| 1 |
REGEDIT4 |
|---|
| 2 |
|
|---|
| 3 |
[HKEY_CURRENT_USER\]Testing Group 1[] |
|---|
| 4 |
@="Default" |
|---|
| 5 |
"Foo"="Bar" |
|---|
| 6 |
|
|---|
| 7 |
[HKEY_CURRENT_USER\Testing Group 2] |
|---|
| 8 |
@="\"Annoying=Value\"" |
|---|
| 9 |
"\"Annoying=Key\""="Bar" |
|---|
| 10 |
"Multiline"="This |
|---|
| 11 |
value spans |
|---|
| 12 |
multiple lines |
|---|
| 13 |
" |
|---|
| 14 |
"Sane_Key"="\"Wierd=\"Value" |
|---|
| 15 |
|
|---|
| 16 |
[HKEY_CURRENT_USER\Testing Group 3] |
|---|
| 17 |
"Test_Bon_1"=hex:f4,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,00,00,00,\ |
|---|
| 18 |
00,00,00,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,f0,77,3f,00,\ |
|---|
| 19 |
3f,00,3f,00,3f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,78,00,1c,10,fc,\ |
|---|
| 20 |
7f,22,14,fc,7f,b0,fe,12,00,00,00,00,00,00,00,00,00,98,23,eb,77 |
|---|
| 21 |
"Test_Bin_2"=hex:f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,00,00,\ |
|---|
| 22 |
00,00,00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,\ |
|---|
| 23 |
20,00,53,00,61,00,6e,00,73,00,20,00,53,00,65,00,72,00,69,00,66,00,00,00,f0,\ |
|---|
| 24 |
77,00,20,14,00,00,00,00,10,80,05,14,00,f0,1f,14,00,00,00,14,00 |
|---|
| 25 |
|
|---|
| 26 |
[HKEY_CURRENT_USER\Testing Group 5] |
|---|
| 27 |
@="new value" |
|---|
| 28 |
|
|---|
| 29 |
[HKEY_CURRENT_USER\Testing Group 6] |
|---|
| 30 |
"Test_Bin_3"=hex:f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,00,00,\ |
|---|
| 31 |
00,00,00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,\ |
|---|
| 32 |
20,00,53,00,61,00,6e,00,73,00,20,00,53,00,65,00,72,00,69,00,66,00,00,00,f0,\ |
|---|
| 33 |
77,00,20,14,00,00,00,00,10,80,05,14,00,f0,1f,14,00,00,00,14,00 |
|---|
| 34 |
|
|---|
| 35 |
|
|---|
| 36 |
[HKEY_CURRENT_USER\Testing Group 6\With\Really\Deep\Nested\Directory\Structure] |
|---|
| 37 |
"InstallerLocation"="C:\\WINDOWSsystem32\\" |
|---|
| 38 |
|
|---|
| 39 |
[HKEY_CURRENT_USER\Testing Group 7] |
|---|
| 40 |
"C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\"="" |
|---|
| 41 |
"C:\\WINDOWS\\Installer\\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\\"="" |
|---|
| 42 |
"C:\\Program Files\\Support Tools\\"="" |
|---|
| 43 |
"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Windows Support Tools\\"="" |
|---|
| 44 |
"C:\\WINDOWS\\Installer\\{6855XXXX-BDF9-48E4-B80A-80DFB96FE36C}\\"="" |
|---|
| 45 |
"C:\\WINDOWS\\Installer\\{F251B999-08A9-4704-999C-9962F0DFD88E}\\"="" |
|---|
| 46 |
"C:\\WINDOWS\\Installer\\{1CB92574-96F2-467B-B793-5CEB35C40C29}\\"="" |
|---|
| 47 |
"C:\\WINDOWS\\Installer\\{B37C842A-B624-46B8-A727-654E72F1C91A}\\"="" |
|---|
| 48 |
|
|---|
| 49 |
[HKEY_CURRENT_USER\Testing Group 8\{01021492-0000-0000-C000-000000000046}] |
|---|
| 50 |
"000"="String Value" |
|---|
| 51 |
|
|---|
| 52 |
[HKEY_CURRENT_USER\Tsting Group 9] |
|---|
| 53 |
"newkey"="newvalue" |
|---|
| 54 |
|
|---|
| 55 |
[HKEY_CURRENT_USER\SessionInformation] |
|---|
| 56 |
"ProgramCount"=dword:0000000b |
|---|
| 57 |
|
|---|
| 58 |
[HKEY_CURRENT_USER\Volatile Environment] |
|---|
| 59 |
"LOGONSERVER"="\\\\MWDC4" |
|---|
| 60 |
"USERDNSDOMAIN"="MITRE.ORG" |
|---|
| 61 |
"CLIENTNAME"="Console" |
|---|
| 62 |
"SESSIONNAME"="Console" |
|---|
| 63 |
"APPDATA"="C:\\Documents and Settings\\kindlund\\Application Data" |
|---|
| 64 |
"HOMEDRIVE"="C:" |
|---|
| 65 |
"HOMESHARE"="" |
|---|
| 66 |
"HOMEPATH"="\\Documents and Settings\\kindlund" |
|---|
| 67 |
|
|---|
