Downloads:

6,529

Downloads of v 1.1.0.65:

208

Last Update:

18 Dec 2018

Package Maintainer(s):

Software Author(s):

  • Eric Zimmerman

Tags:

registry deleted plugin forensics

Registry Explorer

This is not the latest version of Registry Explorer available.

1.1.0.65 | Updated: 18 Dec 2018

Downloads:

6,529

Downloads of v 1.1.0.65:

208

Maintainer(s):

Software Author(s):

  • Eric Zimmerman

Registry Explorer 1.1.0.65

This is not the latest version of Registry Explorer available.

All Checks are Passing

2 Passing Test


Validation Testing Passed


Verification Testing Passed

Details

To install Registry Explorer, run the following command from the command line or from PowerShell:

>

To upgrade Registry Explorer, run the following command from the command line or from PowerShell:

>

To uninstall Registry Explorer, run the following command from the command line or from PowerShell:

>

NOTE: This applies to both open source and commercial editions of Chocolatey.

1. Ensure you are set for organizational deployment

Please see the organizational deployment guide

  • Open Source or Commercial:
    • Proxy Repository - Create a proxy nuget repository on Nexus, Artifactory Pro, or a proxy Chocolatey repository on ProGet. Point your upstream to https://chocolatey.org/api/v2. Packages cache on first access automatically. Make sure your choco clients are using your proxy repository as a source and NOT the default community repository. See source command for more information.
    • You can also just download the package and push it to a repository Download

3. Enter your internal repository url

(this should look similar to https://chocolatey.org/api/v2)

4. Choose your deployment method:


choco upgrade registryexplorer -y --source="'STEP 3 URL'" [other options]

See options you can pass to upgrade.

See best practices for scripting.

Add this to a PowerShell script or use a Batch script with tools and in places where you are calling directly to Chocolatey. If you are integrating, keep in mind enhanced exit codes.

If you do use a PowerShell script, use the following to ensure bad exit codes are shown as failures:


choco upgrade registryexplorer -y --source="'STEP 3 URL'"
$exitCode = $LASTEXITCODE

Write-Verbose "Exit code was $exitCode"
$validExitCodes = @(0, 1605, 1614, 1641, 3010)
if ($validExitCodes -contains $exitCode) {
  Exit 0
}

Exit $exitCode

- name: Ensure registryexplorer installed
  win_chocolatey:
    name: registryexplorer
    state: present
    version: 1.1.0.65
    source: STEP 3 URL

See docs at https://docs.ansible.com/ansible/latest/modules/win_chocolatey_module.html.

Coming early 2020! Central Managment Reporting available now! More information...


chocolatey_package 'registryexplorer' do
  action    :install
  version  '1.1.0.65'
  source   'STEP 3 URL'
end

See docs at https://docs.chef.io/resource_chocolatey_package.html.


Chocolatey::Ensure-Package
(
    Name: registryexplorer,
    Version: 1.1.0.65,
    Source: STEP 3 URL
);

Requires Otter Chocolatey Extension. See docs at https://inedo.com/den/otter/chocolatey.


cChocoPackageInstaller registryexplorer
{
   Name     = 'registryexplorer'
   Ensure   = 'Present'
   Version  = '1.1.0.65'
   Source   = 'STEP 3 URL'
}

Requires cChoco DSC Resource. See docs at https://github.com/chocolatey/cChoco.


package { 'registryexplorer':
  provider => 'chocolatey',
  ensure   => '1.1.0.65',
  source   => 'STEP 3 URL',
}

Requires Puppet Chocolatey Provider module. See docs at https://forge.puppet.com/puppetlabs/chocolatey.


salt '*' chocolatey.install registryexplorer version="1.1.0.65" source="STEP 3 URL"

See docs at https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html.

5. If applicable - Chocolatey configuration/installation

See infrastructure management matrix for Chocolatey configuration elements and examples.

This package was approved as a trusted package on 18 Dec 2018.

Description

Supports recovery of deleted keys and values, multi hive support, the fastest searching, viewing slack space, plugin support, and much more


tools\chocolateyinstall.ps1
$desktop = $([System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::DesktopDirectory))

$link = Join-Path $desktop "Registry Explorer.lnk"
$target = Join-Path $env:chocolateyPackageFolder "tools\RE\RegistryExplorer.exe"
$work = Join-Path $env:chocolateyPackageFolder "tools\RE"
Install-ChocolateyShortcut -ShortcutFilePath $link -TargetPath $target -WorkingDirectory $work -RunAsAdmin
tools\chocolateyuninstall.ps1
$ErrorActionPreference = 'Stop'; # stop on all errors

$packageName = 'registryexplorer'
$softwareName = 'registryexplorer*' #part or all of the Display Name as you see it in Programs and Features. It should be enough to be unique

$desktop = $([System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::DesktopDirectory))

$link = Join-Path $desktop "Registry Explorer.lnk"

Remove-Item $link
tools\LICENSE.txt
From: https://opensource.org/licenses/MIT

LICENSE

The MIT License (MIT)
Copyright (c) <2017> <Eric Zimmerman>

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
tools\RE\Bookmarks\Common\Autoruns_NtUser_Run_2ec3d165-3d58-417e-bf86-d30652b7b53a
 
tools\RE\Bookmarks\Common\Autoruns_Software_Run_b747b395-acee-4576-9b52-a89349b8d831
 
tools\RE\Bookmarks\Common\Autoruns_UsrClass_VirtualStore_bac80d4f-92ed-41a6-bb70-9749bf17736e
 
tools\RE\Bookmarks\Common\Communication_NtUser_TeamViewer_d32c0647-339c-4d4f-8282-daf26b927699
 
tools\RE\Bookmarks\Common\Communication_NtUser_Terminal Server Client_9f79434c-685a-497d-aa57-6e7dbfc2513f
 
tools\RE\Bookmarks\Common\Communication_NtUser_UnreadMail_d6d419d3-bc7c-4e6c-b73d-e1235c3a2943
 
tools\RE\Bookmarks\Common\Logging_Software_LogonUI_f1627ffc-939e-4da8-9970-55a1f90f545e
 
tools\RE\Bookmarks\Common\Network_Software_LastConnect_1516cac4-ff62-4d2e-a9f5-a20815853b3e
 
tools\RE\Bookmarks\Common\Network_Software_NetworkCards_3cfa462c-31d1-4ad6-8b47-98f281c50728
 
tools\RE\Bookmarks\Common\Network_Software_NetworkList_d1f7ed49-2bc8-48c5-86cc-4d759cf7fb4f
 
tools\RE\Bookmarks\Common\Network_System_{4d36e972-e325-11ce-bfc1-08002be10318}_54796294-d279-4552-bda5-fe672b4ea675
 
tools\RE\Bookmarks\Common\Network_System_Interfaces_f4932e20-032d-4b7c-842f-776d37bddbdb
 
tools\RE\Bookmarks\Common\Operating system_NtUser_CD Burning_0f0005c8-7a16-4223-8a73-87dc0d307849
 
tools\RE\Bookmarks\Common\Operating system_NtUser_General_82caa00f-2dd2-400b-b9d1-13173b58e82f
 
tools\RE\Bookmarks\Common\Operating system_Sam_Users_58f6066e-53f0-43a7-823c-5679da0e4cd9
 
tools\RE\Bookmarks\Common\Operating system_Security_PolAcDmN_69adae64-b620-4879-bece-467ced7a2a78
 
tools\RE\Bookmarks\Common\Operating system_Security_PolAcDmS_27dd8985-481d-4842-8f90-5b8baff56c69
 
tools\RE\Bookmarks\Common\Operating system_Security_PolDnDDN_9b93734e-0905-4123-84de-67329767aa5b
 
tools\RE\Bookmarks\Common\Operating system_Security_PolPrDmS_a7486465-9764-437c-a39d-a6b4f0ec4085
 
tools\RE\Bookmarks\Common\Operating system_Software_Channels_8ab43ae7-05ce-4c41-9c70-f77df5317e67
 
tools\RE\Bookmarks\Common\Operating system_Software_Control Panel_7e993a1a-b5af-4247-8b34-6bbe13eb7f3c
 
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersionNT_3d9483dc-d89c-423a-ae83-a57405d6a752
 
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersion_0a017e3d-c0fe-40c9-84fb-8bcd45c96a7e
 
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersion_3d9483dc-d89c-423a-ae83-a57405d6a752
 
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersion_4a87fdc4-0aa5-4691-868f-baf78c3e0dbc
 
tools\RE\Bookmarks\Common\Operating system_Software_Devices_121a3617-c512-4b5f-a770-11b1cdb19983
 
tools\RE\Bookmarks\Common\Operating system_Software_EMDMgmt_5c905164-7055-4422-a141-f8539d5ef4fe
 
tools\RE\Bookmarks\Common\Operating system_Software_Image File Execution Options_59ddbb92-609a-44e8-9bb7-e1f5b797e397
 
tools\RE\Bookmarks\Common\Operating system_Software_System_00b53738-2f64-4419-895c-2c91eb98a186
 
tools\RE\Bookmarks\Common\Operating system_Software_Windows Portable Devices_39661eda-1373-493a-b333-583c51c9e74b
 
tools\RE\Bookmarks\Common\Operating system_Software_Winlogon_129b227e-57cd-400b-b370-4ef3d08f9627
 
tools\RE\Bookmarks\Common\Operating system_System_{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_18c3eafb-034d-49b6-9558-45b92416bf33
 
tools\RE\Bookmarks\Common\Operating system_System_{6bdd1fc6-810f-11d0-bec7-08002be2092f}_80aafc9b-f28d-41a8-929c-6c016c4b5bc0
 
tools\RE\Bookmarks\Common\Operating system_System_BTHPORT_aa11dce3-ce1e-4a70-abbe-7a18419afe33
 
tools\RE\Bookmarks\Common\Operating system_System_ComputerName_f5259882-9906-413f-b845-b2bbca09ffeb
 
tools\RE\Bookmarks\Common\Operating system_System_CrashControl_a4d38e6e-fa6e-4ceb-8a1f-b7b2f25bf573
 
tools\RE\Bookmarks\Common\Operating system_System_Environment_7044cf87-168f-4588-bae0-426632d08330
 
tools\RE\Bookmarks\Common\Operating system_System_EventLog_e99f1b87-9f35-4876-a5c5-3c99b92e4bfd
 
tools\RE\Bookmarks\Common\Operating system_System_FilesNotToSnapshot_af3e091f-8598-43e1-9e19-39c1352a72ea
 
tools\RE\Bookmarks\Common\Operating system_System_FileSystem_b20a0736-0d62-4a26-9539-a53ded5f152b
 
tools\RE\Bookmarks\Common\Operating system_System_Memory Management_15dc67bb-bf95-46ef-87db-e4e34e387125
 
tools\RE\Bookmarks\Common\Operating system_System_PrefetchParameters_0f9651f6-3aa8-4bac-89aa-e57a73744ee2
 
tools\RE\Bookmarks\Common\Operating system_System_RDP-Tcp_6e9f18d0-7173-424c-b695-e8c2894ee110
 
tools\RE\Bookmarks\Common\Operating system_System_SafeBoot_1da3ee50-90bf-49ed-9aa6-b97ba9948eee
 
tools\RE\Bookmarks\Common\Operating system_System_Services_9a4c3785-ec1c-4248-8b0a-cc32a3578d67
 
tools\RE\Bookmarks\Common\Operating system_System_Terminal Server_bc0da746-e8c5-465a-a70f-2779e7c914de
 
tools\RE\Bookmarks\Common\Operating system_System_TimeZoneInformation_e16fbaa9-172c-4501-a55d-0cb4adb02cac
 
tools\RE\Bookmarks\Common\Operating system_System_USB_d9ecec7b-e4c6-4c8d-9f65-2b971efbb4c4
 
tools\RE\Bookmarks\Common\Operating system_System_VSS_7afab042-09fb-4f0f-ae3e-b3c58c93f83c
 
tools\RE\Bookmarks\Common\Operating system_System_Windows_29e05135-bc83-4332-a11b-ea3c357e4de5
 
tools\RE\Bookmarks\Common\Operating system_System_Windows_d73fc227-8ea3-45e8-ac69-041a06a6c629
 
tools\RE\Bookmarks\Common\Program execution_NtUser_FileExts_03427bd9-675f-4564-9d7b-058e797a7cb6
 
tools\RE\Bookmarks\Common\Program execution_NtUser_FirstFolder_a640410c-d053-4966-ace5-36bc4b977c9a
 
tools\RE\Bookmarks\Common\Program execution_NtUser_MUICache_a51a8919-ffdd-4135-91fa-affac7f65bb5
 
tools\RE\Bookmarks\Common\Program execution_NtUser_RecentApps_3b793e2f-72d9-45b5-ad3a-290a6e967a04
 
tools\RE\Bookmarks\Common\Program execution_NtUser_RunMRU_524957bc-0c7e-490c-a8cf-f6bce2e1e1b5
 
tools\RE\Bookmarks\Common\Program execution_NtUser_Sysinternals_a801be22-7473-4c4c-9a57-9dbc90bcbf7c
 
tools\RE\Bookmarks\Common\Program execution_NtUser_UserAssist_660a4ade-592f-4c64-bd85-8241378d0839
 
tools\RE\Bookmarks\Common\Program execution_Software_System_2a35482d-0630-4d28-96fd-9691023be4fd
 
tools\RE\Bookmarks\Common\Program execution_System_AppCompatCache_f1adf410-8700-4a83-bc2e-f53cededc03d
 
tools\RE\Bookmarks\Common\Program execution_System_UserSettings_238ecefa-4bac-45c7-871b-54a12a7c3900
 
tools\RE\Bookmarks\Common\Program execution_System_UserSettings_c6a6b034-d03e-4258-80bc-ba344ba3520a
 
tools\RE\Bookmarks\Common\Software_NtUser_Main_95d1b312-336b-45f0-b219-f8a2b2ecea4e
 
tools\RE\Bookmarks\Common\Software_Software_Internet Explorer_140f36ce-6571-4966-b6e4-641c30a9b9b1
 
tools\RE\Bookmarks\Common\Software_Software_Products_a3ce0f6a-434d-4c2d-ba8f-16ce24209fe4
 
tools\RE\Bookmarks\Common\Software_Software_Products_c6b061c4-df1d-477f-bcde-4846ec328c31
 
tools\RE\Bookmarks\Common\Storage_System_{10497b1b-ba51-44e5-8318-a65c837b6661}_9fe29ea5-44f1-4d92-82a0-d6b1fb84ee34
 
tools\RE\Bookmarks\Common\Storage_System_MountedDevices_0d010e87-8b14-4ce1-b084-e99b5ab9748c
 
tools\RE\Bookmarks\Common\Storage_System_USBSTOR_3d1bc4ba-8eb2-4ec7-a4be-e6792505f999
 
tools\RE\Bookmarks\Common\User configuration_NtUser_CurrentVersion_9fef0ee2-99c9-4131-bd77-3f28fad9f8c7
 
tools\RE\Bookmarks\Common\User configuration_NtUser_CurrentVersion_b8239cb1-3e84-41ae-a156-ebabfadea7d1
 
tools\RE\Bookmarks\Common\User configuration_NtUser_Internet Settings_57563b19-0d7b-4f61-a76a-5ec5dfecb7c4
 
tools\RE\Bookmarks\Common\User configuration_NtUser_PrinterPorts_fe1bbde9-e2bc-4764-9948-3c3b8d8c2112
 
tools\RE\Bookmarks\Common\User configuration_Software_command_0054aabe-ed43-4485-b3ce-bc6490cfe81e
 
tools\RE\Bookmarks\Common\User configuration_Software_StartMenuInternet_dc7c443e-51be-41c6-bd71-851c9d108ad6
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_7-Zip_af7dfd06-6a98-4c8b-a795-bfb9f5ae407d
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_ComDlg32_44d580cf-ef19-4749-b833-f787ac1b0220
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_Compression_d0e9ff87-f6be-47ec-888d-164cb58f19f3
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_FileHistory_2895d67d-8601-45df-9758-f72958482822
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_Map Network Drive MRU_df6ed689-944a-46b1-a806-f5f78830429a
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_MountPoints2_28014255-7733-4398-a859-dd76642a19c7
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_RecentDocs_51af122a-734f-4b9b-8138-4633f67e0cad
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_Shell Folders_feec11a9-1482-4629-a083-0caf2df99873
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_User MRU_41e2c5c4-4da2-4b96-99ae-a4fb532f93d4
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_User MRU_6bbf4038-b3c6-4ba5-a4e1-d04d3166e675
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_User MRU_83fcbc4b-a0d4-40d2-b414-91ffa96d778c
 
tools\RE\Bookmarks\Common\User files and folders_NtUser_WinRAR_204cf564-85f5-42b9-983f-d94a970e7374
 
tools\RE\Bookmarks\Common\User files and folders_UsrClass_BagMRU_237fdb41-7713-485d-94ab-f07f4c157356
 
tools\RE\Bookmarks\Common\User general_NtUser_Applets_c6065d08-af30-4da3-b586-2f96def5fe7f
 
tools\RE\Bookmarks\Common\User general_NtUser_CCleaner_ec48ddd3-4f09-4431-b388-7f5d18eaab43
 
tools\RE\Bookmarks\Common\User general_NtUser_WordWheelQuery_89ca3fef-d045-4ff2-8891-4c61cf6c30ea
 
tools\RE\Bookmarks\Common\User network_NtUser_Ares_fe9bac6b-b1fd-4710-8579-80b31f4fe288
 
tools\RE\Bookmarks\Common\User network_NtUser_Default_617e9fc6-565a-4986-a3fa-7e517fcbf6a3
 
tools\RE\Bookmarks\Common\User network_NtUser_FTP_013baa05-0d47-4db7-9dbd-d4cb6231dc90
 
tools\RE\Bookmarks\Common\User network_NtUser_Servers_f7ae7fd1-b145-45e0-a8bd-805333e40c62
 
tools\RE\Bookmarks\Common\User network_NtUser_TeamViewer_6aa0d3cd-9926-4f23-bf9b-f675636944f0
 
tools\RE\Bookmarks\Common\User network_System_FirewallPolicy_6701136a-ccfb-476e-af28-d58543636ba4
 
tools\RE\Bookmarks\Common\User network_System_Shares_7794e865-4630-4703-ac0f-76e650314b01
 
tools\RE\Bookmarks\Common\Web browsing_NtUser_TypedURLs_24aec1e0-f92a-49db-8ec0-8443a7bbd130
 
tools\RE\Plugins\AppCompatCache\AppCompatCache.dll
md5: 4559EE9A40C3D9DD38F95332CE4C57EF | sha1: 28EB0756D9C120AFA0CC029F05F64997382F8A30 | sha256: FEA83333255A4D6C7F94D7F7A93612E77ADD8A1F369C5D19759BD48557046551 | sha512: DE9D05309F7FDA2A4DD0775B4872F5B2A2F601DA63A5D996DC42355473A3ED5ACED73EF480E26880ADC04378E9219CC435017F6C593A39A8AA272DC61B63DFF7
tools\RE\Plugins\AppCompatCache\RegistryPlugin.AppCompatCache.dll
md5: 321B8BFBC2807BB8620CAA96642F0E1C | sha1: FB11D4A2825A11AFAFB420E714E6FA469E08CFA8 | sha256: 79AFE86DC616CFA22A9D03089A7AF792781D771BC634EFADA9F6BB7086C9B7C9 | sha512: D4C7DA124BB5BAC02BDDB36482B34FF67F517EF140F92F6BB1BF2D384F86DD7A3F33DE6516BD624247DC1028B85F1884CA7A063E3346A5BEC605D6CBBF37CB1B
tools\RE\Plugins\RegistryPlugin.7-ZipHistory.dll
md5: 5F093903DAE403E2C049ED988F2F5DC9 | sha1: 67810176ED71D969CA920EFF709A91637FDABF47 | sha256: 4510055561404F0A2A70DEBCB8F8AF658F0A37F39BB01FFC1995CFEEFB181528 | sha512: 72FF56538BBBECD198F38B4A5206EEE53F895B7B364945FA98F42BD65ACC2C5A1663D40A7E3A52109E679E2D6C51B1B342D78978C22790D4F939DBD7BD61F00F
tools\RE\Plugins\RegistryPlugin.Ares.dll
md5: 4DBD86698A5E12651D9725157D007177 | sha1: EC8158B13AB7D916B2A6B2B64FA4D99E8B37C35B | sha256: 62708880F364774D958D9AB8BA3D230F1DB8C70E353540DD3E14CAA0BBA7CDC8 | sha512: C2DAE5CB9264C0E75FFBC3C2B66DF268813295FF72A45CF526CBE6014016C9A78ACB7BCC75825B2F4F6182AFDAEF46C67A0F208A3E55F2533ACDE5B6E06CD12B
tools\RE\Plugins\RegistryPlugin.BamDam.dll
md5: 3BF927E74E784CC8270162488A1FCA5A | sha1: 33686924930DA639E1F96EF17A83B48858B76EC8 | sha256: 884B21A54D04678136F3EFFC954153B2DC094F5664D0F4456BF22C96117D2A82 | sha512: 086D798BED789B87F392736A27DBEA71F6AD1B3871E801141E5439D33D2C694F5ADA92AFE1CA8AF3E5BBB35E09C2F8F3CFE7B813ECCEE32D6E532765B217F479
tools\RE\Plugins\RegistryPlugin.BluetoothServicesBthPort.dll
md5: 0BBDEF7386593E4FBBB49B6C29CC800A | sha1: 6FCA409EB2008F0ABD0EEE7E345AFA6469223FF3 | sha256: F75D11CB13440519D8D241D0BE0F717C93539AD33E442273269AD4DB9D097C40 | sha512: D21736F2E15EDADC07B31EF5D647A7784EA4658FAF6111473AB8279549998854B177985E51091CB31A0F1B54A8C4CCF8A66D21B1EA5EE9BEA972FD47BDA695F7
tools\RE\Plugins\RegistryPlugin.CIDSizeMRU.dll
md5: 5131B434CB18BF8A0DEB0083CFEEE14F | sha1: 690F89F3B8A8953D50ACB6ACAA820EB22531C98D | sha256: D081778DDC8C09AC5436FB69E383FC95CB2629E3AD833D57152DFE32436692A9 | sha512: B5045D89C7BBC72F76443E4B8A65133760EF8AF20DC99084AFB59B30BAC379E06A521E883446BD66B06F5F1410F0480177455E24929AADD2162183DA1EE9E229
tools\RE\Plugins\RegistryPlugin.DHCPNetworkHint.dll
md5: 6CDF4F704AC70B957E2121E216C26F2D | sha1: 8F099D256484DD346E8B2D41A1525A515EF62639 | sha256: 98EA5EE8524B53F5094D08F7ED1CA86D971C7DE9FE05C0221B479ACF1B96133E | sha512: 7239F390D8AAFC60B52630DD84BF27397976492654A8F7C11535457DC350DEAEA26CB09C43C66ECE506EF489322F83B426E778B608FFB5C05331E740CDD37C24
tools\RE\Plugins\RegistryPlugin.FileExts.dll
md5: F38A793F9E1191ECDBD19DD812BE52F4 | sha1: CA888B4EB9B1BCAB0D7A2EDD7B577D28D922B207 | sha256: 2A66618EB941483C8E65BC07C7D5A508B3C07010B3C5400BD37A5C069303575C | sha512: 5763879770C5DC6CB4FA97BF9AB4139B266B6AA45AA456817B9547A53368D60B35C86CD8DA917417C0B43793B847F9AFCCA0EA9F73783B08AC01973344EEAA6E
tools\RE\Plugins\RegistryPlugin.FirstFolder.dll
md5: C5B1DC883C23E0232FB3194A934472B5 | sha1: 7771B8613608B7A3A6AF9934CE91C2E5ED2D30C6 | sha256: D51C9F52B61253628E848F332243EB1D83FCB1976F5EF4BADC3612C5F4E99A25 | sha512: 801D0CCFD012A26E0D4014FCAC86BEE0B3798472874836234BBAA10316E097BAB9C82F21CB21BAC985796F85434AFE3EFD180B9FB1CB23825053BC832D059E8C
tools\RE\Plugins\RegistryPlugin.KnownNetworks.dll
md5: CA82566D86990149A359AF2C3D2A6382 | sha1: 1D5D423EFDD9FC50B78C46E90BBDE9BEAB9A1107 | sha256: 65D008BCF31A32C07C523E20FC4383862DE73E61F36EECEAF841D62112A34E11 | sha512: BBEDEA5E11FBEED33259E2B91BA0E4EC028A77C01FF6C5D1485499C214A95CE0F851D7E4A0EB04949D117CFFF9E263BE3212F39AC06F0AEB149FDCFBDB1CD0C1
tools\RE\Plugins\RegistryPlugin.LastVisitedMRU.dll
md5: 55C59F9437A4057570A0A3FBC4EFBA20 | sha1: 6BD4D7CDCF382A0A4BC995E206AB2D2C5E9105E7 | sha256: BFAE844A196EE52D4678DD1563BDE05DC8A926C81E2721B991EFA6D6BA02FA04 | sha512: 637FD5A1FEA18BAA67715E4BD23F2818681A2140F73EB8E879A44AD80D35765615542B178A9B0452985E71B2A25B056DD98C40E8B50F9CD5D32109B1DEDFC781
tools\RE\Plugins\RegistryPlugin.LastVisitedPidlMRU.dll
md5: 908FE2539CCC37C1938A88CD02E61544 | sha1: 1F018CBC391B232CC43CB0A0222792CBEC0DE600 | sha256: DF373C8F91BA6B965CD4056F83534029A629E6FB4ABCFAD17C2A4002BA5741D2 | sha512: 854955C3D732026FF75B51DF4D23E1B7BE6F8DA96BE2BF4C77121DCAD2C2F259CCA8FF5A6FC5744EEF8031CD13D75B0206B98B511D6AAA7B4ECFE1D940A9EE65
tools\RE\Plugins\RegistryPlugin.OfficeMRU.dll
md5: F02192ACBEAA91C5988E921D77E16748 | sha1: 7E4CF7888B81A2E4C136F0658B7E1F30CD894BA6 | sha256: 047AB1F3C2548AF171C29EA8AEF8D08D70C796E134C69C623A15425A41A0737F | sha512: 58892618EABD100A30F4C36FBD044C487FC7894915852CD8C96FD6F13721E0CAA88995A0A6AA75C7AEAC8B4686111B8DC86DD418CC29C46C23619F28DE15BBF4
tools\RE\Plugins\RegistryPlugin.OpenSaveMRU.dll
md5: BDF8FC3E6DD9AA88CB0FC67B41E8E1EE | sha1: F77DC09B69CA870FDACEFE136129EE2D6F1E0923 | sha256: 0A1039E9BE73E5345A07D746B84131AFCA66D2979B6377F571284E7D552DB3F0 | sha512: E36DF3E46FC87940C1537DE8A616EC2DB193C00D9D44A6462627EBF73ABA85C9AF137EA70CEBF9A9E003AD8C8097B1F1D2BAEEB41DA985379F6CD0F4CB4F550F
tools\RE\Plugins\RegistryPlugin.OpenSavePidlMRU.dll
md5: EF81A5CF964532F18A28ED8731DBF7D6 | sha1: CCC594D138CC6A9D3C45443CB3C04A6C7EAC601E | sha256: AF72D05A80F9DC87AEF9082E735F922DFE63084FEB9DDAFB755BAE7B503AD628 | sha512: E473007A10491A0E9DDCF4FBD49FFE207006B88DAF2A3C87ADD306DDEF63C04F6F84AD6DA197FDE6DB05A9E3C0FBC48457AAC84E59BD8894F0195A2DEEEE6221
tools\RE\Plugins\RegistryPlugin.RecentApps.dll
md5: 11EF45B1FEC050B91D4B4812E3D52E34 | sha1: 25E0AEB80AECF1F84A5CAED2814CB33C48C1B85D | sha256: E68C7BDA8B5DBF99C60690928BD7559F6565B34A1E11EDF68C1E4B79FBC2257B | sha512: 98D17D9A7BF94D2BF4BEEF9023FC3F5AA3755C91892771AB4E446B978B7274B56FE5E54CC7F0A00BEE3E7603CDA07EDEC01082D3D4C8F7402FAD6B1C920B54AF
tools\RE\Plugins\RegistryPlugin.RecentDocs.dll
md5: 729A777536F3D5E349C7FBD6B0F9A50E | sha1: 095FEDC127A01FE075557289103D0A9C7F700E2D | sha256: 6C6B534FBFB30F64D2DD6D940E44CDA2F7E37E534BE3ACF50B7C1C650FA17DDB | sha512: 6518DD9C36064964BF5B923B04DD300185694BB709DE76FBF036DE771F3114F0D979A9D3FEE7D338EC20230A765C22873E509CF2A702400F6CFAAAEFE904E429
tools\RE\Plugins\RegistryPlugin.RunMRU.dll
md5: ADFFABD24529F0A7976ECDE629B8B044 | sha1: D3DBC067A0E715C0BCCC04008A1DB2CC6D03635A | sha256: 0366CBC98AF76A9421CBCF3A7EB03BAC32B1280ABC4420AB763734354F23C5C7 | sha512: 10A69A8FE62F0A98071E4DD30189BCF7A527CA9692CEF7C13A8EBE3377921A3D6F01704D3F0F1430F27E11541D8F9790DD497B3DB59162A5E7C5C582DFB6A17A
tools\RE\Plugins\RegistryPlugin.SAM.dll
md5: 0ACFA270DA55FB919972AC8653EE31E0 | sha1: 03EE577795159D69C0C5132A46881398BBEA89B7 | sha256: FD7B683594269BA568C99810F8A566CFB975C40703C906F6337BA1EE6E5606C3 | sha512: E18F12D613A091E1FA366B98A7065BE97CB0799352A760F269D5D6614F8F62AC041B36B56C6BFCD3E8DCEBC694A3648CE8CC8C942E4008ECFC7B686B14A79948
tools\RE\Plugins\RegistryPlugin.Services.dll
md5: E10A1D9A747DFEA10E5BAC6B29B6E3A6 | sha1: 648011C5A10449DEFA9196835DDD1F5E3FF0D459 | sha256: C7702A9CCEEE9A669B310D06B84FCD3BCD9DD2D49DC70E9D4D8B865172278979 | sha512: 6BD1F28B6B57C4961B79567D4D6C7B28855262DC151B18A951935BBEB68D6F7449290618A072DCCB648B0A2B3AE05293BBF3306EDDA6C237D949785CBFC8ED68
tools\RE\Plugins\RegistryPlugin.TerminalServerClient.dll
md5: FCF055CB2EA735C1AD7D363E557C7D72 | sha1: 967D8B5DA1243EB7C693CEC3F22606133A95FEE0 | sha256: 4AD2DE6F29BAC42FDC189FE83F7C7093D6ED7CB5516263C0C51796A942DD034D | sha512: 744746D2CB4976CE6BCF6A466A66335762ACF67E1C5F097A21B0A72F7C36381BB655E0A818AF365464D7209BCC325A828AE047F065CBB17967D4B1C26E4F6DC3
tools\RE\Plugins\RegistryPlugin.TimeZoneInformation.dll
md5: 605C5702FD5A388640F46762A8F2B0B8 | sha1: 02FCAA16ABAAF56425534817B4288BB1871D1522 | sha256: E6438C9A8B3606CFD10533F9BF465B16BADC44578B07F8617A035A65A2DEB90A | sha512: 9616A6B56C09A28A5CE03B472532B911F9514224AC6C1C3321A6910B8DDAE9F880A44045B127AE22F9F687EE886BBC0AA4F1ED4A7EB4B7B62B9F5D9E119BD962
tools\RE\Plugins\RegistryPlugin.TypedURLs.dll
md5: F70FCFF5B90CF11E09904E75CDDC9822 | sha1: F9E0335F7ACE75EABD13F0F67CB07ADDBBB99AF0 | sha256: 2444EF2C54559AC98DA89E4840CD9BD632B6CBD63927F93EA5DBCC8D9C27C381 | sha512: D793C6CDF7FB048E8567E96E0B309779F02229F8CD57A44483AFAE28386482DABBD558FC93AD463E71C1C168E521BC697F0456F7D4B62517924D848E1BF77651
tools\RE\Plugins\RegistryPlugin.UserAssist.dll
md5: CCEBAF455E03884C07E86E4F884D3078 | sha1: 6FA3EA6297A981B6D072FEB60147DC889B6F30CC | sha256: 2EE0581923DD3F3CF74CAF5DB24672A6BED81212A826E74657AF96C59B8630B1 | sha512: 731A2CDE2EBD167B95A619F408FB331DD132FF36C419A285D69671F67D7B797E9315B54E31920692E19ED819518A02B57EB539A3782AB3898D365B78145B8B07
tools\RE\Plugins\RegistryPlugin.WordWheelQuery.dll
md5: DC84C4E3C24A11F0D43689C226DAB0B6 | sha1: C20E3A52021404A88E8A4CA0E00B057A2370358C | sha256: DAF6F2180923A1D030E87FD131000C72D63E8B1E0D491BA8B97088FBFE24A0C9 | sha512: CFFDB43B48AA9BC6354CFFEB2C18F50A330A25389C4CDD249BCF00AE01FE4BA43E71A99BD42D90DE0CBA439333749BA6F11D5DF5A6ED11003E7AF77789317D7F
tools\RE\RECmd\NLog.config
<?xml version="1.0" encoding="utf-8" ?>
<nlog xmlns="http://www.nlog-project.org/schemas/NLog.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

  <!-- 
  See https://github.com/nlog/nlog/wiki/Configuration-file for information on customizing logging rules and outputs.
   -->
  <targets>
    <target xsi:type="ColoredConsole" name="console" layout="${message}">

      <!-- Change backgroundColor and foregroundColor to the colors you want to use!!! -->
      <!-- Available colors can be seen at https://github.com/nlog/NLog/wiki/ColoredConsole-target -->
      <highlight-word backgroundColor="Green" foregroundColor="Red" ignoreCase="true"  text="this will be replaced with search term"/>

    </target>
  </targets>

  <rules>
    <logger name="*" minlevel="Info" writeTo="console" />
  </rules>
</nlog>
tools\RE\RECmd\RECmd.exe
md5: FC078B4283F97C764D9909D9998106BE | sha1: 6380536247DAA77A02DDDB9093EE340B3FFD4FCC | sha256: 0B607ED9478302C4E2C07DB896B787E8F3BFD176795927E5CF2CE48170638EE1 | sha512: 1094932C99F3A54EE43514626383ED427E78354F9A4E8C208BB7100166DCF9C78306E3DCEF67CC1965626316460F33497D78321499AAC561AA9AC636993BAEC3
tools\RE\RegistryExplorer.exe
md5: 38FEC3528E222D3832E480AEA132D31E | sha1: C5EEA71713B411967DF99DCDD8DDDBC4E5BA4F08 | sha256: F07429089783BCAEC634C06DD6E124D13FC311D397EA7234642032C860493E3E | sha512: 30FD22BA09899630534317EC8B952BCDE367479400D9BD3F1F1B2E9D82522B14BBBCAA5EEAD15DBDC2428A5060C032BC4FEB5CAF7B9BEBE5698B19C50531F01B
tools\RE\RegistryExplorerManual.pdf
 
tools\RE\Settings\Categories
 
tools\RE\Settings\General
 
tools\RE\Settings\HiddenKeys
 
tools\VERIFICATION.txt

VERIFICATION
Verification is intended to assist the Chocolatey moderators and community
in verifying that this package's contents are trustworthy.
 
This is all my stuff. References

https://github.com/ericzimmerman
https://binaryforay.blogspot.com/
https://gist.github.com/EricZimmerman/4288bc5e0ac188af2ca9
https://www.sans.org/instructors/eric-zimmerman

Log in or click on link to see number of positives.

In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).

Chocolatey Pro provides runtime protection from possible malware.

Version Downloads Last Updated Status
Registry Explorer 1.3.0.0 226 Thursday, January 17, 2019 Approved
Registry Explorer 1.2.0.0 162 Sunday, January 13, 2019 Approved
Registry Explorer 1.1.0.65 208 Tuesday, December 18, 2018 Approved
Registry Explorer 1.1.0.64 76 Tuesday, December 18, 2018 Approved
Registry Explorer 1.1.0.62 245 Sunday, November 25, 2018 Approved
Registry Explorer 1.1.0.61 290 Monday, October 8, 2018 Approved
Registry Explorer 1.1.0.5 199 Wednesday, September 19, 2018 Approved
Registry Explorer 1.1.0.4 107 Monday, September 17, 2018 Approved

This package has no dependencies.

Discussion for the Registry Explorer Package

Ground Rules:

  • This discussion is only about Registry Explorer and the Registry Explorer package. If you have feedback for Chocolatey, please contact the Google Group.
  • This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
  • The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
  • Tell us what you love about the package or Registry Explorer, or tell us what needs improvement.
  • Share your experiences with the package, or extra configuration or gotchas that you've found.
  • If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.
comments powered by Disqus