR\exefile\shellex\DropHandler: "" is REG_SZ: "{86C86720-42A0-1069-A2E8-08002B30309D}"
- 64 HKCR\exefile\shellex\PropertySheetHandlers\
- 64 HKCR\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page\
- 64 HKCR\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page: "" is REG_SZ: "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"
- 64 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\
- 64 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- 64 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\
- 64 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- ----------------------------------------------------------------------
- 64 HKCU\Software\Classes\exefile\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Classes\exefile\
- 64 HKLM\Software\Classes\exefile: "" is REG_SZ: "Application"
- 64 HKLM\Software\Classes\exefile: "EditFlags" is REG_BINARY
- 64 HKLM\Software\Classes\exefile: "FriendlyTypeName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\shell32.dll,-10156" --> "@C:\Windows\System32\shell32.dll,-10156" --> "Application"
- 64 HKLM\Software\Classes\exefile\DefaultIcon\
- 64 HKLM\Software\Classes\exefile\DefaultIcon: "" is REG_SZ: "%1"
- 64 HKLM\Software\Classes\exefile\shell\
- 64 HKLM\Software\Classes\exefile\shell\open\
- 64 HKLM\Software\Classes\exefile\shell\open: "EditFlags" is REG_BINARY
- 64 HKLM\Software\Classes\exefile\shell\open: "" is REG_SZ: ""%1" %*"
- 64 HKLM\Software\Classes\exefile\shell\open\command\
- 64 HKLM\Software\Classes\exefile\shell\open\command: "" is REG_SZ: ""%1" %*"
- 64 HKLM\Software\Classes\exefile\shell\open\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 64 HKLM\Software\Classes\exefile\shell\runas\
- 64 HKLM\Software\Classes\exefile\shell\runas: "HasLUAShield" is REG_SZ: ""
- 64 HKLM\Software\Classes\exefile\shell\runas\command\
- 64 HKLM\Software\Classes\exefile\shell\runas\command: "" is REG_SZ: ""%1" %*"
- 64 HKLM\Software\Classes\exefile\shell\runas\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 64 HKLM\Software\Classes\exefile\shell\runasuser\
- 64 HKLM\Software\Classes\exefile\shell\runasuser: "" is REG_SZ: "@shell32.dll,-50944" --> "Run as di&fferent user"
- 64 HKLM\Software\Classes\exefile\shell\runasuser: "Extended" is REG_SZ: ""
- 64 HKLM\Software\Classes\exefile\shell\runasuser: "SuppressionPolicyEx" is REG_SZ: "{F211AA05-D4DF-4370-A2A0-9F19C09756A7}"
- 64 HKLM\Software\Classes\exefile\shell\runasuser\command\
- 64 HKLM\Software\Classes\exefile\shell\runasuser\command: "DelegateExecute" is REG_SZ: "{ea72d00e-4960-42fa-ba92-7792a7944c1d}"
- 64 HKLM\Software\Classes\exefile\shellex\
- 64 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers\
- 64 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers: "" is REG_SZ: "Compatibility"
- 64 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers\Compatibility\
- 64 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers\Compatibility: "" is REG_SZ: "{1d27f844-3a1f-4410-85ac-14651078412d}"
- 64 HKLM\Software\Classes\exefile\shellex\DropHandler\
- 64 HKLM\Software\Classes\exefile\shellex\DropHandler: "" is REG_SZ: "{86C86720-42A0-1069-A2E8-08002B30309D}"
- 64 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\
- 64 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page\
- 64 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page: "" is REG_SZ: "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"
- 64 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\
- 64 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- 64 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\
- 64 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- **********************************************************************
- 32 HKCR\.exe\
- 32 HKCR\.exe: "" is REG_SZ: "exefile"
- 32 HKCR\.exe: "Content Type" is REG_SZ: "application/x-msdownload"
- 32 HKCR\.exe\PersistentHandler\
- 32 HKCR\.exe\PersistentHandler: "" is REG_SZ: "{098f2470-bae0-11cd-b579-08002b30bfeb}"
- ----------------------------------------------------------------------
- 32 HKCU\Software\Classes\.exe\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Classes\.exe\
- 32 HKLM\Software\Classes\.exe: "" is REG_SZ: "exefile"
- 32 HKLM\Software\Classes\.exe: "Content Type" is REG_SZ: "application/x-msdownload"
- 32 HKLM\Software\Classes\.exe\PersistentHandler\
- 32 HKLM\Software\Classes\.exe\PersistentHandler: "" is REG_SZ: "{098f2470-bae0-11cd-b579-08002b30bfeb}"
- ======================================================================
- 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\
- 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList\
- 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids\
- 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids: "exefile" is REG_NONE
- ----------------------------------------------------------------------
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\ -- Does not exist
- ======================================================================
- 32 HKCR\SystemFileAssociations\.exe\
- 32 HKCR\SystemFileAssociations\.exe: "FullDetails" is REG_SZ: "prop:System.PropGroup.Description;System.FileDescription;System.ItemTypeText;System.FileVersion;System.Software.ProductName;System.Software.ProductVersion;System.Copyright;*System.Category;*System.Comment;System.Size;System.DateModified;System.Language;*System.Trademarks;*System.OriginalFileName"
- 32 HKCR\SystemFileAssociations\.exe: "InfoTip" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- 32 HKCR\SystemFileAssociations\.exe: "TileInfo" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- ----------------------------------------------------------------------
- 32 HKCU\Software\Classes\SystemFileAssociations\.exe\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Classes\SystemFileAssociations\.exe\
- 32 HKLM\Software\Classes\SystemFileAssociations\.exe: "FullDetails" is REG_SZ: "prop:System.PropGroup.Description;System.FileDescription;System.ItemTypeText;System.FileVersion;System.Software.ProductName;System.Software.ProductVersion;System.Copyright;*System.Category;*System.Comment;System.Size;System.DateModified;System.Language;*System.Trademarks;*System.OriginalFileName"
- 32 HKLM\Software\Classes\SystemFileAssociations\.exe: "InfoTip" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- 32 HKLM\Software\Classes\SystemFileAssociations\.exe: "TileInfo" is REG_SZ: "prop:System.FileDescription;System.Company;System.FileVersion;System.DateCreated;System.Size"
- ======================================================================
- 32 HKCR\exefile\
- 32 HKCR\exefile: "" is REG_SZ: "Application"
- 32 HKCR\exefile: "EditFlags" is REG_BINARY
- 32 HKCR\exefile: "FriendlyTypeName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\shell32.dll,-10156" --> "@C:\Windows\System32\shell32.dll,-10156" --> "Application"
- 32 HKCR\exefile\DefaultIcon\
- 32 HKCR\exefile\DefaultIcon: "" is REG_SZ: "%1"
- 32 HKCR\exefile\shell\
- 32 HKCR\exefile\shell\open\
- 32 HKCR\exefile\shell\open: "EditFlags" is REG_BINARY
- 32 HKCR\exefile\shell\open: "" is REG_SZ: ""%1" %*"
- 32 HKCR\exefile\shell\open\command\
- 32 HKCR\exefile\shell\open\command: "" is REG_SZ: ""%1" %*"
- 32 HKCR\exefile\shell\open\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 32 HKCR\exefile\shell\runas\
- 32 HKCR\exefile\shell\runas: "HasLUAShield" is REG_SZ: ""
- 32 HKCR\exefile\shell\runas\command\
- 32 HKCR\exefile\shell\runas\command: "" is REG_SZ: ""%1" %*"
- 32 HKCR\exefile\shell\runas\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 32 HKCR\exefile\shell\runasuser\
- 32 HKCR\exefile\shell\runasuser: "" is REG_SZ: "@shell32.dll,-50944" --> "Run as di&fferent user"
- 32 HKCR\exefile\shell\runasuser: "Extended" is REG_SZ: ""
- 32 HKCR\exefile\shell\runasuser: "SuppressionPolicyEx" is REG_SZ: "{F211AA05-D4DF-4370-A2A0-9F19C09756A7}"
- 32 HKCR\exefile\shell\runasuser\command\
- 32 HKCR\exefile\shell\runasuser\command: "DelegateExecute" is REG_SZ: "{ea72d00e-4960-42fa-ba92-7792a7944c1d}"
- 32 HKCR\exefile\shellex\
- 32 HKCR\exefile\shellex\ContextMenuHandlers\
- 32 HKCR\exefile\shellex\ContextMenuHandlers: "" is REG_SZ: "Compatibility"
- 32 HKCR\exefile\shellex\ContextMenuHandlers\Compatibility\
- 32 HKCR\exefile\shellex\ContextMenuHandlers\Compatibility: "" is REG_SZ: "{1d27f844-3a1f-4410-85ac-14651078412d}"
- 32 HKCR\exefile\shellex\DropHandler\
- 32 HKCR\exefile\shellex\DropHandler: "" is REG_SZ: "{86C86720-42A0-1069-A2E8-08002B30309D}"
- 32 HKCR\exefile\shellex\PropertySheetHandlers\
- 32 HKCR\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page\
- 32 HKCR\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page: "" is REG_SZ: "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"
- 32 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\
- 32 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- 32 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\
- 32 HKCR\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- ----------------------------------------------------------------------
- 32 HKCU\Software\Classes\exefile\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Classes\exefile\
- 32 HKLM\Software\Classes\exefile: "" is REG_SZ: "Application"
- 32 HKLM\Software\Classes\exefile: "EditFlags" is REG_BINARY
- 32 HKLM\Software\Classes\exefile: "FriendlyTypeName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\shell32.dll,-10156" --> "@C:\Windows\System32\shell32.dll,-10156" --> "Application"
- 32 HKLM\Software\Classes\exefile\DefaultIcon\
- 32 HKLM\Software\Classes\exefile\DefaultIcon: "" is REG_SZ: "%1"
- 32 HKLM\Software\Classes\exefile\shell\
- 32 HKLM\Software\Classes\exefile\shell\open\
- 32 HKLM\Software\Classes\exefile\shell\open: "EditFlags" is REG_BINARY
- 32 HKLM\Software\Classes\exefile\shell\open: "" is REG_SZ: ""%1" %*"
- 32 HKLM\Software\Classes\exefile\shell\open\command\
- 32 HKLM\Software\Classes\exefile\shell\open\command: "" is REG_SZ: ""%1" %*"
- 32 HKLM\Software\Classes\exefile\shell\open\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 32 HKLM\Software\Classes\exefile\shell\runas\
- 32 HKLM\Software\Classes\exefile\shell\runas: "HasLUAShield" is REG_SZ: ""
- 32 HKLM\Software\Classes\exefile\shell\runas\command\
- 32 HKLM\Software\Classes\exefile\shell\runas\command: "" is REG_SZ: ""%1" %*"
- 32 HKLM\Software\Classes\exefile\shell\runas\command: "IsolatedCommand" is REG_SZ: ""%1" %*"
- 32 HKLM\Software\Classes\exefile\shell\runasuser\
- 32 HKLM\Software\Classes\exefile\shell\runasuser: "" is REG_SZ: "@shell32.dll,-50944" --> "Run as di&fferent user"
- 32 HKLM\Software\Classes\exefile\shell\runasuser: "Extended" is REG_SZ: ""
- 32 HKLM\Software\Classes\exefile\shell\runasuser: "SuppressionPolicyEx" is REG_SZ: "{F211AA05-D4DF-4370-A2A0-9F19C09756A7}"
- 32 HKLM\Software\Classes\exefile\shell\runasuser\command\
- 32 HKLM\Software\Classes\exefile\shell\runasuser\command: "DelegateExecute" is REG_SZ: "{ea72d00e-4960-42fa-ba92-7792a7944c1d}"
- 32 HKLM\Software\Classes\exefile\shellex\
- 32 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers\
- 32 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers: "" is REG_SZ: "Compatibility"
- 32 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers\Compatibility\
- 32 HKLM\Software\Classes\exefile\shellex\ContextMenuHandlers\Compatibility: "" is REG_SZ: "{1d27f844-3a1f-4410-85ac-14651078412d}"
- 32 HKLM\Software\Classes\exefile\shellex\DropHandler\
- 32 HKLM\Software\Classes\exefile\shellex\DropHandler: "" is REG_SZ: "{86C86720-42A0-1069-A2E8-08002B30309D}"
- 32 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\
- 32 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page\
- 32 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page: "" is REG_SZ: "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"
- 32 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}\
- 32 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- 32 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}\
- 32 HKLM\Software\Classes\exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}: "" is REG_SZ: ""
- **********************************************************************
- HKLM RegisteredApplications
- **********************************************************************
- 64 HKLM\SOFTWARE\RegisteredApplications\
- 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Address Book" is REG_SZ: "Software\Clients\Contacts\Address Book\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Paint" is REG_SZ: "SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Search" is REG_SZ: "Software\Microsoft\Windows Search\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Disc Image Burner" is REG_SZ: "Software\Microsoft\IsoBurn\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Photo Viewer" is REG_SZ: "Software\Microsoft\Windows Photo Viewer\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Media Player" is REG_SZ: "Software\Clients\Media\Windows Media Player\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Wordpad" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Internet Explorer" is REG_SZ: "SOFTWARE\Microsoft\Internet Explorer\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Media Center" is REG_SZ: "Software\Clients\Media\Windows Media Center\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Google Chrome" is REG_SZ: "Software\Clients\StartMenuInternet\Google Chrome\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Firefox" is REG_SZ: "Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "WinRAR" is REG_SZ: "Software\WinRAR\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "WinSCP" is REG_SZ: "Software\Martin Prikryl\WinSCPCapabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "VLC" is REG_SZ: "Software\Clients\Media\VLC\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "GWX" is REG_SZ: "SOFTWARE\Microsoft\GWX\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "OpenOffice 4.1.2" is REG_SZ: "SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Skype" is REG_SZ: "SOFTWARE\Clients\Internet Call\Skype\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Thunderbird" is REG_SZ: "Software\Clients\Mail\Mozilla Thunderbird\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Thunderbird (News)" is REG_SZ: "Software\Clients\News\Mozilla Thunderbird\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Mailbird" is REG_SZ: "Software\Clients\Mail\Mailbird\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Excel.Application.16" is REG_SZ: "Software\Clients\Spreadsheet\Microsoft Excel\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "OneNote.Application.16" is REG_SZ: "Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Outlook.Application.16" is REG_SZ: "Software\Microsoft\Office\16.0\Outlook\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "PowerPoint.Application.16" is REG_SZ: "Software\Clients\Presentation\Microsoft PowerPoint\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Publisher.Application.16" is REG_SZ: "Software\Clients\Publishing\Microsoft Publisher\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Word.Application.16" is REG_SZ: "Software\Clients\Word Processing\Microsoft Word\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Access.Application.16" is REG_SZ: "SOFTWARE\Microsoft\Office\16.0\Access\Capabilities"
- 64 HKLM\SOFTWARE\RegisteredApplications: "Opera Stable" is REG_SZ: "Software\Clients\StartMenuInternet\OperaStable\Capabilities"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4606" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4606" --> "Windows Contacts allows you to store e-mail addresses and other information about people and organizations."
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4408" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4408" --> "Windows Contacts"
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".contact" is REG_SZ: "contact_wab_auto_file"
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".group" is REG_SZ: "group_wab_auto_file"
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".vcf" is REG_SZ: "vcard_wab_auto_file"
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".p7c" is REG_SZ: "certificate_wab_auto_file"
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations: "LDAP" is REG_SZ: "LDAP"
- ----------------------------------------------------------------------
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\system32\mspaint.exe,-50142" --> "@C:\Windows\system32\mspaint.exe,-50142" --> "Paint allows users to create and edit drawings by using a variety of shapes, brushes, and colors."
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\system32\mspaint.exe,-57344" --> "@C:\Windows\system32\mspaint.exe,-57344" --> "Paint"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations\
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".bmp" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".dib" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".rle" is REG_SZ: "rlefile"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jpg" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jpeg" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jpe" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jfif" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".gif" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".emf" is REG_SZ: "emffile"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".wmf" is REG_SZ: "wmffile"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".tif" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".tiff" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".png" is REG_SZ: "PBrush"
- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".ico" is REG_SZ: "PBrush"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Microsoft\Windows Search\Capabilities\
- 64 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6012" --> "@C:\Windows\explorer.exe,-6012" --> "Windows Search Explorer allows you to quickly search for files and folders anywhere on your computer."
- 64 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6011" --> "@C:\Windows\explorer.exe,-6011" --> "Windows Search Explorer"
- 64 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations\
- 64 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations: "search" is REG_SZ: "Explorer.AssocProtocol.search-ms"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\
- 64 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-353" --> "@C:\Windows\System32\isoburn.exe,-353" --> "Windows Disc Image Burner allows users to burn a CD or DVD from an ISO disc image file."
- 64 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-352" --> "@C:\Windows\System32\isoburn.exe,-352" --> "Windows Disc Image Burner"
- 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations\
- 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".img" is REG_SZ: "Windows.IsoFile"
- 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".iso" is REG_SZ: "Windows.IsoFile"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationDescription" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3069"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationName" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3009"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations\
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jpg" is REG_SZ: "PhotoViewer.FileAssoc.Jpeg"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".wdp" is REG_SZ: "PhotoViewer.FileAssoc.Wdp"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jfif" is REG_SZ: "PhotoViewer.FileAssoc.JFIF"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".dib" is REG_SZ: "PhotoViewer.FileAssoc.Bitmap"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".png" is REG_SZ: "PhotoViewer.FileAssoc.Png"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tiff" is REG_SZ: "PhotoViewer.FileAssoc.Tiff"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".bmp" is REG_SZ: "PhotoViewer.FileAssoc.Bitmap"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jpe" is REG_SZ: "PhotoViewer.FileAssoc.Jpeg"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jpeg" is REG_SZ: "PhotoViewer.FileAssoc.Jpeg"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".gif" is REG_SZ: "PhotoViewer.FileAssoc.Gif"
- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tif" is REG_SZ: "PhotoViewer.FileAssoc.Tiff"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\system32\wmploc.dll,-29400" --> "@C:\Windows\system32\wmploc.dll,-29400" --> "Windows Media Player is your digital music software that puts you in control of your music experience."
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\system32\unregmp2.exe,-4" --> "@C:\Windows\system32\unregmp2.exe,-4" --> "Windows Media Player"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities: "Hidden" is REG_DWORD: 0 (0x0)
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3gp2" is REG_SZ: "WMP11.AssocFile.3G2"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmd" is REG_SZ: "WMP11.AssocFile.WMD"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp2" is REG_SZ: "WMP11.AssocFile.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp3" is REG_SZ: "WMP11.AssocFile.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp4" is REG_SZ: "WMP11.AssocFile.MP4"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wpl" is REG_SZ: "WMP11.AssocFile.WPL"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aiff" is REG_SZ: "WMP11.AssocFile.AIFF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".ts" is REG_SZ: "WMP11.AssocFile.TTS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wvx" is REG_SZ: "WMP11.AssocFile.WVX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".midi" is REG_SZ: "WMP11.AssocFile.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".avi" is REG_SZ: "WMP11.AssocFile.AVI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".asf" is REG_SZ: "WMP11.AssocFile.ASF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpv2" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wms" is REG_SZ: "WMP11.AssocFile.WMS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3gpp" is REG_SZ: "WMP11.AssocFile.3GP"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmv" is REG_SZ: "WMP11.AssocFile.WMV"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmx" is REG_SZ: "WMP11.AssocFile.ASX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmz" is REG_SZ: "WMP11.AssocFile.WMZ"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aif" is REG_SZ: "WMP11.AssocFile.AIFF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpeg" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aac" is REG_SZ: "WMP11.AssocFile.ADTS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wav" is REG_SZ: "WMP11.AssocFile.WAV"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".asx" is REG_SZ: "WMP11.AssocFile.ASX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".rmi" is REG_SZ: "WMP11.AssocFile.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wax" is REG_SZ: "WMP11.AssocFile.WAX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aifc" is REG_SZ: "WMP11.AssocFile.AIFF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".snd" is REG_SZ: "WMP11.AssocFile.AU"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m4a" is REG_SZ: "WMP11.AssocFile.M4A"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".cda" is REG_SZ: "WMP11.AssocFile.CDA"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".adt" is REG_SZ: "WMP11.AssocFile.ADTS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wm" is REG_SZ: "WMP11.AssocFile.ASF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpa" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".adts" is REG_SZ: "WMP11.AssocFile.ADTS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpe" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mod" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".tts" is REG_SZ: "WMP11.AssocFile.TTS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpg" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3gp" is REG_SZ: "WMP11.AssocFile.3GP"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".au" is REG_SZ: "WMP11.AssocFile.AU"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp2v" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp4v" is REG_SZ: "WMP11.AssocFile.MP4"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m4v" is REG_SZ: "WMP11.AssocFile.MP4"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m3u" is REG_SZ: "WMP11.AssocFile.m3u"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m2t" is REG_SZ: "WMP11.AssocFile.M2TS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mid" is REG_SZ: "WMP11.AssocFile.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m2v" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m1v" is REG_SZ: "WMP11.AssocFile.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mts" is REG_SZ: "WMP11.AssocFile.M2TS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3g2" is REG_SZ: "WMP11.AssocFile.3G2"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m2ts" is REG_SZ: "WMP11.AssocFile.M2TS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wma" is REG_SZ: "WMP11.AssocFile.WMA"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mov" is REG_SZ: "WMP11.AssocFile.MOV"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations\
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/quicktime" is REG_SZ: "WMP11.AssocMIME.MOV"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/msvideo" is REG_SZ: "WMP11.AssocMIME.AVI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wmx" is REG_SZ: "WMP11.AssocMIME.ASX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/midi" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/vnd.dlna.mpeg-tts" is REG_SZ: "WMP11.AssocMIME.TTS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/vnd.dlna.adts" is REG_SZ: "WMP11.AssocMIME.ADTS"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/wav" is REG_SZ: "WMP11.AssocMIME.WAV"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/3gpp" is REG_SZ: "WMP11.AssocMIME.3GP"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/3gpp" is REG_SZ: "WMP11.AssocMIME.3GP"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-wav" is REG_SZ: "WMP11.AssocMIME.WAV"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/3gpp2" is REG_SZ: "WMP11.AssocMIME.3G2"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-aiff" is REG_SZ: "WMP11.AssocMIME.AIFF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mp3" is REG_SZ: "WMP11.AssocMIME.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-ms-wma" is REG_SZ: "WMP11.AssocMIME.WMA"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mpegurl" is REG_SZ: "WMP11.AssocMIME.M3U"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mpg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/x-mplayer2" is REG_SZ: "WMP11.AssocMIME.ASF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/avi" is REG_SZ: "WMP11.AssocMIME.AVI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/mpg" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-mpeg" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/vnd.ms-wpl" is REG_SZ: "WMP11.AssocMIME.WPL"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/3gpp2" is REG_SZ: "WMP11.AssocMIME.3G2"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mpegurl" is REG_SZ: "WMP11.AssocMIME.M3U"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wm" is REG_SZ: "WMP11.AssocMIME.ASF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/x-ms-wmd" is REG_SZ: "WMP11.AssocMIME.WMD"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/aiff" is REG_SZ: "WMP11.AssocMIME.AIFF"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mpg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "midi/mid" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-asf-plugin" is REG_SZ: "WMP11.AssocMIME.ASX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mid" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-ms-wax" is REG_SZ: "WMP11.AssocMIME.WAX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mpeg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-asf" is REG_SZ: "WMP11.AssocMIME.ASX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mp4" is REG_SZ: "WMP11.AssocMIME.M4A"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mid" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mpeg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/mp4" is REG_SZ: "WMP11.AssocMIME.MP4"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wmv" is REG_SZ: "WMP11.AssocMIME.WMV"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/mpeg" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/x-ms-wmz" is REG_SZ: "WMP11.AssocMIME.WMZ"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mp3" is REG_SZ: "WMP11.AssocMIME.MP3"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-msvideo" is REG_SZ: "WMP11.AssocMIME.AVI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/basic" is REG_SZ: "WMP11.AssocMIME.AU"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-midi" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-mpeg2a" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wvx" is REG_SZ: "WMP11.AssocMIME.WVX"
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\URLAssociations: "mms" is REG_SZ: "WMP11.AssocProtocol.MMS"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-40128" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-40128" --> "Microsoft WordPad is a word processing program that you can use to create and edit text documents with rich formatting and pictures. WordPad can open .docx, .odt, .rtf or .txt files."
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-57344" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-57344" --> "WordPad"
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations\
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".rtf" is REG_SZ: "rtffile"
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".docx" is REG_SZ: "docxfile"
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".odt" is REG_SZ: "odtfile"
- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".txt" is REG_SZ: "textfile"
- ----------------------------------------------------------------------
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Internet Explorer\iexplore.exe,-706" --> "Internet Explorer 11 provides an easier and more secure web browsing experience. Perform quick searches right from the toolbar, custom print your webpages, and discover, manage, and read RSS feeds."
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".mht" is REG_SZ: "IE.AssocFile.MHT"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".html" is REG_SZ: "IE.AssocFile.HTM"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".htm" is REG_SZ: "IE.AssocFile.HTM"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".url" is REG_SZ: "IE.AssocFile.URL"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "IE.AssocFile.MHT"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".xht" is REG_SZ: "IE.AssocFile.XHT"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".svg" is REG_SZ: "IE.AssocFile.SVG"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".partial" is REG_SZ: "IE.AssocFile.PARTIAL"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".website" is REG_SZ: "IE.AssocFile.WEBSITE"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "IE.AssocFile.XHT"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\MIMEAssociations\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\MIMEAssociations: "message/rfc822" is REG_SZ: "IE.message/rfc822"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\MIMEAssociations: "text/html" is REG_SZ: "IE.text/html"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\AutocompleteFormData\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\AutocompleteFormData: "DataProtected" is REG_DWORD: 1 (0x1)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\AutocompleteFormData: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\IntelliForms\FormData"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\DomainSuggestion\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\DomainSuggestion: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\DomainSuggestion: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\DomainSuggestion\Exclude"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FavoriteUrls\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FavoriteUrls: "OrderRegPath" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FavoriteUrls: "KnownFolderId" is REG_SZ: "{1777F761-68AD-4D8A-87BD-30B759FA33DD}"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "lParamValue" is REG_DWORD: 3 (0x3)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "FilterIn" is REG_SZ: "FPEnabled"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\FlipAhead"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggest\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggest: "FilterIn" is REG_SZ: "FormSuggest Passwords,Use FormSuggest,FormSuggest PW Ask"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggest: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Main"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggestAskUser\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggestAskUser: "FilterIn" is REG_SZ: "AskUser"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggestAskUser: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\IntelliForms"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FullScreenAllowSites\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FullScreenAllowSites: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\FullScreen\AllowDomains"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PopupBlockerAllowList\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PopupBlockerAllowList: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\New Windows\Allow"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "lParamValue" is REG_DWORD: 7 (0x7)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "FilterIn" is REG_SZ: "PrivacyAdvanced"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "RegistryRoot" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Internet Settings"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\SearchSuggestion\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\SearchSuggestion: "FilterIn" is REG_SZ: "ShowSearchSuggestionsInAddressGlobal"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\SearchSuggestion: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\SearchScopes"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ServicePoweredQSA\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ServicePoweredQSA: "FilterIn" is REG_SZ: "AllowServicePoweredQSA"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ServicePoweredQSA: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Main"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\StartPage\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\StartPage: "FilterIn" is REG_SZ: "Start Page,Secondary Start Pages,SyncHomePage,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\StartPage: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Main"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabbedBrowsing\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabbedBrowsing: "FilterIn" is REG_SZ: "Enabled,Groups,NewTabNextToCurrent,NewTabPageShow,OpenAllHomePages,OpenInForeground,PopupsUseNewWindow,ShortcutBehavior,ThumbnailBehavior,WarnOnClose"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabbedBrowsing: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\TabbedBrowsing"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming: "RelativePath" is REG_SZ: "Microsoft\Internet Explorer\TabRoaming"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming: "KnownFolderId" is REG_SZ: "{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming: "Recursive" is REG_DWORD: 1 (0x1)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "lParamValue" is REG_DWORD: 6 (0x6)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "FilterIn" is REG_SZ: "{A8A88C49-5EB2-4990-A1A2-0876022C854F},{AEBA21FA-782A-4A90-978D-B72164C80120}"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "RegistryRoot" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "lParamValue" is REG_DWORD: 4 (0x4)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "FilterIn" is REG_SZ: "FilteringMode,PersonalizedModeAuto,TrackingProtectionThreshold"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Safety\PrivacIE"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionExceptions\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionExceptions: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Safety\Tracking Protection Exceptions"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "lParamValue" is REG_DWORD: 5 (0x5)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "FilterIn" is REG_SZ: "Enabled,Name,Url"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "Recursive" is REG_DWORD: 1 (0x1)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Safety\PrivacIE\Lists"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "lParamValue" is REG_DWORD: 1 (0x1)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "URLsRegPath" is REG_SZ: "Software\Microsoft\Internet Explorer\TypedURLs"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "URLsTimeRegPath" is REG_SZ: "Software\Microsoft\Internet Explorer\TypedURLsTime"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "lParamValue" is REG_DWORD: 2 (0x2)
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "KnownFolderId" is REG_SZ: "{D9DC8A3B-B784-432E-A781-5A1130A75963}"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "InitialApplyCommandLine" is REG_SZ: ""C:\Windows\System32\ie4uinit.exe" -InitHistoryRoaming"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "WinInetPrefix" is REG_SZ: "Visited:"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\Favorites\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\Favorites: "KnownFolderId" is REG_EXPAND_SZ: "{1777F761-68AD-4D8A-87BD-30B759FA33DD}" --> "{1777F761-68AD-4D8A-87BD-30B759FA33DD}"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\History\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\History: "Protocol" is REG_EXPAND_SZ: "iehistory:" --> "iehistory:"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Startmenu\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Startmenu: "StartmenuInternet" is REG_SZ: "IEXPLORE.EXE"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations\
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations: "https" is REG_SZ: "IE.HTTPS"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations: "ftp" is REG_SZ: "IE.FTP"
- 64 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations: "http" is REG_SZ: "IE.HTTP"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\
- 64 HKLM\Software\Clients\Media\Windows Media Center\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%windir%\ehome\ehres.dll,-116" --> "@C:\Windows\ehome\ehres.dll,-116" --> "Opens your home entertainment option for digital and on-demand media, including TV, movies, music and pictures."
- 64 HKLM\Software\Clients\Media\Windows Media Center\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%windir%\ehome\ehres.dll,-100" --> "@C:\Windows\ehome\ehres.dll,-100" --> "Windows Media Center"
- 64 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations: ".dvr-ms" is REG_SZ: "MediaCenter.DVR-MS"
- 64 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations: ".wtv" is REG_SZ: "MediaCenter.WTVFile"
- 64 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations: ".dvr" is REG_SZ: "MediaCenter.DVR"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationDescription" is REG_SZ: "Google Chrome is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Google Chrome."
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,0"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationName" is REG_SZ: "Google Chrome"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".htm" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".html" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".shtml" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xht" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".webp" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu\
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Google Chrome"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "ftp" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "http" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "https" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "irc" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mailto" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mms" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "news" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "nntp" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "sms" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "smsto" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "tel" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "urn" is REG_SZ: "ChromeHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "webcal" is REG_SZ: "ChromeHTML"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities: "ApplicationDescription" is REG_SZ: "'Firefox' delivers safe, easy web browsing. A familiar user interface, enhanced security features including protection from online identity theft, and integrated search let you get the most out of the web."
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Mozilla Firefox\firefox.exe,0"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities: "ApplicationName" is REG_SZ: "'Firefox'"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".htm" is REG_SZ: "FirefoxHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".html" is REG_SZ: "FirefoxHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".shtml" is REG_SZ: "FirefoxHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".xht" is REG_SZ: "FirefoxHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "FirefoxHTML"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\StartMenu\
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\StartMenu: "StartMenuInternet" is REG_SZ: "FIREFOX.EXE"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations: "ftp" is REG_SZ: "FirefoxURL"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations: "http" is REG_SZ: "FirefoxURL"
- 64 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations: "https" is REG_SZ: "FirefoxURL"
- ----------------------------------------------------------------------
- 64 HKLM\Software\WinRAR\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Martin Prikryl\WinSCPCapabilities\
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\
- 64 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationName" is REG_SZ: "VLC media player"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationDescription" is REG_SZ: "VLC - The video swiss knife"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3ga" is REG_SZ: "VLC.3ga"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".669" is REG_SZ: "VLC.669"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".a52" is REG_SZ: "VLC.a52"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aac" is REG_SZ: "VLC.aac"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ac3" is REG_SZ: "VLC.ac3"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adt" is REG_SZ: "VLC.adt"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adts" is REG_SZ: "VLC.adts"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aif" is REG_SZ: "VLC.aif"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aifc" is REG_SZ: "VLC.aifc"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aiff" is REG_SZ: "VLC.aiff"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".au" is REG_SZ: "VLC.au"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amr" is REG_SZ: "VLC.amr"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aob" is REG_SZ: "VLC.aob"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ape" is REG_SZ: "VLC.ape"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".caf" is REG_SZ: "VLC.caf"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cda" is REG_SZ: "VLC.cda"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dts" is REG_SZ: "VLC.dts"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flac" is REG_SZ: "VLC.flac"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".it" is REG_SZ: "VLC.it"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4a" is REG_SZ: "VLC.m4a"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4p" is REG_SZ: "VLC.m4p"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mid" is REG_SZ: "VLC.mid"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mka" is REG_SZ: "VLC.mka"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mlp" is REG_SZ: "VLC.mlp"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mod" is REG_SZ: "VLC.mod"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp1" is REG_SZ: "VLC.mp1"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2" is REG_SZ: "VLC.mp2"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp3" is REG_SZ: "VLC.mp3"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpc" is REG_SZ: "VLC.mpc"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpga" is REG_SZ: "VLC.mpga"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oga" is REG_SZ: "VLC.oga"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oma" is REG_SZ: "VLC.oma"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".opus" is REG_SZ: "VLC.opus"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".qcp" is REG_SZ: "VLC.qcp"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ra" is REG_SZ: "VLC.ra"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmi" is REG_SZ: "VLC.rmi"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".snd" is REG_SZ: "VLC.snd"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".s3m" is REG_SZ: "VLC.s3m"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".spx" is REG_SZ: "VLC.spx"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tta" is REG_SZ: "VLC.tta"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".voc" is REG_SZ: "VLC.voc"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vqf" is REG_SZ: "VLC.vqf"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".w64" is REG_SZ: "VLC.w64"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wav" is REG_SZ: "VLC.wav"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wma" is REG_SZ: "VLC.wma"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wv" is REG_SZ: "VLC.wv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xa" is REG_SZ: "VLC.xa"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xm" is REG_SZ: "VLC.xm"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3g2" is REG_SZ: "VLC.3g2"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp" is REG_SZ: "VLC.3gp"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp2" is REG_SZ: "VLC.3gp2"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gpp" is REG_SZ: "VLC.3gpp"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amv" is REG_SZ: "VLC.amv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asf" is REG_SZ: "VLC.asf"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".avi" is REG_SZ: "VLC.avi"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".bik" is REG_SZ: "VLC.bik"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".divx" is REG_SZ: "VLC.divx"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".drc" is REG_SZ: "VLC.drc"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dv" is REG_SZ: "VLC.dv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".f4v" is REG_SZ: "VLC.f4v"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flv" is REG_SZ: "VLC.flv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gvi" is REG_SZ: "VLC.gvi"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gxf" is REG_SZ: "VLC.gxf"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m1v" is REG_SZ: "VLC.m1v"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2t" is REG_SZ: "VLC.m2t"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2v" is REG_SZ: "VLC.m2v"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2ts" is REG_SZ: "VLC.m2ts"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4v" is REG_SZ: "VLC.m4v"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mkv" is REG_SZ: "VLC.mkv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mov" is REG_SZ: "VLC.mov"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2v" is REG_SZ: "VLC.mp2v"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4" is REG_SZ: "VLC.mp4"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4v" is REG_SZ: "VLC.mp4v"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpa" is REG_SZ: "VLC.mpa"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpe" is REG_SZ: "VLC.mpe"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg" is REG_SZ: "VLC.mpeg"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg1" is REG_SZ: "VLC.mpeg1"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg2" is REG_SZ: "VLC.mpeg2"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg4" is REG_SZ: "VLC.mpeg4"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpg" is REG_SZ: "VLC.mpg"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpv2" is REG_SZ: "VLC.mpv2"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mts" is REG_SZ: "VLC.mts"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mtv" is REG_SZ: "VLC.mtv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mxf" is REG_SZ: "VLC.mxf"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nsv" is REG_SZ: "VLC.nsv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nuv" is REG_SZ: "VLC.nuv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogg" is REG_SZ: "VLC.ogg"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogm" is REG_SZ: "VLC.ogm"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogx" is REG_SZ: "VLC.ogx"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogv" is REG_SZ: "VLC.ogv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rec" is REG_SZ: "VLC.rec"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rm" is REG_SZ: "VLC.rm"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmvb" is REG_SZ: "VLC.rmvb"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rpl" is REG_SZ: "VLC.rpl"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".thp" is REG_SZ: "VLC.thp"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tod" is REG_SZ: "VLC.tod"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ts" is REG_SZ: "VLC.ts"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tts" is REG_SZ: "VLC.tts"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vob" is REG_SZ: "VLC.vob"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vro" is REG_SZ: "VLC.vro"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".webm" is REG_SZ: "VLC.webm"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wmv" is REG_SZ: "VLC.wmv"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xesc" is REG_SZ: "VLC.xesc"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asx" is REG_SZ: "VLC.asx"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".b4s" is REG_SZ: "VLC.b4s"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cue" is REG_SZ: "VLC.cue"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ifo" is REG_SZ: "VLC.ifo"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u" is REG_SZ: "VLC.m3u"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u8" is REG_SZ: "VLC.m3u8"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".pls" is REG_SZ: "VLC.pls"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ram" is REG_SZ: "VLC.ram"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".sdp" is REG_SZ: "VLC.sdp"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlc" is REG_SZ: "VLC.vlc"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wvx" is REG_SZ: "VLC.wvx"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xspf" is REG_SZ: "VLC.xspf"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlt" is REG_SZ: "VLC.vlt"
- 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wsz" is REG_SZ: "VLC.wsz"
- ----------------------------------------------------------------------
- 64 HKLM\SOFTWARE\Microsoft\GWX\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\
- ----------------------------------------------------------------------
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities: "ApplicationName" is REG_SZ: "Skype for desktop"
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities: "ApplicationDescription" is REG_SZ: "This software includes all the main Skype features such as voice, video and conference calls, file transfer, chat and SMS."
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Skype\Phone\Skype.exe,0"
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations\
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "callto" is REG_SZ: "skype.callto"
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "tel" is REG_SZ: "skype.callto"
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "skype" is REG_SZ: "skype"
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "skypecheck" is REG_SZ: "skypecheck"
- 64 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "skypecheck2" is REG_SZ: "skypecheck2"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities: "ApplicationDescription" is REG_SZ: "Thunderbird is a full-featured email application. Thunderbird supports IMAP and POP mail protocols, as well as HTML mail formatting. Built-in junk mail controls, RSS capabilities, powerful quick search, spell check as you type, global inbox, and advanced message filtering round out Thunderbird's modern feature set."
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe,0"
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities: "ApplicationName" is REG_SZ: "Thunderbird"
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\FileAssociations: ".eml" is REG_SZ: "ThunderbirdEML"
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\FileAssociations: ".wdseml" is REG_SZ: "ThunderbirdEML"
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\StartMenu\
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\StartMenu: "Mail" is REG_SZ: "Mozilla Thunderbird"
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\URLAssociations: "mailto" is REG_SZ: "Thunderbird.Url.mailto"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities: "ApplicationDescription" is REG_SZ: "Thunderbird is a full-featured email application. Thunderbird supports IMAP and POP mail protocols, as well as HTML mail formatting. Built-in junk mail controls, RSS capabilities, powerful quick search, spell check as you type, global inbox, and advanced message filtering round out Thunderbird's modern feature set."
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe,0"
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities: "ApplicationName" is REG_SZ: "Thunderbird (News)"
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations: "nntp" is REG_SZ: "Thunderbird.Url.news"
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations: "news" is REG_SZ: "Thunderbird.Url.news"
- 64 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations: "snews" is REG_SZ: "Thunderbird.Url.news"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Mail\Mailbird\Capabilities\
- 64 HKLM\Software\Clients\Mail\Mailbird\Capabilities: "ApplicationDescription" is REG_SZ: "Mailbird"
- 64 HKLM\Software\Clients\Mail\Mailbird\Capabilities: "ApplicationName" is REG_SZ: "Mailbird"
- 64 HKLM\Software\Clients\Mail\Mailbird\Capabilities\StartMenu\
- 64 HKLM\Software\Clients\Mail\Mailbird\Capabilities\StartMenu: "Mail" is REG_SZ: "Mailbird"
- 64 HKLM\Software\Clients\Mail\Mailbird\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\Mail\Mailbird\Capabilities\URLAssociations: "mailto" is REG_SZ: "Mailbird.Url.mailto"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-412" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-412" --> "Easily discover, visualize, and share insights from your data."
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-206" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-206" --> "Excel 2016"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsx" is REG_SZ: "Excel.Sheet.12"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltx" is REG_SZ: "Excel.Template"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsm" is REG_SZ: "Excel.SheetMacroEnabled.12"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xla" is REG_SZ: "Excel.Addin"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlam" is REG_SZ: "Excel.AddInMacroEnabled"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xll" is REG_SZ: "Excel.XLL"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlk" is REG_SZ: "Excel.Backup"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".csv" is REG_SZ: "Excel.CSV"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xld" is REG_SZ: "Excel.Dialog"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlm" is REG_SZ: "Excel.Macrosheet"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".slk" is REG_SZ: "Excel.SLK"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltm" is REG_SZ: "Excel.TemplateMacroEnabled"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlw" is REG_SZ: "Excel.Workspace"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsb" is REG_SZ: "Excel.SheetBinaryMacroEnabled.12"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xls" is REG_SZ: "Excel.Sheet.8"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlt" is REG_SZ: "Excel.Template.8"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".dqy" is REG_SZ: "dqyfile"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".iqy" is REG_SZ: "iqyfile"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".oqy" is REG_SZ: "oqyfile"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".rqy" is REG_SZ: "rqyfile"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".odc" is REG_SZ: "odcfile"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".ods" is REG_SZ: "Excel.OpenDocumentSpreadsheet.12"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlxml" is REG_SZ: "Excelxmlss"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlshtml" is REG_SZ: "Excelhtmlfile"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsmhtml" is REG_SZ: "Excelmhtmlfile"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlthtml" is REG_SZ: "Excelhtmltemplate"
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\UrlAssociations\
- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\UrlAssociations: "ms-excel" is REG_SZ: "Excel.UriLink.16"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-302" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-302" --> "Take notes and have them when you need them."
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-201" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-201" --> "OneNote 2016"
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".one" is REG_SZ: "OneNote.Section.1"
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc" is REG_SZ: "OneNote.TableOfContents"
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc2" is REG_SZ: "OneNote.TableOfContents.12"
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onepkg" is REG_SZ: "OneNote.Package"
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations\
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenote" is REG_SZ: "OneNote.URL.16"
- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenotedesktop" is REG_SZ: "OneNoteDesktop.URL.16"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Microsoft\Office\16.0\Outlook\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-304" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-304" --> "Design and deliver beautiful presentations with ease and confidence."
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-204" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-204" --> "PowerPoint 2016"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".odp" is REG_SZ: "PowerPoint.OpenDocumentPresentation.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pot" is REG_SZ: "PowerPoint.Template.8"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potm" is REG_SZ: "PowerPoint.TemplateMacroEnabled.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potx" is REG_SZ: "PowerPoint.Template.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppa" is REG_SZ: "PowerPoint.Addin.8"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppam" is REG_SZ: "PowerPoint.Addin.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pps" is REG_SZ: "PowerPoint.SlideShow.8"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsm" is REG_SZ: "PowerPoint.SlideShowMacroEnabled.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsx" is REG_SZ: "PowerPoint.SlideShow.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppt" is REG_SZ: "PowerPoint.Show.8"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptm" is REG_SZ: "PowerPoint.ShowMacroEnabled.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptx" is REG_SZ: "PowerPoint.Show.12"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pwz" is REG_SZ: "PowerPoint.Wizard.8"
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\UrlAssociations\
- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\UrlAssociations: "ms-powerpoint" is REG_SZ: "PowerPoint.UriLink.16"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\
- 64 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-422" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-422" --> "Create professional-grade publications that make an impact."
- 64 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-208" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-208" --> "Publisher 2016"
- 64 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\FileAssociations: ".pub" is REG_SZ: "Publisher.Document.16"
- 64 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\UrlAssociations\
- 64 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\UrlAssociations: "ms-publisher" is REG_SZ: "Publisher.UriLink.16"
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-305" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-305" --> "Create beautiful documents, easily work with others, and enjoy the read."
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-205" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-205" --> "Word 2016"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docx" is REG_SZ: "Word.Document.12"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".doc" is REG_SZ: "Word.Document.8"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docm" is REG_SZ: "Word.DocumentMacroEnabled.12"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotx" is REG_SZ: "Word.Template.12"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dot" is REG_SZ: "Word.Template.8"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotm" is REG_SZ: "Word.TemplateMacroEnabled.12"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".odt" is REG_SZ: "Word.OpenDocumentText.12"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".rtf" is REG_SZ: "Word.RTF.8"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wbk" is REG_SZ: "Word.Backup.8"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wiz" is REG_SZ: "Word.Wizard.8"
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\UrlAssociations\
- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\UrlAssociations: "ms-word" is REG_SZ: "Word.UriLink.16"
- ----------------------------------------------------------------------
- 64 HKLM\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities: "ApplicationDescription" is REG_SZ: "Do more on the web"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities: "ApplicationIcon" is REG_SZ: ""D:\Program Files (x86)\Opera\Launcher.exe",0"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities: "ApplicationName" is REG_SZ: "Opera Stable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations\
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".crx" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".htm" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".html" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".nex" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".opdownload" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".pdf" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".shtml" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".xht" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\Startmenu\
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations\
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "http" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "https" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "ftp" is REG_SZ: "OperaStable"
- 64 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "mailto" is REG_SZ: "OperaStable"
- **********************************************************************
- 32 HKLM\SOFTWARE\RegisteredApplications\
- 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Address Book" is REG_SZ: "Software\Clients\Contacts\Address Book\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Paint" is REG_SZ: "SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Search" is REG_SZ: "Software\Microsoft\Windows Search\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Disc Image Burner" is REG_SZ: "Software\Microsoft\IsoBurn\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Photo Viewer" is REG_SZ: "Software\Microsoft\Windows Photo Viewer\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Media Player" is REG_SZ: "Software\Clients\Media\Windows Media Player\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Wordpad" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Internet Explorer" is REG_SZ: "SOFTWARE\Microsoft\Internet Explorer\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Media Center" is REG_SZ: "Software\Clients\Media\Windows Media Center\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Google Chrome" is REG_SZ: "Software\Clients\StartMenuInternet\Google Chrome\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Firefox" is REG_SZ: "Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "WinRAR" is REG_SZ: "Software\WinRAR\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "WinSCP" is REG_SZ: "Software\Martin Prikryl\WinSCPCapabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "VLC" is REG_SZ: "Software\Clients\Media\VLC\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "GWX" is REG_SZ: "SOFTWARE\Microsoft\GWX\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "OpenOffice 4.1.2" is REG_SZ: "SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Skype" is REG_SZ: "SOFTWARE\Clients\Internet Call\Skype\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Thunderbird" is REG_SZ: "Software\Clients\Mail\Mozilla Thunderbird\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Thunderbird (News)" is REG_SZ: "Software\Clients\News\Mozilla Thunderbird\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Mailbird" is REG_SZ: "Software\Clients\Mail\Mailbird\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Excel.Application.16" is REG_SZ: "Software\Clients\Spreadsheet\Microsoft Excel\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "OneNote.Application.16" is REG_SZ: "Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Outlook.Application.16" is REG_SZ: "Software\Microsoft\Office\16.0\Outlook\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "PowerPoint.Application.16" is REG_SZ: "Software\Clients\Presentation\Microsoft PowerPoint\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Publisher.Application.16" is REG_SZ: "Software\Clients\Publishing\Microsoft Publisher\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Word.Application.16" is REG_SZ: "Software\Clients\Word Processing\Microsoft Word\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Access.Application.16" is REG_SZ: "SOFTWARE\Microsoft\Office\16.0\Access\Capabilities"
- 32 HKLM\SOFTWARE\RegisteredApplications: "Opera Stable" is REG_SZ: "Software\Clients\StartMenuInternet\OperaStable\Capabilities"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4606" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4606" --> "Windows Contacts allows you to store e-mail addresses and other information about people and organizations."
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4408" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4408" --> "Windows Contacts"
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".contact" is REG_SZ: "contact_wab_auto_file"
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".group" is REG_SZ: "group_wab_auto_file"
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".vcf" is REG_SZ: "vcard_wab_auto_file"
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".p7c" is REG_SZ: "certificate_wab_auto_file"
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations: "LDAP" is REG_SZ: "LDAP"
- ----------------------------------------------------------------------
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\system32\mspaint.exe,-50142" --> "@C:\Windows\system32\mspaint.exe,-50142" --> "Paint allows users to create and edit drawings by using a variety of shapes, brushes, and colors."
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\system32\mspaint.exe,-57344" --> "@C:\Windows\system32\mspaint.exe,-57344" --> "Paint"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations\
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".bmp" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".dib" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".rle" is REG_SZ: "rlefile"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jpg" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jpeg" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jpe" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".jfif" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".gif" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".emf" is REG_SZ: "emffile"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".wmf" is REG_SZ: "wmffile"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".tif" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".tiff" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".png" is REG_SZ: "PBrush"
- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Paint\Capabilities\FileAssociations: ".ico" is REG_SZ: "PBrush"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Microsoft\Windows Search\Capabilities\
- 32 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6012" --> "@C:\Windows\explorer.exe,-6012" --> "Windows Search Explorer allows you to quickly search for files and folders anywhere on your computer."
- 32 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6011" --> "@C:\Windows\explorer.exe,-6011" --> "Windows Search Explorer"
- 32 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations\
- 32 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations: "search" is REG_SZ: "Explorer.AssocProtocol.search-ms"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\
- 32 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-353" --> "@C:\Windows\System32\isoburn.exe,-353" --> "Windows Disc Image Burner allows users to burn a CD or DVD from an ISO disc image file."
- 32 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-352" --> "@C:\Windows\System32\isoburn.exe,-352" --> "Windows Disc Image Burner"
- 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations\
- 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".img" is REG_SZ: "Windows.IsoFile"
- 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".iso" is REG_SZ: "Windows.IsoFile"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationDescription" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3069"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationName" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3009"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations\
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jpg" is REG_SZ: "PhotoViewer.FileAssoc.Jpeg"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".wdp" is REG_SZ: "PhotoViewer.FileAssoc.Wdp"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jfif" is REG_SZ: "PhotoViewer.FileAssoc.JFIF"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".dib" is REG_SZ: "PhotoViewer.FileAssoc.Bitmap"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".png" is REG_SZ: "PhotoViewer.FileAssoc.Png"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tiff" is REG_SZ: "PhotoViewer.FileAssoc.Tiff"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".bmp" is REG_SZ: "PhotoViewer.FileAssoc.Bitmap"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jpe" is REG_SZ: "PhotoViewer.FileAssoc.Jpeg"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".jpeg" is REG_SZ: "PhotoViewer.FileAssoc.Jpeg"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".gif" is REG_SZ: "PhotoViewer.FileAssoc.Gif"
- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tif" is REG_SZ: "PhotoViewer.FileAssoc.Tiff"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\system32\wmploc.dll,-29400" --> "@C:\Windows\system32\wmploc.dll,-29400" --> "Windows Media Player is your digital music software that puts you in control of your music experience."
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\system32\unregmp2.exe,-4" --> "@C:\Windows\system32\unregmp2.exe,-4" --> "Windows Media Player"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities: "Hidden" is REG_DWORD: 0 (0x0)
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3gp2" is REG_SZ: "WMP11.AssocFile.3G2"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmd" is REG_SZ: "WMP11.AssocFile.WMD"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp2" is REG_SZ: "WMP11.AssocFile.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp3" is REG_SZ: "WMP11.AssocFile.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp4" is REG_SZ: "WMP11.AssocFile.MP4"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wpl" is REG_SZ: "WMP11.AssocFile.WPL"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aiff" is REG_SZ: "WMP11.AssocFile.AIFF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".ts" is REG_SZ: "WMP11.AssocFile.TTS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wvx" is REG_SZ: "WMP11.AssocFile.WVX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".midi" is REG_SZ: "WMP11.AssocFile.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".avi" is REG_SZ: "WMP11.AssocFile.AVI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".asf" is REG_SZ: "WMP11.AssocFile.ASF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpv2" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wms" is REG_SZ: "WMP11.AssocFile.WMS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3gpp" is REG_SZ: "WMP11.AssocFile.3GP"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmv" is REG_SZ: "WMP11.AssocFile.WMV"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmx" is REG_SZ: "WMP11.AssocFile.ASX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wmz" is REG_SZ: "WMP11.AssocFile.WMZ"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aif" is REG_SZ: "WMP11.AssocFile.AIFF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpeg" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aac" is REG_SZ: "WMP11.AssocFile.ADTS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wav" is REG_SZ: "WMP11.AssocFile.WAV"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".asx" is REG_SZ: "WMP11.AssocFile.ASX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".rmi" is REG_SZ: "WMP11.AssocFile.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wax" is REG_SZ: "WMP11.AssocFile.WAX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".aifc" is REG_SZ: "WMP11.AssocFile.AIFF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".snd" is REG_SZ: "WMP11.AssocFile.AU"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m4a" is REG_SZ: "WMP11.AssocFile.M4A"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".cda" is REG_SZ: "WMP11.AssocFile.CDA"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".adt" is REG_SZ: "WMP11.AssocFile.ADTS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wm" is REG_SZ: "WMP11.AssocFile.ASF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpa" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".adts" is REG_SZ: "WMP11.AssocFile.ADTS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpe" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mod" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".tts" is REG_SZ: "WMP11.AssocFile.TTS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mpg" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3gp" is REG_SZ: "WMP11.AssocFile.3GP"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".au" is REG_SZ: "WMP11.AssocFile.AU"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp2v" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mp4v" is REG_SZ: "WMP11.AssocFile.MP4"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m4v" is REG_SZ: "WMP11.AssocFile.MP4"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m3u" is REG_SZ: "WMP11.AssocFile.m3u"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m2t" is REG_SZ: "WMP11.AssocFile.M2TS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mid" is REG_SZ: "WMP11.AssocFile.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m2v" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m1v" is REG_SZ: "WMP11.AssocFile.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mts" is REG_SZ: "WMP11.AssocFile.M2TS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".3g2" is REG_SZ: "WMP11.AssocFile.3G2"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".m2ts" is REG_SZ: "WMP11.AssocFile.M2TS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".wma" is REG_SZ: "WMP11.AssocFile.WMA"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\FileAssociations: ".mov" is REG_SZ: "WMP11.AssocFile.MOV"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations\
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/quicktime" is REG_SZ: "WMP11.AssocMIME.MOV"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/msvideo" is REG_SZ: "WMP11.AssocMIME.AVI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wmx" is REG_SZ: "WMP11.AssocMIME.ASX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/midi" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/vnd.dlna.mpeg-tts" is REG_SZ: "WMP11.AssocMIME.TTS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/vnd.dlna.adts" is REG_SZ: "WMP11.AssocMIME.ADTS"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/wav" is REG_SZ: "WMP11.AssocMIME.WAV"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/3gpp" is REG_SZ: "WMP11.AssocMIME.3GP"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/3gpp" is REG_SZ: "WMP11.AssocMIME.3GP"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-wav" is REG_SZ: "WMP11.AssocMIME.WAV"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/3gpp2" is REG_SZ: "WMP11.AssocMIME.3G2"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-aiff" is REG_SZ: "WMP11.AssocMIME.AIFF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mp3" is REG_SZ: "WMP11.AssocMIME.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-ms-wma" is REG_SZ: "WMP11.AssocMIME.WMA"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mpegurl" is REG_SZ: "WMP11.AssocMIME.M3U"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mpg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/x-mplayer2" is REG_SZ: "WMP11.AssocMIME.ASF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/avi" is REG_SZ: "WMP11.AssocMIME.AVI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/mpg" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-mpeg" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/vnd.ms-wpl" is REG_SZ: "WMP11.AssocMIME.WPL"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/3gpp2" is REG_SZ: "WMP11.AssocMIME.3G2"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mpegurl" is REG_SZ: "WMP11.AssocMIME.M3U"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wm" is REG_SZ: "WMP11.AssocMIME.ASF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/x-ms-wmd" is REG_SZ: "WMP11.AssocMIME.WMD"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/aiff" is REG_SZ: "WMP11.AssocMIME.AIFF"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mpg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "midi/mid" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-asf-plugin" is REG_SZ: "WMP11.AssocMIME.ASX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mid" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-ms-wax" is REG_SZ: "WMP11.AssocMIME.WAX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mpeg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-asf" is REG_SZ: "WMP11.AssocMIME.ASX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mp4" is REG_SZ: "WMP11.AssocMIME.M4A"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-mid" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mpeg" is REG_SZ: "WMP11.AssocMIME.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/mp4" is REG_SZ: "WMP11.AssocMIME.MP4"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wmv" is REG_SZ: "WMP11.AssocMIME.WMV"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/mpeg" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "application/x-ms-wmz" is REG_SZ: "WMP11.AssocMIME.WMZ"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/mp3" is REG_SZ: "WMP11.AssocMIME.MP3"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-msvideo" is REG_SZ: "WMP11.AssocMIME.AVI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/basic" is REG_SZ: "WMP11.AssocMIME.AU"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "audio/x-midi" is REG_SZ: "WMP11.AssocMIME.MIDI"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-mpeg2a" is REG_SZ: "WMP11.AssocMIME.MPEG"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\MimeAssociations: "video/x-ms-wvx" is REG_SZ: "WMP11.AssocMIME.WVX"
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\Media\Windows Media Player\Capabilities\URLAssociations: "mms" is REG_SZ: "WMP11.AssocProtocol.MMS"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-40128" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-40128" --> "Microsoft WordPad is a word processing program that you can use to create and edit text documents with rich formatting and pictures. WordPad can open .docx, .odt, .rtf or .txt files."
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-57344" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-57344" --> "WordPad"
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations\
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".rtf" is REG_SZ: "rtffile"
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".docx" is REG_SZ: "docxfile"
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".odt" is REG_SZ: "odtfile"
- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".txt" is REG_SZ: "textfile"
- ----------------------------------------------------------------------
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files (x86)\Internet Explorer\iexplore.exe,-706" --> "Internet Explorer 11 provides an easier and more secure web browsing experience. Perform quick searches right from the toolbar, custom print your webpages, and discover, manage, and read RSS feeds."
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".mht" is REG_SZ: "IE.AssocFile.MHT"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".html" is REG_SZ: "IE.AssocFile.HTM"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".htm" is REG_SZ: "IE.AssocFile.HTM"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".url" is REG_SZ: "IE.AssocFile.URL"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "IE.AssocFile.MHT"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".xht" is REG_SZ: "IE.AssocFile.XHT"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".svg" is REG_SZ: "IE.AssocFile.SVG"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".partial" is REG_SZ: "IE.AssocFile.PARTIAL"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".website" is REG_SZ: "IE.AssocFile.WEBSITE"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "IE.AssocFile.XHT"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\MIMEAssociations\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\MIMEAssociations: "message/rfc822" is REG_SZ: "IE.message/rfc822"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\MIMEAssociations: "text/html" is REG_SZ: "IE.text/html"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\AutocompleteFormData\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\AutocompleteFormData: "DataProtected" is REG_DWORD: 1 (0x1)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\AutocompleteFormData: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\IntelliForms\FormData"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\DomainSuggestion\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\DomainSuggestion: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\DomainSuggestion: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\DomainSuggestion\Exclude"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FavoriteUrls\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FavoriteUrls: "OrderRegPath" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FavoriteUrls: "KnownFolderId" is REG_SZ: "{1777F761-68AD-4D8A-87BD-30B759FA33DD}"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "lParamValue" is REG_DWORD: 3 (0x3)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "FilterIn" is REG_SZ: "FPEnabled"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FlipAhead: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\FlipAhead"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggest\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggest: "FilterIn" is REG_SZ: "FormSuggest Passwords,Use FormSuggest,FormSuggest PW Ask"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggest: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Main"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggestAskUser\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggestAskUser: "FilterIn" is REG_SZ: "AskUser"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FormSuggestAskUser: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\IntelliForms"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FullScreenAllowSites\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\FullScreenAllowSites: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\FullScreen\AllowDomains"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PopupBlockerAllowList\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PopupBlockerAllowList: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\New Windows\Allow"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "lParamValue" is REG_DWORD: 7 (0x7)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "FilterIn" is REG_SZ: "PrivacyAdvanced"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\PrivacyAdvanced: "RegistryRoot" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Internet Settings"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\SearchSuggestion\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\SearchSuggestion: "FilterIn" is REG_SZ: "ShowSearchSuggestionsInAddressGlobal"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\SearchSuggestion: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\SearchScopes"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ServicePoweredQSA\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ServicePoweredQSA: "FilterIn" is REG_SZ: "AllowServicePoweredQSA"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ServicePoweredQSA: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Main"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\StartPage\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\StartPage: "FilterIn" is REG_SZ: "Start Page,Secondary Start Pages,SyncHomePage,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\StartPage: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Main"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabbedBrowsing\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabbedBrowsing: "FilterIn" is REG_SZ: "Enabled,Groups,NewTabNextToCurrent,NewTabPageShow,OpenAllHomePages,OpenInForeground,PopupsUseNewWindow,ShortcutBehavior,ThumbnailBehavior,WarnOnClose"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabbedBrowsing: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\TabbedBrowsing"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming: "RelativePath" is REG_SZ: "Microsoft\Internet Explorer\TabRoaming"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming: "KnownFolderId" is REG_SZ: "{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TabRoaming: "Recursive" is REG_DWORD: 1 (0x1)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "lParamValue" is REG_DWORD: 6 (0x6)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "FilterIn" is REG_SZ: "{A8A88C49-5EB2-4990-A1A2-0876022C854F},{AEBA21FA-782A-4A90-978D-B72164C80120}"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\ThirdPartyCookies: "RegistryRoot" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "lParamValue" is REG_DWORD: 4 (0x4)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "FilterIn" is REG_SZ: "FilteringMode,PersonalizedModeAuto,TrackingProtectionThreshold"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtection: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Safety\PrivacIE"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionExceptions\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionExceptions: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Safety\Tracking Protection Exceptions"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "lParamValue" is REG_DWORD: 5 (0x5)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "FilterIn" is REG_SZ: "Enabled,Name,Url"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "Recursive" is REG_DWORD: 1 (0x1)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TrackingProtectionLists: "RegistryRoot" is REG_SZ: "Software\Microsoft\Internet Explorer\Safety\PrivacIE\Lists"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "lParamValue" is REG_DWORD: 1 (0x1)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "URLsRegPath" is REG_SZ: "Software\Microsoft\Internet Explorer\TypedURLs"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\TypedURLs: "URLsTimeRegPath" is REG_SZ: "Software\Microsoft\Internet Explorer\TypedURLsTime"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "lParamValue" is REG_DWORD: 2 (0x2)
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "WindowClassesToNotify" is REG_SZ: "IEFrame,ImmersiveWorkerWindowClass"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "KnownFolderId" is REG_SZ: "{D9DC8A3B-B784-432E-A781-5A1130A75963}"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "InitialApplyCommandLine" is REG_SZ: ""C:\Windows\SysWOW64\ie4uinit.exe" -InitHistoryRoaming"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet: "WinInetPrefix" is REG_SZ: "Visited:"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\Favorites\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\Favorites: "KnownFolderId" is REG_EXPAND_SZ: "{1777F761-68AD-4D8A-87BD-30B759FA33DD}" --> "{1777F761-68AD-4D8A-87BD-30B759FA33DD}"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\History\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\History: "Protocol" is REG_EXPAND_SZ: "iehistory:" --> "iehistory:"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Startmenu\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Startmenu: "StartmenuInternet" is REG_SZ: "IEXPLORE.EXE"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations\
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations: "https" is REG_SZ: "IE.HTTPS"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations: "ftp" is REG_SZ: "IE.FTP"
- 32 HKLM\SOFTWARE\Microsoft\Internet Explorer\Capabilities\UrlAssociations: "http" is REG_SZ: "IE.HTTP"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\
- 32 HKLM\Software\Clients\Media\Windows Media Center\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%windir%\ehome\ehres.dll,-116" --> "@C:\Windows\ehome\ehres.dll,-116" --> "Opens your home entertainment option for digital and on-demand media, including TV, movies, music and pictures."
- 32 HKLM\Software\Clients\Media\Windows Media Center\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%windir%\ehome\ehres.dll,-100" --> "@C:\Windows\ehome\ehres.dll,-100" --> "Windows Media Center"
- 32 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations: ".dvr-ms" is REG_SZ: "MediaCenter.DVR-MS"
- 32 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations: ".wtv" is REG_SZ: "MediaCenter.WTVFile"
- 32 HKLM\Software\Clients\Media\Windows Media Center\Capabilities\FileAssociations: ".dvr" is REG_SZ: "MediaCenter.DVR"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationDescription" is REG_SZ: "Google Chrome is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Google Chrome."
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,0"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationName" is REG_SZ: "Google Chrome"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".htm" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".html" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".shtml" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xht" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".webp" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu\
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Google Chrome"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "ftp" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "http" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "https" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "irc" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mailto" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mms" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "news" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "nntp" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "sms" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "smsto" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "tel" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "urn" is REG_SZ: "ChromeHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "webcal" is REG_SZ: "ChromeHTML"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities: "ApplicationDescription" is REG_SZ: "'Firefox' delivers safe, easy web browsing. A familiar user interface, enhanced security features including protection from online identity theft, and integrated search let you get the most out of the web."
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Mozilla Firefox\firefox.exe,0"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities: "ApplicationName" is REG_SZ: "'Firefox'"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".htm" is REG_SZ: "FirefoxHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".html" is REG_SZ: "FirefoxHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".shtml" is REG_SZ: "FirefoxHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".xht" is REG_SZ: "FirefoxHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "FirefoxHTML"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\StartMenu\
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\StartMenu: "StartMenuInternet" is REG_SZ: "FIREFOX.EXE"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations: "ftp" is REG_SZ: "FirefoxURL"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations: "http" is REG_SZ: "FirefoxURL"
- 32 HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities\URLAssociations: "https" is REG_SZ: "FirefoxURL"
- ----------------------------------------------------------------------
- 32 HKLM\Software\WinRAR\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Martin Prikryl\WinSCPCapabilities\
- 32 HKLM\Software\Martin Prikryl\WinSCPCapabilities: "ApplicationDescription" is REG_SZ: "WinSCP is an open source free SFTP client and FTP client for Windows. Its main function is the secure file transfer between local and remote computer. Beyond this, WinSCP offers basic file manager functionality."
- 32 HKLM\Software\Martin Prikryl\WinSCPCapabilities\UrlAssociations\
- 32 HKLM\Software\Martin Prikryl\WinSCPCapabilities\UrlAssociations: "ftp" is REG_SZ: "WinSCP.Url"
- 32 HKLM\Software\Martin Prikryl\WinSCPCapabilities\UrlAssociations: "ftps" is REG_SZ: "WinSCP.Url"
- 32 HKLM\Software\Martin Prikryl\WinSCPCapabilities\UrlAssociations: "sftp" is REG_SZ: "WinSCP.Url"
- 32 HKLM\Software\Martin Prikryl\WinSCPCapabilities\UrlAssociations: "scp" is REG_SZ: "WinSCP.Url"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\
- 32 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationName" is REG_SZ: "VLC media player"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationDescription" is REG_SZ: "VLC - The video swiss knife"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3ga" is REG_SZ: "VLC.3ga"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".669" is REG_SZ: "VLC.669"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".a52" is REG_SZ: "VLC.a52"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aac" is REG_SZ: "VLC.aac"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ac3" is REG_SZ: "VLC.ac3"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adt" is REG_SZ: "VLC.adt"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adts" is REG_SZ: "VLC.adts"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aif" is REG_SZ: "VLC.aif"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aifc" is REG_SZ: "VLC.aifc"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aiff" is REG_SZ: "VLC.aiff"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".au" is REG_SZ: "VLC.au"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amr" is REG_SZ: "VLC.amr"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aob" is REG_SZ: "VLC.aob"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ape" is REG_SZ: "VLC.ape"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".caf" is REG_SZ: "VLC.caf"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cda" is REG_SZ: "VLC.cda"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dts" is REG_SZ: "VLC.dts"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flac" is REG_SZ: "VLC.flac"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".it" is REG_SZ: "VLC.it"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4a" is REG_SZ: "VLC.m4a"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4p" is REG_SZ: "VLC.m4p"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mid" is REG_SZ: "VLC.mid"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mka" is REG_SZ: "VLC.mka"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mlp" is REG_SZ: "VLC.mlp"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mod" is REG_SZ: "VLC.mod"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp1" is REG_SZ: "VLC.mp1"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2" is REG_SZ: "VLC.mp2"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp3" is REG_SZ: "VLC.mp3"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpc" is REG_SZ: "VLC.mpc"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpga" is REG_SZ: "VLC.mpga"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oga" is REG_SZ: "VLC.oga"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oma" is REG_SZ: "VLC.oma"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".opus" is REG_SZ: "VLC.opus"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".qcp" is REG_SZ: "VLC.qcp"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ra" is REG_SZ: "VLC.ra"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmi" is REG_SZ: "VLC.rmi"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".snd" is REG_SZ: "VLC.snd"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".s3m" is REG_SZ: "VLC.s3m"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".spx" is REG_SZ: "VLC.spx"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tta" is REG_SZ: "VLC.tta"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".voc" is REG_SZ: "VLC.voc"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vqf" is REG_SZ: "VLC.vqf"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".w64" is REG_SZ: "VLC.w64"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wav" is REG_SZ: "VLC.wav"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wma" is REG_SZ: "VLC.wma"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wv" is REG_SZ: "VLC.wv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xa" is REG_SZ: "VLC.xa"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xm" is REG_SZ: "VLC.xm"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3g2" is REG_SZ: "VLC.3g2"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp" is REG_SZ: "VLC.3gp"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp2" is REG_SZ: "VLC.3gp2"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gpp" is REG_SZ: "VLC.3gpp"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amv" is REG_SZ: "VLC.amv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asf" is REG_SZ: "VLC.asf"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".avi" is REG_SZ: "VLC.avi"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".bik" is REG_SZ: "VLC.bik"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".divx" is REG_SZ: "VLC.divx"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".drc" is REG_SZ: "VLC.drc"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dv" is REG_SZ: "VLC.dv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".f4v" is REG_SZ: "VLC.f4v"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flv" is REG_SZ: "VLC.flv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gvi" is REG_SZ: "VLC.gvi"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gxf" is REG_SZ: "VLC.gxf"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m1v" is REG_SZ: "VLC.m1v"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2t" is REG_SZ: "VLC.m2t"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2v" is REG_SZ: "VLC.m2v"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2ts" is REG_SZ: "VLC.m2ts"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4v" is REG_SZ: "VLC.m4v"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mkv" is REG_SZ: "VLC.mkv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mov" is REG_SZ: "VLC.mov"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2v" is REG_SZ: "VLC.mp2v"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4" is REG_SZ: "VLC.mp4"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4v" is REG_SZ: "VLC.mp4v"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpa" is REG_SZ: "VLC.mpa"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpe" is REG_SZ: "VLC.mpe"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg" is REG_SZ: "VLC.mpeg"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg1" is REG_SZ: "VLC.mpeg1"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg2" is REG_SZ: "VLC.mpeg2"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg4" is REG_SZ: "VLC.mpeg4"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpg" is REG_SZ: "VLC.mpg"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpv2" is REG_SZ: "VLC.mpv2"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mts" is REG_SZ: "VLC.mts"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mtv" is REG_SZ: "VLC.mtv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mxf" is REG_SZ: "VLC.mxf"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nsv" is REG_SZ: "VLC.nsv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nuv" is REG_SZ: "VLC.nuv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogg" is REG_SZ: "VLC.ogg"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogm" is REG_SZ: "VLC.ogm"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogx" is REG_SZ: "VLC.ogx"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogv" is REG_SZ: "VLC.ogv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rec" is REG_SZ: "VLC.rec"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rm" is REG_SZ: "VLC.rm"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmvb" is REG_SZ: "VLC.rmvb"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rpl" is REG_SZ: "VLC.rpl"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".thp" is REG_SZ: "VLC.thp"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tod" is REG_SZ: "VLC.tod"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ts" is REG_SZ: "VLC.ts"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tts" is REG_SZ: "VLC.tts"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vob" is REG_SZ: "VLC.vob"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vro" is REG_SZ: "VLC.vro"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".webm" is REG_SZ: "VLC.webm"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wmv" is REG_SZ: "VLC.wmv"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xesc" is REG_SZ: "VLC.xesc"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asx" is REG_SZ: "VLC.asx"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".b4s" is REG_SZ: "VLC.b4s"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cue" is REG_SZ: "VLC.cue"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ifo" is REG_SZ: "VLC.ifo"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u" is REG_SZ: "VLC.m3u"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u8" is REG_SZ: "VLC.m3u8"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".pls" is REG_SZ: "VLC.pls"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ram" is REG_SZ: "VLC.ram"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".sdp" is REG_SZ: "VLC.sdp"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlc" is REG_SZ: "VLC.vlc"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wvx" is REG_SZ: "VLC.wvx"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xspf" is REG_SZ: "VLC.xspf"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlt" is REG_SZ: "VLC.vlt"
- 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wsz" is REG_SZ: "VLC.wsz"
- ----------------------------------------------------------------------
- 32 HKLM\SOFTWARE\Microsoft\GWX\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities: "ApplicationDescription" is REG_SZ: "office productivity suite based on Apache OpenOffice project"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\OpenOffice 4\program\soffice.exe,0"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities: "ApplicationName" is REG_SZ: "OpenOffice 4.1.2"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations\
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".123" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".csv" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".dbf" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".dif" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".doc" is REG_SZ: "OpenOffice.Doc"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".docm" is REG_SZ: "OpenOffice.Docm"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".docx" is REG_SZ: "OpenOffice.Docx"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".dot" is REG_SZ: "OpenOffice.Dot"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".dotm" is REG_SZ: "OpenOffice.Dotm"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".dotx" is REG_SZ: "OpenOffice.Dotx"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".htm" is REG_SZ: "soffice.StarWriterDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".html" is REG_SZ: "soffice.StarWriterDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".hwp" is REG_SZ: "soffice.StarWriterDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".mml" is REG_SZ: "soffice.StarMathDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".odb" is REG_SZ: "opendocument.DatabaseDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".odm" is REG_SZ: "opendocument.WriterGlobalDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".otg" is REG_SZ: "opendocument.DrawTemplate.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".oth" is REG_SZ: "opendocument.WriterWebTemplate.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".otp" is REG_SZ: "opendocument.ImpressTemplate.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".ott" is REG_SZ: "opendocument.WriterTemplate.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".oxt" is REG_SZ: "office.Extension.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".pot" is REG_SZ: "OpenOffice.Pot"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".potm" is REG_SZ: "OpenOffice.Potm"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".potx" is REG_SZ: "OpenOffice.Potx"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".pps" is REG_SZ: "OpenOffice.Pps"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".ppt" is REG_SZ: "OpenOffice.Ppt"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".pptm" is REG_SZ: "OpenOffice.Pptm"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".pptx" is REG_SZ: "OpenOffice.Pptx"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".rtf" is REG_SZ: "OpenOffice.Rtf"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".slk" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".stc" is REG_SZ: "soffice.StarCalcTemplate.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".std" is REG_SZ: "soffice.StarDrawTemplate.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".sti" is REG_SZ: "soffice.StarImpressTemplate.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".stw" is REG_SZ: "soffice.StarWriterTemplate.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: "soffice.StarWriterGlobalDocument.6" is REG_SZ: ""
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".txt" is REG_SZ: "soffice.StarWriterDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".wk1" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".wks" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".wpd" is REG_SZ: "soffice.StarWriterDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xls" is REG_SZ: "OpenOffice.Xls"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xlsb" is REG_SZ: "OpenOffice.Xlsb"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xlsm" is REG_SZ: "OpenOffice.Xlsm"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xlsx" is REG_SZ: "OpenOffice.Xlsx"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xlt" is REG_SZ: "OpenOffice.Xlt"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xltm" is REG_SZ: "OpenOffice.Xltm"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xltx" is REG_SZ: "OpenOffice.Xltx"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xlw" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".xml" is REG_SZ: "soffice.StarWriterDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".odf" is REG_SZ: "opendocument.MathDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".odg" is REG_SZ: "opendocument.DrawDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".odp" is REG_SZ: "opendocument.ImpressDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".ods" is REG_SZ: "opendocument.CalcDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".odt" is REG_SZ: "opendocument.WriterDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".sxc" is REG_SZ: "soffice.StarCalcDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".sxd" is REG_SZ: "soffice.StarDrawDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".sxi" is REG_SZ: "soffice.StarImpressDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".sxm" is REG_SZ: "soffice.StarMathDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\FileAssociations: ".sxw" is REG_SZ: "soffice.StarWriterDocument.6"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\MimeAssociations\
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\MimeAssociations: "application/vnd.oasis.opendocument.formula" is REG_SZ: "opendocument.MathDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\MimeAssociations: "application/vnd.oasis.opendocument.graphics" is REG_SZ: "opendocument.DrawDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\MimeAssociations: "application/vnd.oasis.opendocument.presentation" is REG_SZ: "opendocument.ImpressDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\MimeAssociations: "application/vnd.oasis.opendocument.spreadsheet" is REG_SZ: "opendocument.CalcDocument.1"
- 32 HKLM\SOFTWARE\OpenOffice\OpenOffice\4.1.2\Capabilities\MimeAssociations: "application/vnd.oasis.opendocument.text" is REG_SZ: "opendocument.WriterDocument.1"
- ----------------------------------------------------------------------
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities: "ApplicationName" is REG_SZ: "Skype for desktop"
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities: "ApplicationDescription" is REG_SZ: "This software includes all the main Skype features such as voice, video and conference calls, file transfer, chat and SMS."
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Skype\Phone\Skype.exe,0"
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations\
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "callto" is REG_SZ: "skype.callto"
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "tel" is REG_SZ: "skype.callto"
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "skype" is REG_SZ: "skype"
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "skypecheck" is REG_SZ: "skypecheck"
- 32 HKLM\SOFTWARE\Clients\Internet Call\Skype\Capabilities\URLAssociations: "skypecheck2" is REG_SZ: "skypecheck2"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities: "ApplicationDescription" is REG_SZ: "Thunderbird is a full-featured email application. Thunderbird supports IMAP and POP mail protocols, as well as HTML mail formatting. Built-in junk mail controls, RSS capabilities, powerful quick search, spell check as you type, global inbox, and advanced message filtering round out Thunderbird's modern feature set."
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe,0"
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities: "ApplicationName" is REG_SZ: "Thunderbird"
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\FileAssociations: ".eml" is REG_SZ: "ThunderbirdEML"
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\FileAssociations: ".wdseml" is REG_SZ: "ThunderbirdEML"
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\StartMenu\
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\StartMenu: "Mail" is REG_SZ: "Mozilla Thunderbird"
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\Mail\Mozilla Thunderbird\Capabilities\URLAssociations: "mailto" is REG_SZ: "Thunderbird.Url.mailto"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities: "ApplicationDescription" is REG_SZ: "Thunderbird is a full-featured email application. Thunderbird supports IMAP and POP mail protocols, as well as HTML mail formatting. Built-in junk mail controls, RSS capabilities, powerful quick search, spell check as you type, global inbox, and advanced message filtering round out Thunderbird's modern feature set."
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities: "ApplicationIcon" is REG_SZ: "D:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe,0"
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities: "ApplicationName" is REG_SZ: "Thunderbird (News)"
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations: "nntp" is REG_SZ: "Thunderbird.Url.news"
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations: "news" is REG_SZ: "Thunderbird.Url.news"
- 32 HKLM\Software\Clients\News\Mozilla Thunderbird\Capabilities\URLAssociations: "snews" is REG_SZ: "Thunderbird.Url.news"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Mail\Mailbird\Capabilities\
- 32 HKLM\Software\Clients\Mail\Mailbird\Capabilities: "ApplicationDescription" is REG_SZ: "Mailbird"
- 32 HKLM\Software\Clients\Mail\Mailbird\Capabilities: "ApplicationName" is REG_SZ: "Mailbird"
- 32 HKLM\Software\Clients\Mail\Mailbird\Capabilities\StartMenu\
- 32 HKLM\Software\Clients\Mail\Mailbird\Capabilities\StartMenu: "Mail" is REG_SZ: "Mailbird"
- 32 HKLM\Software\Clients\Mail\Mailbird\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\Mail\Mailbird\Capabilities\URLAssociations: "mailto" is REG_SZ: "Mailbird.Url.mailto"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-412" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-412" --> "Easily discover, visualize, and share insights from your data."
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-206" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-206" --> "Excel 2016"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsx" is REG_SZ: "Excel.Sheet.12"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltx" is REG_SZ: "Excel.Template"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsm" is REG_SZ: "Excel.SheetMacroEnabled.12"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xla" is REG_SZ: "Excel.Addin"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlam" is REG_SZ: "Excel.AddInMacroEnabled"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xll" is REG_SZ: "Excel.XLL"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlk" is REG_SZ: "Excel.Backup"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".csv" is REG_SZ: "Excel.CSV"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xld" is REG_SZ: "Excel.Dialog"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlm" is REG_SZ: "Excel.Macrosheet"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".slk" is REG_SZ: "Excel.SLK"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltm" is REG_SZ: "Excel.TemplateMacroEnabled"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlw" is REG_SZ: "Excel.Workspace"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsb" is REG_SZ: "Excel.SheetBinaryMacroEnabled.12"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xls" is REG_SZ: "Excel.Sheet.8"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlt" is REG_SZ: "Excel.Template.8"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".dqy" is REG_SZ: "dqyfile"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".iqy" is REG_SZ: "iqyfile"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".oqy" is REG_SZ: "oqyfile"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".rqy" is REG_SZ: "rqyfile"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".odc" is REG_SZ: "odcfile"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".ods" is REG_SZ: "Excel.OpenDocumentSpreadsheet.12"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlxml" is REG_SZ: "Excelxmlss"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlshtml" is REG_SZ: "Excelhtmlfile"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsmhtml" is REG_SZ: "Excelmhtmlfile"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlthtml" is REG_SZ: "Excelhtmltemplate"
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\UrlAssociations\
- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\UrlAssociations: "ms-excel" is REG_SZ: "Excel.UriLink.16"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-302" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-302" --> "Take notes and have them when you need them."
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-201" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-201" --> "OneNote 2016"
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".one" is REG_SZ: "OneNote.Section.1"
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc" is REG_SZ: "OneNote.TableOfContents"
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc2" is REG_SZ: "OneNote.TableOfContents.12"
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onepkg" is REG_SZ: "OneNote.Package"
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations\
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenote" is REG_SZ: "OneNote.URL.16"
- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenotedesktop" is REG_SZ: "OneNoteDesktop.URL.16"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Microsoft\Office\16.0\Outlook\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-304" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-304" --> "Design and deliver beautiful presentations with ease and confidence."
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-204" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-204" --> "PowerPoint 2016"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".odp" is REG_SZ: "PowerPoint.OpenDocumentPresentation.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pot" is REG_SZ: "PowerPoint.Template.8"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potm" is REG_SZ: "PowerPoint.TemplateMacroEnabled.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potx" is REG_SZ: "PowerPoint.Template.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppa" is REG_SZ: "PowerPoint.Addin.8"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppam" is REG_SZ: "PowerPoint.Addin.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pps" is REG_SZ: "PowerPoint.SlideShow.8"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsm" is REG_SZ: "PowerPoint.SlideShowMacroEnabled.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsx" is REG_SZ: "PowerPoint.SlideShow.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppt" is REG_SZ: "PowerPoint.Show.8"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptm" is REG_SZ: "PowerPoint.ShowMacroEnabled.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptx" is REG_SZ: "PowerPoint.Show.12"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pwz" is REG_SZ: "PowerPoint.Wizard.8"
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\UrlAssociations\
- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\UrlAssociations: "ms-powerpoint" is REG_SZ: "PowerPoint.UriLink.16"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\
- 32 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-422" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-422" --> "Create professional-grade publications that make an impact."
- 32 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-208" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-208" --> "Publisher 2016"
- 32 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\FileAssociations: ".pub" is REG_SZ: "Publisher.Document.16"
- 32 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\UrlAssociations\
- 32 HKLM\Software\Clients\Publishing\Microsoft Publisher\Capabilities\UrlAssociations: "ms-publisher" is REG_SZ: "Publisher.UriLink.16"
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-305" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-305" --> "Create beautiful documents, easily work with others, and enjoy the read."
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\Microsoft Shared\Office16\oregres.dll,-205" --> "@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-205" --> "Word 2016"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docx" is REG_SZ: "Word.Document.12"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".doc" is REG_SZ: "Word.Document.8"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docm" is REG_SZ: "Word.DocumentMacroEnabled.12"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotx" is REG_SZ: "Word.Template.12"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dot" is REG_SZ: "Word.Template.8"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotm" is REG_SZ: "Word.TemplateMacroEnabled.12"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".odt" is REG_SZ: "Word.OpenDocumentText.12"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".rtf" is REG_SZ: "Word.RTF.8"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wbk" is REG_SZ: "Word.Backup.8"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wiz" is REG_SZ: "Word.Wizard.8"
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\UrlAssociations\
- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\UrlAssociations: "ms-word" is REG_SZ: "Word.UriLink.16"
- ----------------------------------------------------------------------
- 32 HKLM\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\ -- Does not exist
- ----------------------------------------------------------------------
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities: "ApplicationDescription" is REG_SZ: "Do more on the web"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities: "ApplicationIcon" is REG_SZ: ""D:\Program Files (x86)\Opera\Launcher.exe",0"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities: "ApplicationName" is REG_SZ: "Opera Stable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations\
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".crx" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".htm" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".html" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".nex" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".opdownload" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".pdf" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".shtml" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".xht" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\Startmenu\
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations\
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "http" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "https" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "ftp" is REG_SZ: "OperaStable"
- 32 HKLM\Software\Clients\StartMenuInternet\OperaStable\Capabilities\UrlAssociations: "mailto" is REG_SZ: "OperaStable"
- **********************************************************************
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement