********************************************************************** FileTypeDiag version 1.0.0.7 http://www.pretentiousname.com/miscsoft/index.html#FileTypeDiag ********************************************************************** OS Bitness: 64-bit MajorVersion: 6 MinorVersion: 2 BuildNumber: 9200 PlatformId: 2 CSDVersion: "" ServicePackMajor: 0 ServicePackMinor: 0 SuiteMask: 0x100 ProductType: 1 (Reserved): 0 ********************************************************************** File-type dump for ".rtf" ********************************************************************** 64 HKCR\*\ 64 HKCR\*: "AlwaysShowExt" is REG_SZ: "" 64 HKCR\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 64 HKCR\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size" 64 HKCR\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size" 64 HKCR\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta" 64 HKCR\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta" 64 HKCR\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 64 HKCR\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 64 HKCR\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCR\*: "NoRecentDocs" is REG_SZ: "" 64 HKCR\*: "NoStaticDefaultVerb" is REG_SZ: "" 64 HKCR\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 64 HKCR\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 64 HKCR\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCR\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 64 HKCR\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCR\*\OpenWithList\ 64 HKCR\*\OpenWithList\Excel.exe\ 64 HKCR\*\OpenWithList\IExplore.exe\ 64 HKCR\*\OpenWithList\NoteTab.exe\ 64 HKCR\*\OpenWithList\Winword.exe\ 64 HKCR\*\OpenWithProgids\ 64 HKCR\*\OpenWithProgids: "AppXkv2jqn1pq8ajm0p5dhgqde7aafykkrrn" is REG_NONE 64 HKCR\*\shell\ 64 HKCR\*\shell\ANotepad++64\ 64 HKCR\*\shell\ANotepad++64: "" is REG_SZ: "Notepad++ Context menu" 64 HKCR\*\shell\ANotepad++64: "ExplorerCommandHandler" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}" 64 HKCR\*\shell\ANotepad++64: "NeverDefault" is REG_SZ: "" 64 HKCR\*\shell\ANotepad++64: "HideBasedOnVelocityId" is REG_DWORD: 6527944 (0x639bc8) 64 HKCR\*\shell\ANotepad++64: "LegacyDisable" is REG_SZ: "" 64 HKCR\*\shell\ANotepad++64: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKCR\*\shell\pintohomefile\ 64 HKCR\*\shell\pintohomefile: "CommandStateHandler" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 64 HKCR\*\shell\pintohomefile: "CommandStateSync" is REG_SZ: "" 64 HKCR\*\shell\pintohomefile: "MUIVerb" is REG_SZ: "@shell32.dll,-51608" --> "Add to &Favorites" 64 HKCR\*\shell\pintohomefile: "NeverDefault" is REG_SZ: "" 64 HKCR\*\shell\pintohomefile: "SkipCloudDownload" is REG_DWORD: 0 (0x0) 64 HKCR\*\shell\pintohomefile: "LegacyDisable" is REG_SZ: "" 64 HKCR\*\shell\pintohomefile\command\ 64 HKCR\*\shell\pintohomefile\command: "DelegateExecute" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 64 HKCR\*\shell\removeproperties\ 64 HKCR\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment" 64 HKCR\*\shell\removeproperties\DropTarget\ 64 HKCR\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}" 64 HKCR\*\shell\RunAs\ 64 HKCR\*\shell\UpdateEncryptionSettingsWork\ 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "AppliesTo" is REG_SZ: "System.StorageProviderId:<>"network" AND System.StorageProviderProtectionMode:<>1 AND System.StorageProviderProtectionMode:<>2" 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "AttributeMask" is REG_DWORD: 8192 (0x2000) 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "AttributeValue" is REG_DWORD: 8192 (0x2000) 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "ExtendedSubCommandsKey" is REG_SZ: "*\shell\UpdateEncryptionSettingsWork" 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "ImpliedSelectionModel" is REG_DWORD: 0 (0x0) 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "MUIVerb" is REG_SZ: "@efscore.dll,-101" 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "MultiSelectModel" is REG_SZ: "Player" 64 HKCR\*\shell\UpdateEncryptionSettingsWork: "Position" is REG_SZ: "Bottom" 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\ 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\ 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeMask" is REG_DWORD: 8192 (0x2000) 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeValue" is REG_DWORD: 8192 (0x2000) 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "CommandStateHandler" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "Icon" is REG_SZ: "edputil.dll,-1002" 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "MUIVerb" is REG_SZ: "@efscore.dll,-103" 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "ShowAsDisabledIfHidden" is REG_SZ: "" 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "UpdateType" is REG_DWORD: 0 (0x0) 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command\ 64 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command: "DelegateExecute" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 64 HKCR\*\shellex\ 64 HKCR\*\shellex\-ContextMenuHandlers\ 64 HKCR\*\shellex\-ContextMenuHandlers\ FileSyncEx\ 64 HKCR\*\shellex\-ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 64 HKCR\*\shellex\-ContextMenuHandlers\7-Zip\ 64 HKCR\*\shellex\-ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 64 HKCR\*\shellex\-ContextMenuHandlers\SnagItMainShellExt\ 64 HKCR\*\shellex\-ContextMenuHandlers\SnagItMainShellExt: "" is REG_SZ: "-{CF74B903-3389-469c-B3B6-0204D204FCBD}" 64 HKCR\*\shellex\ContextMenuHandlers\ 64 HKCR\*\shellex\ContextMenuHandlers\ FileSyncEx\ 64 HKCR\*\shellex\ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 64 HKCR\*\shellex\ContextMenuHandlers\7-Zip\ 64 HKCR\*\shellex\ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 64 HKCR\*\shellex\ContextMenuHandlers\AccExt\ 64 HKCR\*\shellex\ContextMenuHandlers\AccExt: "" is REG_SZ: "{2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4}" 64 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\ 64 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "[CC]{A6595CD1-BF77-430A-A452-18696685F7C7}" 64 HKCR\*\shellex\ContextMenuHandlers\DropboxExt\ 64 HKCR\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}" 64 HKCR\*\shellex\ContextMenuHandlers\EPP\ 64 HKCR\*\shellex\ContextMenuHandlers\EPP: "" is REG_SZ: "{09A47860-11B0-4DA5-AFA5-26D86198A780}" 64 HKCR\*\shellex\ContextMenuHandlers\Open With\ 64 HKCR\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}" 64 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\ 64 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}" 64 HKCR\*\shellex\ContextMenuHandlers\ReflectShellExt\ 64 HKCR\*\shellex\ContextMenuHandlers\ReflectShellExt: "" is REG_SZ: "[CC]{DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611}" 64 HKCR\*\shellex\ContextMenuHandlers\Sharing\ 64 HKCR\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}" 64 HKCR\*\shellex\ContextMenuHandlers\WorkFolders\ 64 HKCR\*\shellex\ContextMenuHandlers\WorkFolders: "" is REG_SZ: "{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}" 64 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\ 64 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin" 64 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 64 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 64 HKCR\*\shellex\PropertySheetHandlers\ 64 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu\ 64 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}" 64 HKCR\*\shellex\PropertySheetHandlers\FCI Properties\ 64 HKCR\*\shellex\PropertySheetHandlers\FCI Properties: "" is REG_SZ: "{748F920F-FB24-4D09-B360-BAF6F199AD6D}" 64 HKCR\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\ 64 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\ 64 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page" 64 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\ 64 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page" ---------------------------------------------------------------------- 64 HKCU\Software\Classes\*\ 64 HKCU\Software\Classes\*: "AlwaysShowExt" is REG_SZ: "" 64 HKCU\Software\Classes\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 64 HKCU\Software\Classes\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size" 64 HKCU\Software\Classes\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size" 64 HKCU\Software\Classes\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta" 64 HKCU\Software\Classes\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta" 64 HKCU\Software\Classes\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 64 HKCU\Software\Classes\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 64 HKCU\Software\Classes\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCU\Software\Classes\*: "NoRecentDocs" is REG_SZ: "" 64 HKCU\Software\Classes\*: "NoStaticDefaultVerb" is REG_SZ: "" 64 HKCU\Software\Classes\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 64 HKCU\Software\Classes\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 64 HKCU\Software\Classes\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCU\Software\Classes\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 64 HKCU\Software\Classes\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCU\Software\Classes\*\OpenWithProgids\ 64 HKCU\Software\Classes\*\OpenWithProgids: "AppXkv2jqn1pq8ajm0p5dhgqde7aafykkrrn" is REG_NONE 64 HKCU\Software\Classes\*\shellex\ 64 HKCU\Software\Classes\*\shellex\ContextMenuHandlers\ ---------------------------------------------------------------------- 64 HKLM\Software\Classes\*\ 64 HKLM\Software\Classes\*: "AlwaysShowExt" is REG_SZ: "" 64 HKLM\Software\Classes\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 64 HKLM\Software\Classes\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size" 64 HKLM\Software\Classes\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size" 64 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta" 64 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta" 64 HKLM\Software\Classes\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 64 HKLM\Software\Classes\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 64 HKLM\Software\Classes\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKLM\Software\Classes\*: "NoRecentDocs" is REG_SZ: "" 64 HKLM\Software\Classes\*: "NoStaticDefaultVerb" is REG_SZ: "" 64 HKLM\Software\Classes\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 64 HKLM\Software\Classes\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 64 HKLM\Software\Classes\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKLM\Software\Classes\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 64 HKLM\Software\Classes\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKLM\Software\Classes\*\OpenWithList\ 64 HKLM\Software\Classes\*\OpenWithList\Excel.exe\ 64 HKLM\Software\Classes\*\OpenWithList\IExplore.exe\ 64 HKLM\Software\Classes\*\OpenWithList\NoteTab.exe\ 64 HKLM\Software\Classes\*\OpenWithList\Winword.exe\ 64 HKLM\Software\Classes\*\shell\ 64 HKLM\Software\Classes\*\shell\ANotepad++64\ 64 HKLM\Software\Classes\*\shell\ANotepad++64: "" is REG_SZ: "Notepad++ Context menu" 64 HKLM\Software\Classes\*\shell\ANotepad++64: "ExplorerCommandHandler" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}" 64 HKLM\Software\Classes\*\shell\ANotepad++64: "NeverDefault" is REG_SZ: "" 64 HKLM\Software\Classes\*\shell\ANotepad++64: "HideBasedOnVelocityId" is REG_DWORD: 6527944 (0x639bc8) 64 HKLM\Software\Classes\*\shell\ANotepad++64: "LegacyDisable" is REG_SZ: "" 64 HKLM\Software\Classes\*\shell\ANotepad++64: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKLM\Software\Classes\*\shell\pintohomefile\ 64 HKLM\Software\Classes\*\shell\pintohomefile: "CommandStateHandler" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 64 HKLM\Software\Classes\*\shell\pintohomefile: "CommandStateSync" is REG_SZ: "" 64 HKLM\Software\Classes\*\shell\pintohomefile: "MUIVerb" is REG_SZ: "@shell32.dll,-51608" --> "Add to &Favorites" 64 HKLM\Software\Classes\*\shell\pintohomefile: "NeverDefault" is REG_SZ: "" 64 HKLM\Software\Classes\*\shell\pintohomefile: "SkipCloudDownload" is REG_DWORD: 0 (0x0) 64 HKLM\Software\Classes\*\shell\pintohomefile: "LegacyDisable" is REG_SZ: "" 64 HKLM\Software\Classes\*\shell\pintohomefile\command\ 64 HKLM\Software\Classes\*\shell\pintohomefile\command: "DelegateExecute" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 64 HKLM\Software\Classes\*\shell\removeproperties\ 64 HKLM\Software\Classes\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment" 64 HKLM\Software\Classes\*\shell\removeproperties\DropTarget\ 64 HKLM\Software\Classes\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}" 64 HKLM\Software\Classes\*\shell\RunAs\ 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\ 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "AppliesTo" is REG_SZ: "System.StorageProviderId:<>"network" AND System.StorageProviderProtectionMode:<>1 AND System.StorageProviderProtectionMode:<>2" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "AttributeMask" is REG_DWORD: 8192 (0x2000) 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "AttributeValue" is REG_DWORD: 8192 (0x2000) 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "ExtendedSubCommandsKey" is REG_SZ: "*\shell\UpdateEncryptionSettingsWork" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "ImpliedSelectionModel" is REG_DWORD: 0 (0x0) 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "MUIVerb" is REG_SZ: "@efscore.dll,-101" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "MultiSelectModel" is REG_SZ: "Player" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "Position" is REG_SZ: "Bottom" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\ 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\ 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeMask" is REG_DWORD: 8192 (0x2000) 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeValue" is REG_DWORD: 8192 (0x2000) 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "CommandStateHandler" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "Icon" is REG_SZ: "edputil.dll,-1002" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "MUIVerb" is REG_SZ: "@efscore.dll,-103" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "ShowAsDisabledIfHidden" is REG_SZ: "" 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "UpdateType" is REG_DWORD: 0 (0x0) 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command\ 64 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command: "DelegateExecute" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 64 HKLM\Software\Classes\*\shellex\ 64 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\ 64 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\ FileSyncEx\ 64 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 64 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\7-Zip\ 64 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 64 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\SnagItMainShellExt\ 64 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\SnagItMainShellExt: "" is REG_SZ: "-{CF74B903-3389-469c-B3B6-0204D204FCBD}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\7-Zip\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\AccExt\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\AccExt: "" is REG_SZ: "{2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "[CC]{A6595CD1-BF77-430A-A452-18696685F7C7}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\EPP\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\EPP: "" is REG_SZ: "{09A47860-11B0-4DA5-AFA5-26D86198A780}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ReflectShellExt\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ReflectShellExt: "" is REG_SZ: "[CC]{DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WorkFolders\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WorkFolders: "" is REG_SZ: "{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin" 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 64 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\ 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu\ 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}" 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\FCI Properties\ 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\FCI Properties: "" is REG_SZ: "{748F920F-FB24-4D09-B360-BAF6F199AD6D}" 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\ 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\ 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page" 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\ 64 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page" ********************************************************************** 32 HKCR\*\ 32 HKCR\*: "AlwaysShowExt" is REG_SZ: "" 32 HKCR\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 32 HKCR\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size" 32 HKCR\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size" 32 HKCR\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta" 32 HKCR\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta" 32 HKCR\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 32 HKCR\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 32 HKCR\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCR\*: "NoRecentDocs" is REG_SZ: "" 32 HKCR\*: "NoStaticDefaultVerb" is REG_SZ: "" 32 HKCR\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 32 HKCR\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 32 HKCR\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCR\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 32 HKCR\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCR\*\OpenWithList\ 32 HKCR\*\OpenWithList\Excel.exe\ 32 HKCR\*\OpenWithList\IExplore.exe\ 32 HKCR\*\OpenWithList\NoteTab.exe\ 32 HKCR\*\OpenWithList\Winword.exe\ 32 HKCR\*\OpenWithProgids\ 32 HKCR\*\OpenWithProgids: "AppXkv2jqn1pq8ajm0p5dhgqde7aafykkrrn" is REG_NONE 32 HKCR\*\shell\ 32 HKCR\*\shell\ANotepad++64\ 32 HKCR\*\shell\ANotepad++64: "" is REG_SZ: "Notepad++ Context menu" 32 HKCR\*\shell\ANotepad++64: "ExplorerCommandHandler" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}" 32 HKCR\*\shell\ANotepad++64: "NeverDefault" is REG_SZ: "" 32 HKCR\*\shell\ANotepad++64: "HideBasedOnVelocityId" is REG_DWORD: 6527944 (0x639bc8) 32 HKCR\*\shell\ANotepad++64: "LegacyDisable" is REG_SZ: "" 32 HKCR\*\shell\ANotepad++64: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKCR\*\shell\pintohomefile\ 32 HKCR\*\shell\pintohomefile: "CommandStateHandler" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 32 HKCR\*\shell\pintohomefile: "CommandStateSync" is REG_SZ: "" 32 HKCR\*\shell\pintohomefile: "MUIVerb" is REG_SZ: "@shell32.dll,-51608" --> "Add to &Favorites" 32 HKCR\*\shell\pintohomefile: "NeverDefault" is REG_SZ: "" 32 HKCR\*\shell\pintohomefile: "SkipCloudDownload" is REG_DWORD: 0 (0x0) 32 HKCR\*\shell\pintohomefile: "LegacyDisable" is REG_SZ: "" 32 HKCR\*\shell\pintohomefile\command\ 32 HKCR\*\shell\pintohomefile\command: "DelegateExecute" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 32 HKCR\*\shell\removeproperties\ 32 HKCR\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment" 32 HKCR\*\shell\removeproperties\DropTarget\ 32 HKCR\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}" 32 HKCR\*\shell\RunAs\ 32 HKCR\*\shell\UpdateEncryptionSettingsWork\ 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "AppliesTo" is REG_SZ: "System.StorageProviderId:<>"network" AND System.StorageProviderProtectionMode:<>1 AND System.StorageProviderProtectionMode:<>2" 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "AttributeMask" is REG_DWORD: 8192 (0x2000) 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "AttributeValue" is REG_DWORD: 8192 (0x2000) 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "ExtendedSubCommandsKey" is REG_SZ: "*\shell\UpdateEncryptionSettingsWork" 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "ImpliedSelectionModel" is REG_DWORD: 0 (0x0) 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "MUIVerb" is REG_SZ: "@efscore.dll,-101" 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "MultiSelectModel" is REG_SZ: "Player" 32 HKCR\*\shell\UpdateEncryptionSettingsWork: "Position" is REG_SZ: "Bottom" 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\ 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\ 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeMask" is REG_DWORD: 8192 (0x2000) 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeValue" is REG_DWORD: 8192 (0x2000) 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "CommandStateHandler" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "Icon" is REG_SZ: "edputil.dll,-1002" 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "MUIVerb" is REG_SZ: "@efscore.dll,-103" 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "ShowAsDisabledIfHidden" is REG_SZ: "" 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "UpdateType" is REG_DWORD: 0 (0x0) 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command\ 32 HKCR\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command: "DelegateExecute" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 32 HKCR\*\shellex\ 32 HKCR\*\shellex\-ContextMenuHandlers\ 32 HKCR\*\shellex\-ContextMenuHandlers\ FileSyncEx\ 32 HKCR\*\shellex\-ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 32 HKCR\*\shellex\-ContextMenuHandlers\7-Zip\ 32 HKCR\*\shellex\-ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 32 HKCR\*\shellex\-ContextMenuHandlers\SnagItMainShellExt\ 32 HKCR\*\shellex\-ContextMenuHandlers\SnagItMainShellExt: "" is REG_SZ: "-{CF74B903-3389-469c-B3B6-0204D204FCBD}" 32 HKCR\*\shellex\ContextMenuHandlers\ 32 HKCR\*\shellex\ContextMenuHandlers\ FileSyncEx\ 32 HKCR\*\shellex\ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 32 HKCR\*\shellex\ContextMenuHandlers\7-Zip\ 32 HKCR\*\shellex\ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 32 HKCR\*\shellex\ContextMenuHandlers\AccExt\ 32 HKCR\*\shellex\ContextMenuHandlers\AccExt: "" is REG_SZ: "{2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4}" 32 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\ 32 HKCR\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "[CC]{A6595CD1-BF77-430A-A452-18696685F7C7}" 32 HKCR\*\shellex\ContextMenuHandlers\DropboxExt\ 32 HKCR\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}" 32 HKCR\*\shellex\ContextMenuHandlers\EPP\ 32 HKCR\*\shellex\ContextMenuHandlers\EPP: "" is REG_SZ: "{09A47860-11B0-4DA5-AFA5-26D86198A780}" 32 HKCR\*\shellex\ContextMenuHandlers\Open With\ 32 HKCR\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}" 32 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\ 32 HKCR\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}" 32 HKCR\*\shellex\ContextMenuHandlers\ReflectShellExt\ 32 HKCR\*\shellex\ContextMenuHandlers\ReflectShellExt: "" is REG_SZ: "[CC]{DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611}" 32 HKCR\*\shellex\ContextMenuHandlers\Sharing\ 32 HKCR\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}" 32 HKCR\*\shellex\ContextMenuHandlers\WorkFolders\ 32 HKCR\*\shellex\ContextMenuHandlers\WorkFolders: "" is REG_SZ: "{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}" 32 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\ 32 HKCR\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin" 32 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 32 HKCR\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 32 HKCR\*\shellex\PropertySheetHandlers\ 32 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu\ 32 HKCR\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}" 32 HKCR\*\shellex\PropertySheetHandlers\FCI Properties\ 32 HKCR\*\shellex\PropertySheetHandlers\FCI Properties: "" is REG_SZ: "{748F920F-FB24-4D09-B360-BAF6F199AD6D}" 32 HKCR\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\ 32 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\ 32 HKCR\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page" 32 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\ 32 HKCR\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page" ---------------------------------------------------------------------- 32 HKCU\Software\Classes\*\ 32 HKCU\Software\Classes\*: "AlwaysShowExt" is REG_SZ: "" 32 HKCU\Software\Classes\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 32 HKCU\Software\Classes\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size" 32 HKCU\Software\Classes\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size" 32 HKCU\Software\Classes\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta" 32 HKCU\Software\Classes\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta" 32 HKCU\Software\Classes\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 32 HKCU\Software\Classes\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 32 HKCU\Software\Classes\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCU\Software\Classes\*: "NoRecentDocs" is REG_SZ: "" 32 HKCU\Software\Classes\*: "NoStaticDefaultVerb" is REG_SZ: "" 32 HKCU\Software\Classes\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 32 HKCU\Software\Classes\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 32 HKCU\Software\Classes\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCU\Software\Classes\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 32 HKCU\Software\Classes\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCU\Software\Classes\*\OpenWithProgids\ 32 HKCU\Software\Classes\*\OpenWithProgids: "AppXkv2jqn1pq8ajm0p5dhgqde7aafykkrrn" is REG_NONE 32 HKCU\Software\Classes\*\shellex\ 32 HKCU\Software\Classes\*\shellex\ContextMenuHandlers\ ---------------------------------------------------------------------- 32 HKLM\Software\Classes\*\ 32 HKLM\Software\Classes\*: "AlwaysShowExt" is REG_SZ: "" 32 HKLM\Software\Classes\*: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 32 HKLM\Software\Classes\*: "ContentViewModeForBrowse" is REG_SZ: "prop:~System.ItemNameDisplay;System.ItemTypeText;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified;System.Size" 32 HKLM\Software\Classes\*: "ContentViewModeForSearch" is REG_SZ: "prop:~System.ItemNameDisplay;~System.ItemFolderPathDisplay;~System.LayoutPattern.PlaceHolder;System.ItemTypeText;System.DateModified;System.Size" 32 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForBrowse" is REG_SZ: "delta" 32 HKLM\Software\Classes\*: "ContentViewModeLayoutPatternForSearch" is REG_SZ: "delta" 32 HKLM\Software\Classes\*: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 32 HKLM\Software\Classes\*: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 32 HKLM\Software\Classes\*: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKLM\Software\Classes\*: "NoRecentDocs" is REG_SZ: "" 32 HKLM\Software\Classes\*: "NoStaticDefaultVerb" is REG_SZ: "" 32 HKLM\Software\Classes\*: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 32 HKLM\Software\Classes\*: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 32 HKLM\Software\Classes\*: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKLM\Software\Classes\*: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 32 HKLM\Software\Classes\*: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKLM\Software\Classes\*\OpenWithList\ 32 HKLM\Software\Classes\*\OpenWithList\Excel.exe\ 32 HKLM\Software\Classes\*\OpenWithList\IExplore.exe\ 32 HKLM\Software\Classes\*\OpenWithList\NoteTab.exe\ 32 HKLM\Software\Classes\*\OpenWithList\Winword.exe\ 32 HKLM\Software\Classes\*\shell\ 32 HKLM\Software\Classes\*\shell\ANotepad++64\ 32 HKLM\Software\Classes\*\shell\ANotepad++64: "" is REG_SZ: "Notepad++ Context menu" 32 HKLM\Software\Classes\*\shell\ANotepad++64: "ExplorerCommandHandler" is REG_SZ: "{B298D29A-A6ED-11DE-BA8C-A68E55D89593}" 32 HKLM\Software\Classes\*\shell\ANotepad++64: "NeverDefault" is REG_SZ: "" 32 HKLM\Software\Classes\*\shell\ANotepad++64: "HideBasedOnVelocityId" is REG_DWORD: 6527944 (0x639bc8) 32 HKLM\Software\Classes\*\shell\ANotepad++64: "LegacyDisable" is REG_SZ: "" 32 HKLM\Software\Classes\*\shell\ANotepad++64: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKLM\Software\Classes\*\shell\pintohomefile\ 32 HKLM\Software\Classes\*\shell\pintohomefile: "CommandStateHandler" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 32 HKLM\Software\Classes\*\shell\pintohomefile: "CommandStateSync" is REG_SZ: "" 32 HKLM\Software\Classes\*\shell\pintohomefile: "MUIVerb" is REG_SZ: "@shell32.dll,-51608" --> "Add to &Favorites" 32 HKLM\Software\Classes\*\shell\pintohomefile: "NeverDefault" is REG_SZ: "" 32 HKLM\Software\Classes\*\shell\pintohomefile: "SkipCloudDownload" is REG_DWORD: 0 (0x0) 32 HKLM\Software\Classes\*\shell\pintohomefile: "LegacyDisable" is REG_SZ: "" 32 HKLM\Software\Classes\*\shell\pintohomefile\command\ 32 HKLM\Software\Classes\*\shell\pintohomefile\command: "DelegateExecute" is REG_SZ: "{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}" 32 HKLM\Software\Classes\*\shell\removeproperties\ 32 HKLM\Software\Classes\*\shell\removeproperties: "ProgrammaticAccessOnly" is REG_SZ: "Apartment" 32 HKLM\Software\Classes\*\shell\removeproperties\DropTarget\ 32 HKLM\Software\Classes\*\shell\removeproperties\DropTarget: "CLSID" is REG_SZ: "{09a28848-0e97-4cef-b950-cea037161155}" 32 HKLM\Software\Classes\*\shell\RunAs\ 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\ 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "AppliesTo" is REG_SZ: "System.StorageProviderId:<>"network" AND System.StorageProviderProtectionMode:<>1 AND System.StorageProviderProtectionMode:<>2" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "AttributeMask" is REG_DWORD: 8192 (0x2000) 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "AttributeValue" is REG_DWORD: 8192 (0x2000) 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "ExtendedSubCommandsKey" is REG_SZ: "*\shell\UpdateEncryptionSettingsWork" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "ImpliedSelectionModel" is REG_DWORD: 0 (0x0) 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "MUIVerb" is REG_SZ: "@efscore.dll,-101" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "MultiSelectModel" is REG_SZ: "Player" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork: "Position" is REG_SZ: "Bottom" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\ 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\ 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeMask" is REG_DWORD: 8192 (0x2000) 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "AttributeValue" is REG_DWORD: 8192 (0x2000) 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "CommandStateHandler" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "Icon" is REG_SZ: "edputil.dll,-1002" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "MUIVerb" is REG_SZ: "@efscore.dll,-103" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "ShowAsDisabledIfHidden" is REG_SZ: "" 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt: "UpdateType" is REG_DWORD: 0 (0x0) 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command\ 32 HKLM\Software\Classes\*\shell\UpdateEncryptionSettingsWork\Shell\Decrypt\command: "DelegateExecute" is REG_SZ: "{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}" 32 HKLM\Software\Classes\*\shellex\ 32 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\ 32 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\ FileSyncEx\ 32 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 32 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\7-Zip\ 32 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 32 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\SnagItMainShellExt\ 32 HKLM\Software\Classes\*\shellex\-ContextMenuHandlers\SnagItMainShellExt: "" is REG_SZ: "-{CF74B903-3389-469c-B3B6-0204D204FCBD}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ FileSyncEx\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ FileSyncEx: "" is REG_SZ: "{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\7-Zip\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\7-Zip: "" is REG_SZ: "{23170F69-40C1-278A-1000-000100020000}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\AccExt\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\AccExt: "" is REG_SZ: "{2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu: "" is REG_SZ: "[CC]{A6595CD1-BF77-430A-A452-18696685F7C7}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\DropboxExt: "" is REG_SZ: "{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\EPP\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\EPP: "" is REG_SZ: "{09A47860-11B0-4DA5-AFA5-26D86198A780}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With: "" is REG_SZ: "{09799AFB-AD67-11d1-ABCD-00C04FC30936}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Open With EncryptionMenu: "" is REG_SZ: "{A470F8CF-A1E8-4f65-8335-227475AA5C46}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ReflectShellExt\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ReflectShellExt: "" is REG_SZ: "[CC]{DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\Sharing: "" is REG_SZ: "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WorkFolders\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\WorkFolders: "" is REG_SZ: "{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{90AA3A4E-1CBA-4233-B8BB-535773D48449}: "" is REG_SZ: "Taskband Pin" 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 32 HKLM\Software\Classes\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\ 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu\ 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\CryptoSignMenu: "" is REG_SZ: "{7444C719-39BF-11D1-8CD9-00C04FC29D45}" 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\FCI Properties\ 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\FCI Properties: "" is REG_SZ: "{748F920F-FB24-4D09-B360-BAF6F199AD6D}" 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\ 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\ 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}: "" is REG_SZ: "OLE DocFile Property Page" 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}\ 32 HKLM\Software\Classes\*\shellex\PropertySheetHandlers\{883373C3-BF89-11D1-BE35-080036B11A03}: "" is REG_SZ: "Summary Properties Page" ********************************************************************** 64 HKCR\AllFilesystemObjects\ 64 HKCR\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 64 HKCR\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 64 HKCR\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 64 HKCR\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCR\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: "" 64 HKCR\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: "" 64 HKCR\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 64 HKCR\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 64 HKCR\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCR\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 64 HKCR\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKCR\AllFilesystemObjects\shell\ 64 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl\ 64 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\WorkfoldersControl.dll,-1" 64 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command\ 64 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command: "DelegateExecute" is REG_SZ: "{47405ACE-008F-43AB-B6F0-91875029ADC7}" 64 HKCR\AllFilesystemObjects\shell\ModernProperties\ 64 HKCR\AllFilesystemObjects\shell\ModernProperties: "ManagerType" is REG_SZ: "FileSystemObject" 64 HKCR\AllFilesystemObjects\shell\ModernProperties: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKCR\AllFilesystemObjects\shell\ModernProperties\command\ 64 HKCR\AllFilesystemObjects\shell\ModernProperties\command: "DelegateExecute" is REG_SZ: "{C2F0A74D-5B89-4F1C-8D6E-2A9B7E4F1C03}" 64 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\ 64 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\cscui.dll,-7006" 64 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command\ 64 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command: "DelegateExecute" is REG_SZ: "{815509B5-2940-4287-83DD-13EA06E181DD}" 64 HKCR\AllFilesystemObjects\shellex\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyToFolder\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}" 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing: "" is REG_SZ: "{e2bf9676-5f8f-435c-97eb-11607a5bedf7}" 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MoveToFolder\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}" 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 64 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 64 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\ 64 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 64 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\ ---------------------------------------------------------------------- 64 HKCU\Software\Classes\AllFilesystemObjects\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Classes\AllFilesystemObjects\ 64 HKLM\Software\Classes\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 64 HKLM\Software\Classes\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 64 HKLM\Software\Classes\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 64 HKLM\Software\Classes\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKLM\Software\Classes\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: "" 64 HKLM\Software\Classes\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: "" 64 HKLM\Software\Classes\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 64 HKLM\Software\Classes\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 64 HKLM\Software\Classes\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKLM\Software\Classes\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 64 HKLM\Software\Classes\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\ 64 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl\ 64 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\WorkfoldersControl.dll,-1" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command\ 64 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command: "DelegateExecute" is REG_SZ: "{47405ACE-008F-43AB-B6F0-91875029ADC7}" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties\ 64 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties: "ManagerType" is REG_SZ: "FileSystemObject" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties\command\ 64 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties\command: "DelegateExecute" is REG_SZ: "{C2F0A74D-5B89-4F1C-8D6E-2A9B7E4F1C03}" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\ 64 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\cscui.dll,-7006" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "ProgrammaticAccessOnly" is REG_SZ: "" 64 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command\ 64 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command: "DelegateExecute" is REG_SZ: "{815509B5-2940-4287-83DD-13EA06E181DD}" 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyToFolder\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}" 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing: "" is REG_SZ: "{e2bf9676-5f8f-435c-97eb-11607a5bedf7}" 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MoveToFolder\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}" 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 64 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\ ********************************************************************** 32 HKCR\AllFilesystemObjects\ 32 HKCR\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 32 HKCR\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 32 HKCR\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 32 HKCR\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCR\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: "" 32 HKCR\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: "" 32 HKCR\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 32 HKCR\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 32 HKCR\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCR\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 32 HKCR\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKCR\AllFilesystemObjects\shell\ 32 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl\ 32 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\WorkfoldersControl.dll,-1" 32 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command\ 32 HKCR\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command: "DelegateExecute" is REG_SZ: "{47405ACE-008F-43AB-B6F0-91875029ADC7}" 32 HKCR\AllFilesystemObjects\shell\ModernProperties\ 32 HKCR\AllFilesystemObjects\shell\ModernProperties: "ManagerType" is REG_SZ: "FileSystemObject" 32 HKCR\AllFilesystemObjects\shell\ModernProperties: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKCR\AllFilesystemObjects\shell\ModernProperties\command\ 32 HKCR\AllFilesystemObjects\shell\ModernProperties\command: "DelegateExecute" is REG_SZ: "{C2F0A74D-5B89-4F1C-8D6E-2A9B7E4F1C03}" 32 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\ 32 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\cscui.dll,-7006" 32 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command\ 32 HKCR\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command: "DelegateExecute" is REG_SZ: "{815509B5-2940-4287-83DD-13EA06E181DD}" 32 HKCR\AllFilesystemObjects\shellex\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyToFolder\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}" 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing: "" is REG_SZ: "{e2bf9676-5f8f-435c-97eb-11607a5bedf7}" 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\MoveToFolder\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}" 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 32 HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 32 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\ 32 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 32 HKCR\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\ ---------------------------------------------------------------------- 32 HKCU\Software\Classes\AllFilesystemObjects\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Classes\AllFilesystemObjects\ 32 HKLM\Software\Classes\AllFilesystemObjects: "ConflictPrompt" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.DateCreated" 32 HKLM\Software\Classes\AllFilesystemObjects: "ExtendedTileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified;System.OfflineAvailability" 32 HKLM\Software\Classes\AllFilesystemObjects: "FullDetails" is REG_SZ: "prop:System.PropGroup.FileSystem;System.ItemNameDisplay;System.ItemTypeText;System.ItemFolderPathDisplay;System.Size;System.DateCreated;System.DateModified;System.FileAttributes;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith;*System.FileOwner;*System.ComputerName" 32 HKLM\Software\Classes\AllFilesystemObjects: "InfoTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKLM\Software\Classes\AllFilesystemObjects: "NoRecentDocs" is REG_SZ: "" 32 HKLM\Software\Classes\AllFilesystemObjects: "NoStaticDefaultVerb" is REG_SZ: "" 32 HKLM\Software\Classes\AllFilesystemObjects: "PreviewDetails" is REG_SZ: "prop:System.DateModified;System.Size;System.DateCreated;*System.StorageProviderState;*System.OfflineAvailability;*System.OfflineStatus;*System.SharedWith" 32 HKLM\Software\Classes\AllFilesystemObjects: "PreviewTitle" is REG_SZ: "prop:System.ItemNameDisplay;System.ItemTypeText" 32 HKLM\Software\Classes\AllFilesystemObjects: "QuickTip" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKLM\Software\Classes\AllFilesystemObjects: "SetDefaultsFor" is REG_SZ: "prop:System.Author;System.Document.DateCreated" 32 HKLM\Software\Classes\AllFilesystemObjects: "TileInfo" is REG_SZ: "prop:System.ItemTypeText;System.Size;System.DateModified" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\ 32 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl\ 32 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\WorkfoldersControl.dll,-1" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command\ 32 HKLM\Software\Classes\AllFilesystemObjects\shell\LaunchWorkfoldersControl\command: "DelegateExecute" is REG_SZ: "{47405ACE-008F-43AB-B6F0-91875029ADC7}" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties\ 32 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties: "ManagerType" is REG_SZ: "FileSystemObject" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties\command\ 32 HKLM\Software\Classes\AllFilesystemObjects\shell\ModernProperties\command: "DelegateExecute" is REG_SZ: "{C2F0A74D-5B89-4F1C-8D6E-2A9B7E4F1C03}" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\ 32 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "MuiVerb" is REG_SZ: "@%SystemRoot%\system32\cscui.dll,-7006" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter: "ProgrammaticAccessOnly" is REG_SZ: "" 32 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command\ 32 HKLM\Software\Classes\AllFilesystemObjects\shell\OfflineFilesLaunchSyncCenter\command: "DelegateExecute" is REG_SZ: "{815509B5-2940-4287-83DD-13EA06E181DD}" 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\CopyToFolder\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt: "" is REG_SZ: "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}" 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing: "" is REG_SZ: "{e2bf9676-5f8f-435c-97eb-11607a5bedf7}" 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MoveToFolder\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo: "" is REG_SZ: "{7BA4C740-9E81-11CF-99D3-00AA004AE837}" 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}: "" is REG_SZ: "Start Menu Pin" 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}\ 32 HKLM\Software\Classes\AllFilesystemObjects\shellex\PropertySheetHandlers\{7EFA68C6-086B-43e1-A2D2-55A113531240}\ ********************************************************************** 64 HKCR\.rtf\ -- Does not exist ---------------------------------------------------------------------- 64 HKCU\Software\Classes\.rtf\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Classes\.rtf\ -- Does not exist ====================================================================== 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\ 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList\ 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "a" is REG_SZ: "WORDPAD.EXE" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "MRUList" is REG_SZ: "afdegcb" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "b" is REG_SZ: "a" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "c" is REG_SZ: "Acrobat.exe" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "d" is REG_SZ: "EXCEL.EXE" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "e" is REG_SZ: "WINWORD.EXE" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "f" is REG_SZ: "Microsoft.WindowsNotepad_8wekyb3d8bbwe!App" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "g" is REG_SZ: "notepad++.exe" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids\ 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids: "rtffile" is REG_NONE 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids: "rtf_auto_file" is REG_NONE 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids: "Word.RTF.8" is REG_NONE 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\UserChoice\ 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\UserChoice: "ProgId" is REG_SZ: "Applications\WORDPAD.EXE" 64 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\UserChoice: "Hash" is REG_SZ: "Lal7E3j9Z1s=" ---------------------------------------------------------------------- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\ -- Does not exist ====================================================================== 64 HKCR\SystemFileAssociations\.rtf\ 64 HKCR\SystemFileAssociations\.rtf: "PerceivedType" is REG_SZ: "document" 64 HKCR\SystemFileAssociations\.rtf\ShellEx\ 64 HKCR\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}\ 64 HKCR\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}: "" is REG_SZ: "{a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}" ---------------------------------------------------------------------- 64 HKCU\Software\Classes\SystemFileAssociations\.rtf\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Classes\SystemFileAssociations\.rtf\ 64 HKLM\Software\Classes\SystemFileAssociations\.rtf: "PerceivedType" is REG_SZ: "document" 64 HKLM\Software\Classes\SystemFileAssociations\.rtf\ShellEx\ 64 HKLM\Software\Classes\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}\ 64 HKLM\Software\Classes\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}: "" is REG_SZ: "{a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}" ====================================================================== 64 HKCR\Applications\WORDPAD.EXE\ 64 HKCR\Applications\WORDPAD.EXE: "FriendlyAppName" is REG_SZ: "Wordpad" 64 HKCR\Applications\WORDPAD.EXE\shell\ 64 HKCR\Applications\WORDPAD.EXE\shell\open\ 64 HKCR\Applications\WORDPAD.EXE\shell\open\command\ 64 HKCR\Applications\WORDPAD.EXE\shell\open\command: "" is REG_SZ: ""C:\Program Files\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 64 HKCU\Software\Classes\Applications\WORDPAD.EXE\ 64 HKCU\Software\Classes\Applications\WORDPAD.EXE: "FriendlyAppName" is REG_SZ: "Wordpad" 64 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\ 64 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\open\ 64 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\open\command\ 64 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\open\command: "" is REG_SZ: ""C:\Program Files\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 64 HKLM\Software\Classes\Applications\WORDPAD.EXE\ -- Does not exist ====================================================================== 64 HKCR\rtffile\ -- Does not exist ---------------------------------------------------------------------- 64 HKCU\Software\Classes\rtffile\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Classes\rtffile\ -- Does not exist ====================================================================== 64 HKCR\rtf_auto_file\ 64 HKCR\rtf_auto_file\shell\ 64 HKCR\rtf_auto_file\shell\open\ 64 HKCR\rtf_auto_file\shell\open\command\ 64 HKCR\rtf_auto_file\shell\open\command: "" is REG_SZ: ""C:\Program Files\Windows NT\Accessories\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 64 HKCU\Software\Classes\rtf_auto_file\ 64 HKCU\Software\Classes\rtf_auto_file\shell\ 64 HKCU\Software\Classes\rtf_auto_file\shell\open\ 64 HKCU\Software\Classes\rtf_auto_file\shell\open\command\ 64 HKCU\Software\Classes\rtf_auto_file\shell\open\command: "" is REG_SZ: ""C:\Program Files\Windows NT\Accessories\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 64 HKLM\Software\Classes\rtf_auto_file\ -- Does not exist ====================================================================== 64 HKCR\Word.RTF.8\ 64 HKCR\Word.RTF.8: "" is REG_SZ: "Rich Text Format" 64 HKCR\Word.RTF.8: "FriendlyTypeName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-131" --> "Rich Text Format" 64 HKCR\Word.RTF.8: "EditFlags" is REG_DWORD: 0 (0x0) 64 HKCR\Word.RTF.8: "BrowserFlags" is REG_DWORD: 44 (0x2c) 64 HKCR\Word.RTF.8\CLSID\ 64 HKCR\Word.RTF.8\CLSID: "" is REG_SZ: "{00020906-0000-0000-C000-000000000046}" 64 HKCR\Word.RTF.8\DefaultIcon\ 64 HKCR\Word.RTF.8\DefaultIcon: "" is REG_SZ: "C:\Program Files\Microsoft Office\Root\VFS\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\wordicon.exe,1" 64 HKCR\Word.RTF.8\shell\ 64 HKCR\Word.RTF.8\shell: "" is REG_SZ: "Open" 64 HKCR\Word.RTF.8\shell\Edit\ 64 HKCR\Word.RTF.8\shell\Edit: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-1" --> "&Edit" 64 HKCR\Word.RTF.8\shell\Edit\command\ 64 HKCR\Word.RTF.8\shell\Edit\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vu "%1"" 64 HKCR\Word.RTF.8\shell\New\ 64 HKCR\Word.RTF.8\shell\New: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-2" --> "&New" 64 HKCR\Word.RTF.8\shell\New\command\ 64 HKCR\Word.RTF.8\shell\New\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n /f "%1"" 64 HKCR\Word.RTF.8\shell\OnenotePrintto\ 64 HKCR\Word.RTF.8\shell\OnenotePrintto: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 64 HKCR\Word.RTF.8\shell\OnenotePrintto: "Extended" is REG_SZ: "" 64 HKCR\Word.RTF.8\shell\OnenotePrintto\command\ 64 HKCR\Word.RTF.8\shell\OnenotePrintto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 64 HKCR\Word.RTF.8\shell\Open\ 64 HKCR\Word.RTF.8\shell\Open: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-3" --> "&Open" 64 HKCR\Word.RTF.8\shell\Open\command\ 64 HKCR\Word.RTF.8\shell\Open\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "%1" /o "%u"" 64 HKCR\Word.RTF.8\shell\Print\ 64 HKCR\Word.RTF.8\shell\Print: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 64 HKCR\Word.RTF.8\shell\Print\command\ 64 HKCR\Word.RTF.8\shell\Print\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /i "%1"" 64 HKCR\Word.RTF.8\shell\Printto\ 64 HKCR\Word.RTF.8\shell\Printto\command\ 64 HKCR\Word.RTF.8\shell\Printto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 64 HKCR\Word.RTF.8\shell\ViewProtected\ 64 HKCR\Word.RTF.8\shell\ViewProtected: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-11" --> "Open in Protected &View" 64 HKCR\Word.RTF.8\shell\ViewProtected: "Extended" is REG_SZ: "" 64 HKCR\Word.RTF.8\shell\ViewProtected\command\ 64 HKCR\Word.RTF.8\shell\ViewProtected\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vp "%1"" ---------------------------------------------------------------------- 64 HKCU\Software\Classes\Word.RTF.8\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Classes\Word.RTF.8\ 64 HKLM\Software\Classes\Word.RTF.8: "" is REG_SZ: "Rich Text Format" 64 HKLM\Software\Classes\Word.RTF.8: "FriendlyTypeName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-131" --> "Rich Text Format" 64 HKLM\Software\Classes\Word.RTF.8: "EditFlags" is REG_DWORD: 0 (0x0) 64 HKLM\Software\Classes\Word.RTF.8: "BrowserFlags" is REG_DWORD: 44 (0x2c) 64 HKLM\Software\Classes\Word.RTF.8\CLSID\ 64 HKLM\Software\Classes\Word.RTF.8\CLSID: "" is REG_SZ: "{00020906-0000-0000-C000-000000000046}" 64 HKLM\Software\Classes\Word.RTF.8\DefaultIcon\ 64 HKLM\Software\Classes\Word.RTF.8\DefaultIcon: "" is REG_SZ: "C:\Program Files\Microsoft Office\Root\VFS\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\wordicon.exe,1" 64 HKLM\Software\Classes\Word.RTF.8\shell\ 64 HKLM\Software\Classes\Word.RTF.8\shell: "" is REG_SZ: "Open" 64 HKLM\Software\Classes\Word.RTF.8\shell\Edit\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Edit: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-1" --> "&Edit" 64 HKLM\Software\Classes\Word.RTF.8\shell\Edit\command\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Edit\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vu "%1"" 64 HKLM\Software\Classes\Word.RTF.8\shell\New\ 64 HKLM\Software\Classes\Word.RTF.8\shell\New: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-2" --> "&New" 64 HKLM\Software\Classes\Word.RTF.8\shell\New\command\ 64 HKLM\Software\Classes\Word.RTF.8\shell\New\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n /f "%1"" 64 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto\ 64 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 64 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto: "Extended" is REG_SZ: "" 64 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto\command\ 64 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 64 HKLM\Software\Classes\Word.RTF.8\shell\Open\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Open: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-3" --> "&Open" 64 HKLM\Software\Classes\Word.RTF.8\shell\Open\command\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Open\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "%1" /o "%u"" 64 HKLM\Software\Classes\Word.RTF.8\shell\Print\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Print: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 64 HKLM\Software\Classes\Word.RTF.8\shell\Print\command\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Print\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /i "%1"" 64 HKLM\Software\Classes\Word.RTF.8\shell\Printto\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Printto\command\ 64 HKLM\Software\Classes\Word.RTF.8\shell\Printto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 64 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected\ 64 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-11" --> "Open in Protected &View" 64 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected: "Extended" is REG_SZ: "" 64 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected\command\ 64 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vp "%1"" ********************************************************************** 32 HKCR\.rtf\ -- Does not exist ---------------------------------------------------------------------- 32 HKCU\Software\Classes\.rtf\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Classes\.rtf\ -- Does not exist ====================================================================== 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\ 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList\ 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "a" is REG_SZ: "WORDPAD.EXE" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "MRUList" is REG_SZ: "afdegcb" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "b" is REG_SZ: "a" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "c" is REG_SZ: "Acrobat.exe" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "d" is REG_SZ: "EXCEL.EXE" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "e" is REG_SZ: "WINWORD.EXE" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "f" is REG_SZ: "Microsoft.WindowsNotepad_8wekyb3d8bbwe!App" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList: "g" is REG_SZ: "notepad++.exe" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids\ 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids: "rtffile" is REG_NONE 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids: "rtf_auto_file" is REG_NONE 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids: "Word.RTF.8" is REG_NONE 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\UserChoice\ 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\UserChoice: "ProgId" is REG_SZ: "Applications\WORDPAD.EXE" 32 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\UserChoice: "Hash" is REG_SZ: "Lal7E3j9Z1s=" ---------------------------------------------------------------------- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\ -- Does not exist ====================================================================== 32 HKCR\SystemFileAssociations\.rtf\ 32 HKCR\SystemFileAssociations\.rtf: "PerceivedType" is REG_SZ: "document" 32 HKCR\SystemFileAssociations\.rtf\ShellEx\ 32 HKCR\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}\ 32 HKCR\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}: "" is REG_SZ: "{a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}" ---------------------------------------------------------------------- 32 HKCU\Software\Classes\SystemFileAssociations\.rtf\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Classes\SystemFileAssociations\.rtf\ 32 HKLM\Software\Classes\SystemFileAssociations\.rtf: "PerceivedType" is REG_SZ: "document" 32 HKLM\Software\Classes\SystemFileAssociations\.rtf\ShellEx\ 32 HKLM\Software\Classes\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}\ 32 HKLM\Software\Classes\SystemFileAssociations\.rtf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}: "" is REG_SZ: "{a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}" ====================================================================== 32 HKCR\Applications\WORDPAD.EXE\ 32 HKCR\Applications\WORDPAD.EXE: "FriendlyAppName" is REG_SZ: "Wordpad" 32 HKCR\Applications\WORDPAD.EXE\shell\ 32 HKCR\Applications\WORDPAD.EXE\shell\open\ 32 HKCR\Applications\WORDPAD.EXE\shell\open\command\ 32 HKCR\Applications\WORDPAD.EXE\shell\open\command: "" is REG_SZ: ""C:\Program Files\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 32 HKCU\Software\Classes\Applications\WORDPAD.EXE\ 32 HKCU\Software\Classes\Applications\WORDPAD.EXE: "FriendlyAppName" is REG_SZ: "Wordpad" 32 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\ 32 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\open\ 32 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\open\command\ 32 HKCU\Software\Classes\Applications\WORDPAD.EXE\shell\open\command: "" is REG_SZ: ""C:\Program Files\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 32 HKLM\Software\Classes\Applications\WORDPAD.EXE\ -- Does not exist ====================================================================== 32 HKCR\rtffile\ -- Does not exist ---------------------------------------------------------------------- 32 HKCU\Software\Classes\rtffile\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Classes\rtffile\ -- Does not exist ====================================================================== 32 HKCR\rtf_auto_file\ 32 HKCR\rtf_auto_file\shell\ 32 HKCR\rtf_auto_file\shell\open\ 32 HKCR\rtf_auto_file\shell\open\command\ 32 HKCR\rtf_auto_file\shell\open\command: "" is REG_SZ: ""C:\Program Files\Windows NT\Accessories\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 32 HKCU\Software\Classes\rtf_auto_file\ 32 HKCU\Software\Classes\rtf_auto_file\shell\ 32 HKCU\Software\Classes\rtf_auto_file\shell\open\ 32 HKCU\Software\Classes\rtf_auto_file\shell\open\command\ 32 HKCU\Software\Classes\rtf_auto_file\shell\open\command: "" is REG_SZ: ""C:\Program Files\Windows NT\Accessories\WordPad\wordpad.exe" "%1"" ---------------------------------------------------------------------- 32 HKLM\Software\Classes\rtf_auto_file\ -- Does not exist ====================================================================== 32 HKCR\Word.RTF.8\ 32 HKCR\Word.RTF.8: "" is REG_SZ: "Rich Text Format" 32 HKCR\Word.RTF.8: "FriendlyTypeName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-131" --> "Rich Text Format" 32 HKCR\Word.RTF.8: "EditFlags" is REG_DWORD: 0 (0x0) 32 HKCR\Word.RTF.8: "BrowserFlags" is REG_DWORD: 44 (0x2c) 32 HKCR\Word.RTF.8\CLSID\ 32 HKCR\Word.RTF.8\CLSID: "" is REG_SZ: "{00020906-0000-0000-C000-000000000046}" 32 HKCR\Word.RTF.8\DefaultIcon\ 32 HKCR\Word.RTF.8\DefaultIcon: "" is REG_SZ: "C:\Program Files\Microsoft Office\Root\VFS\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\wordicon.exe,1" 32 HKCR\Word.RTF.8\shell\ 32 HKCR\Word.RTF.8\shell: "" is REG_SZ: "Open" 32 HKCR\Word.RTF.8\shell\Edit\ 32 HKCR\Word.RTF.8\shell\Edit: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-1" --> "&Edit" 32 HKCR\Word.RTF.8\shell\Edit\command\ 32 HKCR\Word.RTF.8\shell\Edit\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vu "%1"" 32 HKCR\Word.RTF.8\shell\New\ 32 HKCR\Word.RTF.8\shell\New: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-2" --> "&New" 32 HKCR\Word.RTF.8\shell\New\command\ 32 HKCR\Word.RTF.8\shell\New\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n /f "%1"" 32 HKCR\Word.RTF.8\shell\OnenotePrintto\ 32 HKCR\Word.RTF.8\shell\OnenotePrintto: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 32 HKCR\Word.RTF.8\shell\OnenotePrintto: "Extended" is REG_SZ: "" 32 HKCR\Word.RTF.8\shell\OnenotePrintto\command\ 32 HKCR\Word.RTF.8\shell\OnenotePrintto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 32 HKCR\Word.RTF.8\shell\Open\ 32 HKCR\Word.RTF.8\shell\Open: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-3" --> "&Open" 32 HKCR\Word.RTF.8\shell\Open\command\ 32 HKCR\Word.RTF.8\shell\Open\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "%1" /o "%u"" 32 HKCR\Word.RTF.8\shell\Print\ 32 HKCR\Word.RTF.8\shell\Print: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 32 HKCR\Word.RTF.8\shell\Print\command\ 32 HKCR\Word.RTF.8\shell\Print\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /i "%1"" 32 HKCR\Word.RTF.8\shell\Printto\ 32 HKCR\Word.RTF.8\shell\Printto\command\ 32 HKCR\Word.RTF.8\shell\Printto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 32 HKCR\Word.RTF.8\shell\ViewProtected\ 32 HKCR\Word.RTF.8\shell\ViewProtected: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-11" --> "Open in Protected &View" 32 HKCR\Word.RTF.8\shell\ViewProtected: "Extended" is REG_SZ: "" 32 HKCR\Word.RTF.8\shell\ViewProtected\command\ 32 HKCR\Word.RTF.8\shell\ViewProtected\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vp "%1"" ---------------------------------------------------------------------- 32 HKCU\Software\Classes\Word.RTF.8\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Classes\Word.RTF.8\ 32 HKLM\Software\Classes\Word.RTF.8: "" is REG_SZ: "Rich Text Format" 32 HKLM\Software\Classes\Word.RTF.8: "FriendlyTypeName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-131" --> "Rich Text Format" 32 HKLM\Software\Classes\Word.RTF.8: "EditFlags" is REG_DWORD: 0 (0x0) 32 HKLM\Software\Classes\Word.RTF.8: "BrowserFlags" is REG_DWORD: 44 (0x2c) 32 HKLM\Software\Classes\Word.RTF.8\CLSID\ 32 HKLM\Software\Classes\Word.RTF.8\CLSID: "" is REG_SZ: "{00020906-0000-0000-C000-000000000046}" 32 HKLM\Software\Classes\Word.RTF.8\DefaultIcon\ 32 HKLM\Software\Classes\Word.RTF.8\DefaultIcon: "" is REG_SZ: "C:\Program Files\Microsoft Office\Root\VFS\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\wordicon.exe,1" 32 HKLM\Software\Classes\Word.RTF.8\shell\ 32 HKLM\Software\Classes\Word.RTF.8\shell: "" is REG_SZ: "Open" 32 HKLM\Software\Classes\Word.RTF.8\shell\Edit\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Edit: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-1" --> "&Edit" 32 HKLM\Software\Classes\Word.RTF.8\shell\Edit\command\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Edit\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vu "%1"" 32 HKLM\Software\Classes\Word.RTF.8\shell\New\ 32 HKLM\Software\Classes\Word.RTF.8\shell\New: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-2" --> "&New" 32 HKLM\Software\Classes\Word.RTF.8\shell\New\command\ 32 HKLM\Software\Classes\Word.RTF.8\shell\New\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n /f "%1"" 32 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto\ 32 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 32 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto: "Extended" is REG_SZ: "" 32 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto\command\ 32 HKLM\Software\Classes\Word.RTF.8\shell\OnenotePrintto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 32 HKLM\Software\Classes\Word.RTF.8\shell\Open\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Open: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-3" --> "&Open" 32 HKLM\Software\Classes\Word.RTF.8\shell\Open\command\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Open\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "%1" /o "%u"" 32 HKLM\Software\Classes\Word.RTF.8\shell\Print\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Print: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-5" --> "&Print" 32 HKLM\Software\Classes\Word.RTF.8\shell\Print\command\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Print\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /i "%1"" 32 HKLM\Software\Classes\Word.RTF.8\shell\Printto\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Printto\command\ 32 HKLM\Software\Classes\Word.RTF.8\shell\Printto\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /j "%1" "%2"" 32 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected\ 32 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected: "" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-11" --> "Open in Protected &View" 32 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected: "Extended" is REG_SZ: "" 32 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected\command\ 32 HKLM\Software\Classes\Word.RTF.8\shell\ViewProtected\command: "" is REG_SZ: ""C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /vp "%1"" ********************************************************************** HKLM RegisteredApplications ********************************************************************** 64 HKLM\SOFTWARE\RegisteredApplications\ 64 HKLM\SOFTWARE\RegisteredApplications: "File Explorer" is REG_SZ: "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Address Book" is REG_SZ: "Software\Clients\Contacts\Address Book\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Disc Image Burner" is REG_SZ: "Software\Microsoft\IsoBurn\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Search" is REG_SZ: "Software\Microsoft\Windows Search\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Photo Viewer" is REG_SZ: "Software\Microsoft\Windows Photo Viewer\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Wordpad" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Microsoft Edge" is REG_SZ: "Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Firefox-308046B0AF4A39CB" is REG_SZ: "Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "SnagIt.25" is REG_SZ: "SOFTWARE\TechSmith\SnagIt\25\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Family Tree Maker 2019" is REG_SZ: "SOFTWARE\Software MacKiev\Family Tree Maker 2019\24.1\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Adobe Acrobat DC" is REG_SZ: "Software\Adobe\Adobe Acrobat\DC\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "SketchUp 2017" is REG_SZ: "SOFTWARE\SketchUp\SketchUp 2017\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "LayOut 2017" is REG_SZ: "SOFTWARE\SketchUp\LayOut 2017\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Style Builder 2017" is REG_SZ: "SOFTWARE\SketchUp\Style Builder 2017\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Brave" is REG_SZ: "Software\Clients\StartMenuInternet\Brave\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "VLC" is REG_SZ: "Software\Clients\Media\VLC\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Windows Sandbox" is REG_SZ: "Software\Microsoft\Windows Sandbox\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Family Tree Maker 2024" is REG_SZ: "SOFTWARE\Software MacKiev\Family Tree Maker 2024\25.0\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "SnagIt" is REG_SZ: "SOFTWARE\TechSmith\SnagIt\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Google Chrome" is REG_SZ: "Software\Clients\StartMenuInternet\Google Chrome\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Access.Application.16" is REG_SZ: "SOFTWARE\Microsoft\Office\16.0\Access\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Excel.Application.16" is REG_SZ: "Software\Clients\Spreadsheet\Microsoft Excel\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "PowerPoint.Application.16" is REG_SZ: "Software\Clients\Presentation\Microsoft PowerPoint\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Outlook.Application.16" is REG_SZ: "Software\Microsoft\Office\16.0\Outlook\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Word.Application.16" is REG_SZ: "Software\Clients\Word Processing\Microsoft Word\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "OneNote.Application.16" is REG_SZ: "Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities" 64 HKLM\SOFTWARE\RegisteredApplications: "Lync.Application.15" is REG_SZ: "SOFTWARE\Microsoft\Office\15.0\Lync\Capabilities" ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\ 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6021" --> "@C:\WINDOWS\explorer.exe,-6021" --> "File Explorer allows you to handle your file management requirements." 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6020" --> "@C:\WINDOWS\explorer.exe,-6020" --> "File Explorer" 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities: "Hidden" is REG_DWORD: 0 (0x0) 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations\ 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations: "Explorer.BurnSelection" is REG_SZ: "Explorer.AssocActionId.BurnSelection" 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations: "Explorer.EraseDisc" is REG_SZ: "Explorer.AssocActionId.EraseDisc" 64 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations: "Explorer.ZipSelection" is REG_SZ: "Explorer.AssocActionId.ZipSelection" ---------------------------------------------------------------------- 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\ 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4606" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4606" --> "Windows Contacts allows you to store e-mail addresses and other information about people and organizations." 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4408" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4408" --> "Windows Contacts" 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".contact" is REG_SZ: "contact_wab_auto_file" 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".group" is REG_SZ: "group_wab_auto_file" 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".p7c" is REG_SZ: "certificate_wab_auto_file" 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".vcf" is REG_SZ: "vcard_wab_auto_file" 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations: "LDAP" is REG_SZ: "WAB.AssocProtocol.LDAP" ---------------------------------------------------------------------- 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\ 64 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-353" --> "@C:\WINDOWS\System32\isoburn.exe,-353" --> "Windows Disc Image Burner allows users to burn a CD or DVD from an ISO disc image file." 64 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-352" --> "@C:\WINDOWS\System32\isoburn.exe,-352" --> "Windows Disc Image Burner" 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations\ 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".img" is REG_SZ: "Windows.IsoFile" 64 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".iso" is REG_SZ: "Windows.IsoFile" ---------------------------------------------------------------------- 64 HKLM\Software\Microsoft\Windows Search\Capabilities\ 64 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6012" --> "@C:\WINDOWS\explorer.exe,-6012" --> "Windows Search Explorer allows you to quickly search for files and folders anywhere on your computer." 64 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6011" --> "@C:\WINDOWS\explorer.exe,-6011" --> "Windows Search Explorer" 64 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations\ 64 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations: "search" is REG_SZ: "Explorer.AssocProtocol.search-ms" ---------------------------------------------------------------------- 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\ 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationDescription" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3069" 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationName" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3009" 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations\ 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tif" is REG_SZ: "PhotoViewer.FileAssoc.Tiff" 64 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tiff" is REG_SZ: "PhotoViewer.FileAssoc.Tiff" ---------------------------------------------------------------------- 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\ 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-40128" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-40128" 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-57344" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-57344" 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations\ 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".docx" is REG_SZ: "docxfile" 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".odt" is REG_SZ: "odtfile" 64 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".rtf" is REG_SZ: "rtffile" ---------------------------------------------------------------------- 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\ 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities: "ApplicationDescription" is REG_SZ: "Microsoft Edge is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Microsoft Edge." 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe,0" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities: "ApplicationName" is REG_SZ: "Microsoft Edge" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".htm" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".html" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".shtml" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".svg" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".xht" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".webp" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".xml" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".pdf" is REG_SZ: "MSEdgePDF" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".mht" is REG_SZ: "MSEdgeMHT" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "MSEdgeMHT" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\Startmenu\ 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Microsoft Edge" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "ftp" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "http" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "https" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "irc" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "mailto" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "mms" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "news" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "nntp" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "read" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "sms" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "smsto" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "snews" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "tel" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "urn" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "webcal" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "microsoft-edge" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "microsoft-edge-holographic" is REG_SZ: "MSEdgeHTM" 64 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "ms-xbl-3d8b930f" is REG_SZ: "MSEdgeHTM" ---------------------------------------------------------------------- 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\ 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities: "ApplicationDescription" is REG_SZ: "Firefox delivers safe, easy web browsing. A familiar user interface, enhanced security features including protection from online identity theft, and integrated search let you get the most out of the web." 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files\Mozilla Firefox\firefox.exe,0" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities: "ApplicationName" is REG_SZ: "Firefox" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".htm" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".html" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".shtml" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".xht" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".svg" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".webp" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".avif" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".pdf" is REG_SZ: "FirefoxPDF-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\StartMenu\ 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\StartMenu: "StartMenuInternet" is REG_SZ: "Firefox-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations: "http" is REG_SZ: "FirefoxURL-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations: "https" is REG_SZ: "FirefoxURL-308046B0AF4A39CB" 64 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations: "mailto" is REG_SZ: "FirefoxURL-308046B0AF4A39CB" ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\TechSmith\SnagIt\25\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\Software MacKiev\Family Tree Maker 2019\24.1\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\ ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\SketchUp\SketchUp 2017\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\SketchUp\LayOut 2017\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\SketchUp\Style Builder 2017\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\ 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities: "ApplicationDescription" is REG_SZ: "Brave is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Brave." 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe,0" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities: "ApplicationName" is REG_SZ: "Brave" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".htm" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".html" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".pdf" is REG_SZ: "BravePDF" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".shtml" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".svg" is REG_SZ: "BraveFile" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".xht" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".webp" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\Startmenu\ 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Brave" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "http" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "https" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "irc" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "mailto" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "mms" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "news" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "nntp" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "sms" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "smsto" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "snews" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "tel" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "urn" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "webcal" is REG_SZ: "BraveHTML" 64 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "brave-browser" is REG_SZ: "BraveHTML" ---------------------------------------------------------------------- 64 HKLM\Software\Clients\Media\VLC\Capabilities\ 64 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationName" is REG_SZ: "VLC media player" 64 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationDescription" is REG_SZ: "VLC - The video swiss knife" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3ga" is REG_SZ: "VLC.3ga" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".669" is REG_SZ: "VLC.669" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".a52" is REG_SZ: "VLC.a52" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aac" is REG_SZ: "VLC.aac" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ac3" is REG_SZ: "VLC.ac3" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adt" is REG_SZ: "VLC.adt" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adts" is REG_SZ: "VLC.adts" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aif" is REG_SZ: "VLC.aif" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aifc" is REG_SZ: "VLC.aifc" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aiff" is REG_SZ: "VLC.aiff" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".au" is REG_SZ: "VLC.au" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amr" is REG_SZ: "VLC.amr" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aob" is REG_SZ: "VLC.aob" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ape" is REG_SZ: "VLC.ape" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".caf" is REG_SZ: "VLC.caf" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cda" is REG_SZ: "VLC.cda" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dts" is REG_SZ: "VLC.dts" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flac" is REG_SZ: "VLC.flac" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".it" is REG_SZ: "VLC.it" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4a" is REG_SZ: "VLC.m4a" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4p" is REG_SZ: "VLC.m4p" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mid" is REG_SZ: "VLC.mid" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mka" is REG_SZ: "VLC.mka" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mlp" is REG_SZ: "VLC.mlp" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mod" is REG_SZ: "VLC.mod" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp1" is REG_SZ: "VLC.mp1" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2" is REG_SZ: "VLC.mp2" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp3" is REG_SZ: "VLC.mp3" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpc" is REG_SZ: "VLC.mpc" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpga" is REG_SZ: "VLC.mpga" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oga" is REG_SZ: "VLC.oga" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oma" is REG_SZ: "VLC.oma" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".opus" is REG_SZ: "VLC.opus" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".qcp" is REG_SZ: "VLC.qcp" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ra" is REG_SZ: "VLC.ra" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmi" is REG_SZ: "VLC.rmi" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".snd" is REG_SZ: "VLC.snd" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".s3m" is REG_SZ: "VLC.s3m" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".spx" is REG_SZ: "VLC.spx" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tta" is REG_SZ: "VLC.tta" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".voc" is REG_SZ: "VLC.voc" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vqf" is REG_SZ: "VLC.vqf" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".w64" is REG_SZ: "VLC.w64" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wav" is REG_SZ: "VLC.wav" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wma" is REG_SZ: "VLC.wma" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wv" is REG_SZ: "VLC.wv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xa" is REG_SZ: "VLC.xa" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xm" is REG_SZ: "VLC.xm" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3g2" is REG_SZ: "VLC.3g2" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp" is REG_SZ: "VLC.3gp" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp2" is REG_SZ: "VLC.3gp2" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gpp" is REG_SZ: "VLC.3gpp" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amv" is REG_SZ: "VLC.amv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asf" is REG_SZ: "VLC.asf" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".avi" is REG_SZ: "VLC.avi" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".bik" is REG_SZ: "VLC.bik" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".divx" is REG_SZ: "VLC.divx" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".drc" is REG_SZ: "VLC.drc" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dv" is REG_SZ: "VLC.dv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dvr-ms" is REG_SZ: "VLC.dvr-ms" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".evo" is REG_SZ: "VLC.evo" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".f4v" is REG_SZ: "VLC.f4v" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flv" is REG_SZ: "VLC.flv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gvi" is REG_SZ: "VLC.gvi" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gxf" is REG_SZ: "VLC.gxf" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m1v" is REG_SZ: "VLC.m1v" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2t" is REG_SZ: "VLC.m2t" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2v" is REG_SZ: "VLC.m2v" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2ts" is REG_SZ: "VLC.m2ts" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4v" is REG_SZ: "VLC.m4v" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mkv" is REG_SZ: "VLC.mkv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mov" is REG_SZ: "VLC.mov" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2v" is REG_SZ: "VLC.mp2v" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4" is REG_SZ: "VLC.mp4" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4v" is REG_SZ: "VLC.mp4v" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpa" is REG_SZ: "VLC.mpa" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpe" is REG_SZ: "VLC.mpe" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg" is REG_SZ: "VLC.mpeg" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg1" is REG_SZ: "VLC.mpeg1" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg2" is REG_SZ: "VLC.mpeg2" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg4" is REG_SZ: "VLC.mpeg4" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpg" is REG_SZ: "VLC.mpg" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpv2" is REG_SZ: "VLC.mpv2" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mts" is REG_SZ: "VLC.mts" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mtv" is REG_SZ: "VLC.mtv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mxf" is REG_SZ: "VLC.mxf" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nsv" is REG_SZ: "VLC.nsv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nuv" is REG_SZ: "VLC.nuv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogg" is REG_SZ: "VLC.ogg" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogm" is REG_SZ: "VLC.ogm" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogx" is REG_SZ: "VLC.ogx" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogv" is REG_SZ: "VLC.ogv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rec" is REG_SZ: "VLC.rec" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rm" is REG_SZ: "VLC.rm" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmvb" is REG_SZ: "VLC.rmvb" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rpl" is REG_SZ: "VLC.rpl" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".thp" is REG_SZ: "VLC.thp" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tod" is REG_SZ: "VLC.tod" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tp" is REG_SZ: "VLC.tp" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ts" is REG_SZ: "VLC.ts" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tts" is REG_SZ: "VLC.tts" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vob" is REG_SZ: "VLC.vob" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vro" is REG_SZ: "VLC.vro" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".webm" is REG_SZ: "VLC.webm" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wmv" is REG_SZ: "VLC.wmv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wtv" is REG_SZ: "VLC.wtv" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xesc" is REG_SZ: "VLC.xesc" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asx" is REG_SZ: "VLC.asx" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".b4s" is REG_SZ: "VLC.b4s" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cue" is REG_SZ: "VLC.cue" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ifo" is REG_SZ: "VLC.ifo" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u" is REG_SZ: "VLC.m3u" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u8" is REG_SZ: "VLC.m3u8" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".pls" is REG_SZ: "VLC.pls" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ram" is REG_SZ: "VLC.ram" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".sdp" is REG_SZ: "VLC.sdp" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlc" is REG_SZ: "VLC.vlc" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wvx" is REG_SZ: "VLC.wvx" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xspf" is REG_SZ: "VLC.xspf" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wpl" is REG_SZ: "VLC.wpl" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".zpl" is REG_SZ: "VLC.zpl" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".iso" is REG_SZ: "VLC.iso" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".zip" is REG_SZ: "VLC.zip" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rar" is REG_SZ: "VLC.rar" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlt" is REG_SZ: "VLC.vlt" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wsz" is REG_SZ: "VLC.wsz" 64 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dav" is REG_SZ: "VLC.dav" ---------------------------------------------------------------------- 64 HKLM\Software\Microsoft\Windows Sandbox\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\Software MacKiev\Family Tree Maker 2024\25.0\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\TechSmith\SnagIt\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\ 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationDescription" is REG_SZ: "Google Chrome is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Google Chrome." 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files\Google\Chrome\Application\chrome.exe,0" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationName" is REG_SZ: "Google Chrome" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".htm" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".html" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".shtml" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".svg" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xht" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".webp" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".pdf" is REG_SZ: "ChromePDF" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu\ 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Google Chrome" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "http" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "https" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "irc" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mailto" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mms" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "news" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "nntp" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "sms" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "smsto" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "snews" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "tel" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "urn" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "webcal" is REG_SZ: "ChromeHTML" 64 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "google-chrome" is REG_SZ: "ChromeHTML" ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\ 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-206" --> "Excel" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-412" --> "Easily discover, visualize, and share insights from your data." 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsx" is REG_SZ: "Excel.Sheet.12" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltx" is REG_SZ: "Excel.Template" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsm" is REG_SZ: "Excel.SheetMacroEnabled.12" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xla" is REG_SZ: "Excel.Addin" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlam" is REG_SZ: "Excel.AddInMacroEnabled" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xll" is REG_SZ: "Excel.XLL" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlk" is REG_SZ: "Excel.Backup" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".csv" is REG_SZ: "Excel.CSV" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xld" is REG_SZ: "Excel.Dialog" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlm" is REG_SZ: "Excel.Macrosheet" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".slk" is REG_SZ: "Excel.SLK" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltm" is REG_SZ: "Excel.TemplateMacroEnabled" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlw" is REG_SZ: "Excel.Workspace" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsb" is REG_SZ: "Excel.SheetBinaryMacroEnabled.12" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xls" is REG_SZ: "Excel.Sheet.8" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlt" is REG_SZ: "Excel.Template.8" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".dqy" is REG_SZ: "dqyfile" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".iqy" is REG_SZ: "iqyfile" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".oqy" is REG_SZ: "oqyfile" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".rqy" is REG_SZ: "rqyfile" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".odc" is REG_SZ: "odcfile" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".ods" is REG_SZ: "Excel.OpenDocumentSpreadsheet.12" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlxml" is REG_SZ: "Excelxmlss" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlshtml" is REG_SZ: "Excelhtmlfile" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsmhtml" is REG_SZ: "Excelmhtmlfile" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlthtml" is REG_SZ: "Excelhtmltemplate" 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\URLAssociations: "ms-excel" is REG_SZ: "Excel.UriLink.16" ---------------------------------------------------------------------- 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\ 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-204" --> "PowerPoint" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-304" --> "Design and deliver beautiful presentations with ease and confidence." 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".odp" is REG_SZ: "PowerPoint.OpenDocumentPresentation.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pot" is REG_SZ: "PowerPoint.Template.8" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potm" is REG_SZ: "PowerPoint.TemplateMacroEnabled.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potx" is REG_SZ: "PowerPoint.Template.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppa" is REG_SZ: "PowerPoint.Addin.8" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppam" is REG_SZ: "PowerPoint.Addin.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pps" is REG_SZ: "PowerPoint.SlideShow.8" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsm" is REG_SZ: "PowerPoint.SlideShowMacroEnabled.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsx" is REG_SZ: "PowerPoint.SlideShow.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppt" is REG_SZ: "PowerPoint.Show.8" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptm" is REG_SZ: "PowerPoint.ShowMacroEnabled.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptx" is REG_SZ: "PowerPoint.Show.12" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pwz" is REG_SZ: "PowerPoint.Wizard.8" 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\URLAssociations: "ms-powerpoint" is REG_SZ: "PowerPoint.UriLink.16" ---------------------------------------------------------------------- 64 HKLM\Software\Microsoft\Office\16.0\Outlook\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\ 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-205" --> "Word" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-305" --> "Create beautiful documents, easily work with others, and enjoy the read." 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".asd" is REG_SZ: "Word.AutoRecovery.8" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docx" is REG_SZ: "Word.Document.12" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".doc" is REG_SZ: "Word.Document.8" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docm" is REG_SZ: "Word.DocumentMacroEnabled.12" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotx" is REG_SZ: "Word.Template.12" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dot" is REG_SZ: "Word.Template.8" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotm" is REG_SZ: "Word.TemplateMacroEnabled.12" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".odt" is REG_SZ: "Word.OpenDocumentText.12" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".rtf" is REG_SZ: "Word.RTF.8" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wbk" is REG_SZ: "Word.Backup.8" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wiz" is REG_SZ: "Word.Wizard.8" 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\URLAssociations: "ms-word" is REG_SZ: "Word.UriLink.16" ---------------------------------------------------------------------- 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\ 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-201" --> "OneNote" 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-302" --> "Take notes and have them when you need them." 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations\ 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".one" is REG_SZ: "OneNote.Section.1" 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc" is REG_SZ: "OneNote.TableOfContents" 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc2" is REG_SZ: "OneNote.TableOfContents.12" 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onepkg" is REG_SZ: "OneNote.Package" 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations\ 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenote" is REG_SZ: "OneNote.URL.16" 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenotedesktop" is REG_SZ: "OneNoteDesktop.URL.16" 64 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenote-cmd" is REG_SZ: "onenote-cmd.URL.16" ---------------------------------------------------------------------- 64 HKLM\SOFTWARE\Microsoft\Office\15.0\Lync\Capabilities\ -- Does not exist ********************************************************************** 32 HKLM\SOFTWARE\RegisteredApplications\ 32 HKLM\SOFTWARE\RegisteredApplications: "File Explorer" is REG_SZ: "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Address Book" is REG_SZ: "Software\Clients\Contacts\Address Book\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Disc Image Burner" is REG_SZ: "Software\Microsoft\IsoBurn\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Search" is REG_SZ: "Software\Microsoft\Windows Search\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Photo Viewer" is REG_SZ: "Software\Microsoft\Windows Photo Viewer\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Wordpad" is REG_SZ: "Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Microsoft Edge" is REG_SZ: "Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Firefox-308046B0AF4A39CB" is REG_SZ: "Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "SnagIt.25" is REG_SZ: "SOFTWARE\TechSmith\SnagIt\25\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Family Tree Maker 2019" is REG_SZ: "SOFTWARE\Software MacKiev\Family Tree Maker 2019\24.1\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Adobe Acrobat DC" is REG_SZ: "Software\Adobe\Adobe Acrobat\DC\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "SketchUp 2017" is REG_SZ: "SOFTWARE\SketchUp\SketchUp 2017\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "LayOut 2017" is REG_SZ: "SOFTWARE\SketchUp\LayOut 2017\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Style Builder 2017" is REG_SZ: "SOFTWARE\SketchUp\Style Builder 2017\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Brave" is REG_SZ: "Software\Clients\StartMenuInternet\Brave\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "VLC" is REG_SZ: "Software\Clients\Media\VLC\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Windows Sandbox" is REG_SZ: "Software\Microsoft\Windows Sandbox\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Family Tree Maker 2024" is REG_SZ: "SOFTWARE\Software MacKiev\Family Tree Maker 2024\25.0\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "SnagIt" is REG_SZ: "SOFTWARE\TechSmith\SnagIt\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Google Chrome" is REG_SZ: "Software\Clients\StartMenuInternet\Google Chrome\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Access.Application.16" is REG_SZ: "SOFTWARE\Microsoft\Office\16.0\Access\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Excel.Application.16" is REG_SZ: "Software\Clients\Spreadsheet\Microsoft Excel\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "PowerPoint.Application.16" is REG_SZ: "Software\Clients\Presentation\Microsoft PowerPoint\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Outlook.Application.16" is REG_SZ: "Software\Microsoft\Office\16.0\Outlook\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Word.Application.16" is REG_SZ: "Software\Clients\Word Processing\Microsoft Word\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "OneNote.Application.16" is REG_SZ: "Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities" 32 HKLM\SOFTWARE\RegisteredApplications: "Lync.Application.15" is REG_SZ: "SOFTWARE\Microsoft\Office\15.0\Lync\Capabilities" ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\ 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6021" --> "@C:\WINDOWS\explorer.exe,-6021" --> "File Explorer allows you to handle your file management requirements." 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6020" --> "@C:\WINDOWS\explorer.exe,-6020" --> "File Explorer" 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities: "Hidden" is REG_DWORD: 0 (0x0) 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations\ 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations: "Explorer.BurnSelection" is REG_SZ: "Explorer.AssocActionId.BurnSelection" 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations: "Explorer.EraseDisc" is REG_SZ: "Explorer.AssocActionId.EraseDisc" 32 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Capabilities\UrlAssociations: "Explorer.ZipSelection" is REG_SZ: "Explorer.AssocActionId.ZipSelection" ---------------------------------------------------------------------- 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\ 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4606" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4606" --> "Windows Contacts allows you to store e-mail addresses and other information about people and organizations." 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%CommonProgramFiles%\System\wab32res.dll,-4408" --> "@C:\Program Files (x86)\Common Files\System\wab32res.dll,-4408" --> "Windows Contacts" 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".contact" is REG_SZ: "contact_wab_auto_file" 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".group" is REG_SZ: "group_wab_auto_file" 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".p7c" is REG_SZ: "certificate_wab_auto_file" 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\FileAssociations: ".vcf" is REG_SZ: "vcard_wab_auto_file" 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\Contacts\Address Book\Capabilities\URLAssociations: "LDAP" is REG_SZ: "WAB.AssocProtocol.LDAP" ---------------------------------------------------------------------- 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\ 32 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-353" --> "@C:\WINDOWS\System32\isoburn.exe,-353" --> "Windows Disc Image Burner allows users to burn a CD or DVD from an ISO disc image file." 32 HKLM\Software\Microsoft\IsoBurn\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\System32\isoburn.exe,-352" --> "@C:\WINDOWS\System32\isoburn.exe,-352" --> "Windows Disc Image Burner" 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations\ 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".img" is REG_SZ: "Windows.IsoFile" 32 HKLM\Software\Microsoft\IsoBurn\Capabilities\FileAssociations: ".iso" is REG_SZ: "Windows.IsoFile" ---------------------------------------------------------------------- 32 HKLM\Software\Microsoft\Windows Search\Capabilities\ 32 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6012" --> "@C:\WINDOWS\explorer.exe,-6012" --> "Windows Search Explorer allows you to quickly search for files and folders anywhere on your computer." 32 HKLM\Software\Microsoft\Windows Search\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%SystemRoot%\explorer.exe,-6011" --> "@C:\WINDOWS\explorer.exe,-6011" --> "Windows Search Explorer" 32 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations\ 32 HKLM\Software\Microsoft\Windows Search\Capabilities\UrlAssociations: "search" is REG_SZ: "Explorer.AssocProtocol.search-ms" ---------------------------------------------------------------------- 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\ 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationDescription" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3069" 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities: "ApplicationName" is REG_SZ: "@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3009" 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations\ 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tif" is REG_SZ: "PhotoViewer.FileAssoc.Tiff" 32 HKLM\Software\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations: ".tiff" is REG_SZ: "PhotoViewer.FileAssoc.Tiff" ---------------------------------------------------------------------- 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\ 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationDescription" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-40128" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-40128" 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities: "ApplicationName" is REG_EXPAND_SZ: "@%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE,-57344" --> "@C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE,-57344" 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations\ 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".docx" is REG_SZ: "docxfile" 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".odt" is REG_SZ: "odtfile" 32 HKLM\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Capabilities\FileAssociations: ".rtf" is REG_SZ: "rtffile" ---------------------------------------------------------------------- 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\ 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities: "ApplicationDescription" is REG_SZ: "Microsoft Edge is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Microsoft Edge." 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe,0" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities: "ApplicationName" is REG_SZ: "Microsoft Edge" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".htm" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".html" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".shtml" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".svg" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".xht" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".webp" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".xml" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".pdf" is REG_SZ: "MSEdgePDF" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".mht" is REG_SZ: "MSEdgeMHT" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "MSEdgeMHT" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\Startmenu\ 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Microsoft Edge" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "ftp" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "http" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "https" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "irc" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "mailto" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "mms" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "news" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "nntp" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "read" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "sms" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "smsto" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "snews" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "tel" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "urn" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "webcal" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "microsoft-edge" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "microsoft-edge-holographic" is REG_SZ: "MSEdgeHTM" 32 HKLM\Software\Clients\StartMenuInternet\Microsoft Edge\Capabilities\URLAssociations: "ms-xbl-3d8b930f" is REG_SZ: "MSEdgeHTM" ---------------------------------------------------------------------- 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\ 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities: "ApplicationDescription" is REG_SZ: "Firefox delivers safe, easy web browsing. A familiar user interface, enhanced security features including protection from online identity theft, and integrated search let you get the most out of the web." 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files\Mozilla Firefox\firefox.exe,0" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities: "ApplicationName" is REG_SZ: "Firefox" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".htm" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".html" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".shtml" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".xht" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".svg" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".webp" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".avif" is REG_SZ: "FirefoxHTML-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\FileAssociations: ".pdf" is REG_SZ: "FirefoxPDF-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\StartMenu\ 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\StartMenu: "StartMenuInternet" is REG_SZ: "Firefox-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations: "http" is REG_SZ: "FirefoxURL-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations: "https" is REG_SZ: "FirefoxURL-308046B0AF4A39CB" 32 HKLM\Software\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations: "mailto" is REG_SZ: "FirefoxURL-308046B0AF4A39CB" ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\TechSmith\SnagIt\25\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\Software MacKiev\Family Tree Maker 2019\24.1\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\ 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities: "ApplicationDescription" is REG_SZ: "Adobe Acrobat DC is the complete PDF solution for working anywhere. Create, edit and sign PDFs from your computer or mobile device; Edit PDFs and scanned documents; Prevent others from copying or editing sensitive information; Replace ink signatures with electronic signatures; Send, track and confirm receipt of important documents." 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities: "ApplicationName" is REG_SZ: "Adobe Acrobat DC" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations\ 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".rmf" is REG_SZ: "Acrobat.RMFFile" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".fdf" is REG_SZ: "Acrobat.FDFDoc" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".aaui" is REG_SZ: "Acrobat.aaui" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".pdf" is REG_SZ: "Acrobat.Document.DC" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".acrobatsecuritysettings" is REG_SZ: "Acrobat.acrobatsecuritysettings" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".pdx" is REG_SZ: "AcrobatPDXFileType" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".xfdf" is REG_SZ: "Acrobat.XFDFDoc" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".xdp" is REG_SZ: "Acrobat.XDPDoc" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".bpdx" is REG_SZ: "AcrobatBPDXFileType" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".pdfxml" is REG_SZ: "Acrobat.pdfxml" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\FileAssociations: ".sequ" is REG_SZ: "Acrobat.Sequence" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations\ 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations: "application/vnd.adobe.xfd+xml" is REG_SZ: "AcroPDF.PDF" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations: "application/pdf" is REG_SZ: "AcroPDF.PDF" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations: "application/vnd.adobe.xdp+xml" is REG_SZ: "AcroPDF.PDF" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations: "application/vnd.adobe.acrobat-security-settings" is REG_SZ: "AcroPDF.PDF" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations: "application/vnd.fdf" is REG_SZ: "AcroPDF.PDF" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations: "application/vnd.adobe.pdfxml" is REG_SZ: "AcroPDF.PDF" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\MIMEAssociations: "application/vnd.adobe.xfdf" is REG_SZ: "AcroPDF.PDF" 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\UrlAssociations\ 32 HKLM\Software\Adobe\Adobe Acrobat\DC\Capabilities\UrlAssociations: "acrobat" is REG_SZ: "acrobat" ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\SketchUp\SketchUp 2017\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\SketchUp\LayOut 2017\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\SketchUp\Style Builder 2017\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\ 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities: "ApplicationDescription" is REG_SZ: "Brave is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Brave." 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe,0" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities: "ApplicationName" is REG_SZ: "Brave" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".htm" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".html" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".pdf" is REG_SZ: "BravePDF" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".shtml" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".svg" is REG_SZ: "BraveFile" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".xht" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\FileAssociations: ".webp" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\Startmenu\ 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Brave" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "http" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "https" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "irc" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "mailto" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "mms" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "news" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "nntp" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "sms" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "smsto" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "snews" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "tel" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "urn" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "webcal" is REG_SZ: "BraveHTML" 32 HKLM\Software\Clients\StartMenuInternet\Brave\Capabilities\URLAssociations: "brave-browser" is REG_SZ: "BraveHTML" ---------------------------------------------------------------------- 32 HKLM\Software\Clients\Media\VLC\Capabilities\ 32 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationName" is REG_SZ: "VLC media player" 32 HKLM\Software\Clients\Media\VLC\Capabilities: "ApplicationDescription" is REG_SZ: "VLC - The video swiss knife" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3ga" is REG_SZ: "VLC.3ga" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".669" is REG_SZ: "VLC.669" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".a52" is REG_SZ: "VLC.a52" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aac" is REG_SZ: "VLC.aac" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ac3" is REG_SZ: "VLC.ac3" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adt" is REG_SZ: "VLC.adt" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".adts" is REG_SZ: "VLC.adts" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aif" is REG_SZ: "VLC.aif" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aifc" is REG_SZ: "VLC.aifc" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aiff" is REG_SZ: "VLC.aiff" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".au" is REG_SZ: "VLC.au" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amr" is REG_SZ: "VLC.amr" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".aob" is REG_SZ: "VLC.aob" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ape" is REG_SZ: "VLC.ape" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".caf" is REG_SZ: "VLC.caf" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cda" is REG_SZ: "VLC.cda" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dts" is REG_SZ: "VLC.dts" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flac" is REG_SZ: "VLC.flac" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".it" is REG_SZ: "VLC.it" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4a" is REG_SZ: "VLC.m4a" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4p" is REG_SZ: "VLC.m4p" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mid" is REG_SZ: "VLC.mid" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mka" is REG_SZ: "VLC.mka" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mlp" is REG_SZ: "VLC.mlp" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mod" is REG_SZ: "VLC.mod" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp1" is REG_SZ: "VLC.mp1" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2" is REG_SZ: "VLC.mp2" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp3" is REG_SZ: "VLC.mp3" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpc" is REG_SZ: "VLC.mpc" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpga" is REG_SZ: "VLC.mpga" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oga" is REG_SZ: "VLC.oga" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".oma" is REG_SZ: "VLC.oma" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".opus" is REG_SZ: "VLC.opus" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".qcp" is REG_SZ: "VLC.qcp" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ra" is REG_SZ: "VLC.ra" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmi" is REG_SZ: "VLC.rmi" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".snd" is REG_SZ: "VLC.snd" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".s3m" is REG_SZ: "VLC.s3m" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".spx" is REG_SZ: "VLC.spx" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tta" is REG_SZ: "VLC.tta" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".voc" is REG_SZ: "VLC.voc" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vqf" is REG_SZ: "VLC.vqf" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".w64" is REG_SZ: "VLC.w64" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wav" is REG_SZ: "VLC.wav" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wma" is REG_SZ: "VLC.wma" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wv" is REG_SZ: "VLC.wv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xa" is REG_SZ: "VLC.xa" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xm" is REG_SZ: "VLC.xm" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3g2" is REG_SZ: "VLC.3g2" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp" is REG_SZ: "VLC.3gp" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gp2" is REG_SZ: "VLC.3gp2" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".3gpp" is REG_SZ: "VLC.3gpp" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".amv" is REG_SZ: "VLC.amv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asf" is REG_SZ: "VLC.asf" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".avi" is REG_SZ: "VLC.avi" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".bik" is REG_SZ: "VLC.bik" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".divx" is REG_SZ: "VLC.divx" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".drc" is REG_SZ: "VLC.drc" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dv" is REG_SZ: "VLC.dv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dvr-ms" is REG_SZ: "VLC.dvr-ms" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".evo" is REG_SZ: "VLC.evo" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".f4v" is REG_SZ: "VLC.f4v" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".flv" is REG_SZ: "VLC.flv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gvi" is REG_SZ: "VLC.gvi" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".gxf" is REG_SZ: "VLC.gxf" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m1v" is REG_SZ: "VLC.m1v" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2t" is REG_SZ: "VLC.m2t" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2v" is REG_SZ: "VLC.m2v" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m2ts" is REG_SZ: "VLC.m2ts" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m4v" is REG_SZ: "VLC.m4v" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mkv" is REG_SZ: "VLC.mkv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mov" is REG_SZ: "VLC.mov" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp2v" is REG_SZ: "VLC.mp2v" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4" is REG_SZ: "VLC.mp4" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mp4v" is REG_SZ: "VLC.mp4v" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpa" is REG_SZ: "VLC.mpa" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpe" is REG_SZ: "VLC.mpe" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg" is REG_SZ: "VLC.mpeg" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg1" is REG_SZ: "VLC.mpeg1" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg2" is REG_SZ: "VLC.mpeg2" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpeg4" is REG_SZ: "VLC.mpeg4" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpg" is REG_SZ: "VLC.mpg" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mpv2" is REG_SZ: "VLC.mpv2" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mts" is REG_SZ: "VLC.mts" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mtv" is REG_SZ: "VLC.mtv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".mxf" is REG_SZ: "VLC.mxf" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nsv" is REG_SZ: "VLC.nsv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".nuv" is REG_SZ: "VLC.nuv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogg" is REG_SZ: "VLC.ogg" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogm" is REG_SZ: "VLC.ogm" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogx" is REG_SZ: "VLC.ogx" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ogv" is REG_SZ: "VLC.ogv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rec" is REG_SZ: "VLC.rec" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rm" is REG_SZ: "VLC.rm" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rmvb" is REG_SZ: "VLC.rmvb" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rpl" is REG_SZ: "VLC.rpl" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".thp" is REG_SZ: "VLC.thp" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tod" is REG_SZ: "VLC.tod" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tp" is REG_SZ: "VLC.tp" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ts" is REG_SZ: "VLC.ts" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".tts" is REG_SZ: "VLC.tts" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vob" is REG_SZ: "VLC.vob" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vro" is REG_SZ: "VLC.vro" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".webm" is REG_SZ: "VLC.webm" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wmv" is REG_SZ: "VLC.wmv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wtv" is REG_SZ: "VLC.wtv" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xesc" is REG_SZ: "VLC.xesc" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".asx" is REG_SZ: "VLC.asx" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".b4s" is REG_SZ: "VLC.b4s" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".cue" is REG_SZ: "VLC.cue" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ifo" is REG_SZ: "VLC.ifo" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u" is REG_SZ: "VLC.m3u" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".m3u8" is REG_SZ: "VLC.m3u8" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".pls" is REG_SZ: "VLC.pls" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".ram" is REG_SZ: "VLC.ram" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".sdp" is REG_SZ: "VLC.sdp" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlc" is REG_SZ: "VLC.vlc" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wvx" is REG_SZ: "VLC.wvx" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".xspf" is REG_SZ: "VLC.xspf" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wpl" is REG_SZ: "VLC.wpl" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".zpl" is REG_SZ: "VLC.zpl" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".iso" is REG_SZ: "VLC.iso" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".zip" is REG_SZ: "VLC.zip" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".rar" is REG_SZ: "VLC.rar" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".vlt" is REG_SZ: "VLC.vlt" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".wsz" is REG_SZ: "VLC.wsz" 32 HKLM\Software\Clients\Media\VLC\Capabilities\FileAssociations: ".dav" is REG_SZ: "VLC.dav" ---------------------------------------------------------------------- 32 HKLM\Software\Microsoft\Windows Sandbox\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\Software MacKiev\Family Tree Maker 2024\25.0\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\TechSmith\SnagIt\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\ 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationDescription" is REG_SZ: "Google Chrome is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Google Chrome." 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationIcon" is REG_SZ: "C:\Program Files\Google\Chrome\Application\chrome.exe,0" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities: "ApplicationName" is REG_SZ: "Google Chrome" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".htm" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".html" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".mhtml" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".shtml" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".svg" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xht" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".xhtml" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".webp" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\FileAssociations: ".pdf" is REG_SZ: "ChromePDF" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu\ 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\Startmenu: "StartMenuInternet" is REG_SZ: "Google Chrome" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "http" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "https" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "irc" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mailto" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "mms" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "news" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "nntp" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "sms" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "smsto" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "snews" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "tel" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "urn" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "webcal" is REG_SZ: "ChromeHTML" 32 HKLM\Software\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations: "google-chrome" is REG_SZ: "ChromeHTML" ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\ 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-206" --> "Excel" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-412" --> "Easily discover, visualize, and share insights from your data." 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsx" is REG_SZ: "Excel.Sheet.12" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltx" is REG_SZ: "Excel.Template" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsm" is REG_SZ: "Excel.SheetMacroEnabled.12" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xla" is REG_SZ: "Excel.Addin" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlam" is REG_SZ: "Excel.AddInMacroEnabled" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xll" is REG_SZ: "Excel.XLL" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlk" is REG_SZ: "Excel.Backup" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".csv" is REG_SZ: "Excel.CSV" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xld" is REG_SZ: "Excel.Dialog" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlm" is REG_SZ: "Excel.Macrosheet" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".slk" is REG_SZ: "Excel.SLK" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xltm" is REG_SZ: "Excel.TemplateMacroEnabled" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlw" is REG_SZ: "Excel.Workspace" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsb" is REG_SZ: "Excel.SheetBinaryMacroEnabled.12" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xls" is REG_SZ: "Excel.Sheet.8" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlt" is REG_SZ: "Excel.Template.8" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".dqy" is REG_SZ: "dqyfile" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".iqy" is REG_SZ: "iqyfile" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".oqy" is REG_SZ: "oqyfile" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".rqy" is REG_SZ: "rqyfile" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".odc" is REG_SZ: "odcfile" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".ods" is REG_SZ: "Excel.OpenDocumentSpreadsheet.12" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlxml" is REG_SZ: "Excelxmlss" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlshtml" is REG_SZ: "Excelhtmlfile" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlsmhtml" is REG_SZ: "Excelmhtmlfile" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\FileAssociations: ".xlthtml" is REG_SZ: "Excelhtmltemplate" 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\Spreadsheet\Microsoft Excel\Capabilities\URLAssociations: "ms-excel" is REG_SZ: "Excel.UriLink.16" ---------------------------------------------------------------------- 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\ 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-204" --> "PowerPoint" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-304" --> "Design and deliver beautiful presentations with ease and confidence." 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".odp" is REG_SZ: "PowerPoint.OpenDocumentPresentation.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pot" is REG_SZ: "PowerPoint.Template.8" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potm" is REG_SZ: "PowerPoint.TemplateMacroEnabled.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".potx" is REG_SZ: "PowerPoint.Template.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppa" is REG_SZ: "PowerPoint.Addin.8" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppam" is REG_SZ: "PowerPoint.Addin.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pps" is REG_SZ: "PowerPoint.SlideShow.8" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsm" is REG_SZ: "PowerPoint.SlideShowMacroEnabled.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppsx" is REG_SZ: "PowerPoint.SlideShow.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".ppt" is REG_SZ: "PowerPoint.Show.8" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptm" is REG_SZ: "PowerPoint.ShowMacroEnabled.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pptx" is REG_SZ: "PowerPoint.Show.12" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\FileAssociations: ".pwz" is REG_SZ: "PowerPoint.Wizard.8" 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\Presentation\Microsoft PowerPoint\Capabilities\URLAssociations: "ms-powerpoint" is REG_SZ: "PowerPoint.UriLink.16" ---------------------------------------------------------------------- 32 HKLM\Software\Microsoft\Office\16.0\Outlook\Capabilities\ -- Does not exist ---------------------------------------------------------------------- 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\ 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-205" --> "Word" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-305" --> "Create beautiful documents, easily work with others, and enjoy the read." 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".asd" is REG_SZ: "Word.AutoRecovery.8" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docx" is REG_SZ: "Word.Document.12" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".doc" is REG_SZ: "Word.Document.8" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".docm" is REG_SZ: "Word.DocumentMacroEnabled.12" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotx" is REG_SZ: "Word.Template.12" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dot" is REG_SZ: "Word.Template.8" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".dotm" is REG_SZ: "Word.TemplateMacroEnabled.12" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".odt" is REG_SZ: "Word.OpenDocumentText.12" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".rtf" is REG_SZ: "Word.RTF.8" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wbk" is REG_SZ: "Word.Backup.8" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\FileAssociations: ".wiz" is REG_SZ: "Word.Wizard.8" 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\Word Processing\Microsoft Word\Capabilities\URLAssociations: "ms-word" is REG_SZ: "Word.UriLink.16" ---------------------------------------------------------------------- 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\ 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationName" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-201" --> "OneNote" 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities: "ApplicationDescription" is REG_SZ: "@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-302" --> "Take notes and have them when you need them." 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations\ 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".one" is REG_SZ: "OneNote.Section.1" 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc" is REG_SZ: "OneNote.TableOfContents" 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onetoc2" is REG_SZ: "OneNote.TableOfContents.12" 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\FileAssociations: ".onepkg" is REG_SZ: "OneNote.Package" 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations\ 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenote" is REG_SZ: "OneNote.URL.16" 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenotedesktop" is REG_SZ: "OneNoteDesktop.URL.16" 32 HKLM\Software\Clients\Note Taking\Microsoft OneNote\16.0\Capabilities\URLAssociations: "onenote-cmd" is REG_SZ: "onenote-cmd.URL.16" ---------------------------------------------------------------------- 32 HKLM\SOFTWARE\Microsoft\Office\15.0\Lync\Capabilities\ -- Does not exist **********************************************************************