Downloads:

7,874

Downloads of v 1.2.0.0:

210

Last Update:

13 Jan 2019

Package Maintainer(s):

Software Author(s):

  • Eric Zimmerman

Tags:

registry deleted plugin forensics

Registry Explorer

This is not the latest version of Registry Explorer available.

1.2.0.0 | Updated: 13 Jan 2019

Downloads:

7,874

Downloads of v 1.2.0.0:

210

Maintainer(s):

Software Author(s):

  • Eric Zimmerman

Tags:

registry deleted plugin forensics

Registry Explorer 1.2.0.0

This is not the latest version of Registry Explorer available.

All Checks are Passing

2 Passing Test

Validation Testing Passed

Verification Testing Passed

Details

To install Registry Explorer, run the following command from the command line or from PowerShell:

>

To upgrade Registry Explorer, run the following command from the command line or from PowerShell:

>

To uninstall Registry Explorer, run the following command from the command line or from PowerShell:

>

NOTE: This applies to both open source and commercial editions of Chocolatey.

1. Ensure you are set for organizational deployment

Please see the organizational deployment guide

  • Open Source or Commercial:
    • Proxy Repository - Create a proxy nuget repository on Nexus, Artifactory Pro, or a proxy Chocolatey repository on ProGet. Point your upstream to https://community.chocolatey.org/api/v2. Packages cache on first access automatically. Make sure your choco clients are using your proxy repository as a source and NOT the default community repository. See source command for more information.
    • You can also just download the package and push it to a repository Download

3. Enter your internal repository url

(this should look similar to https://community.chocolatey.org/api/v2)

4. Choose your deployment method:


choco upgrade registryexplorer -y --source="'STEP 3 URL'" [other options]

See options you can pass to upgrade.

See best practices for scripting.

Add this to a PowerShell script or use a Batch script with tools and in places where you are calling directly to Chocolatey. If you are integrating, keep in mind enhanced exit codes.

If you do use a PowerShell script, use the following to ensure bad exit codes are shown as failures:


choco upgrade registryexplorer -y --source="'STEP 3 URL'"
$exitCode = $LASTEXITCODE

Write-Verbose "Exit code was $exitCode"
$validExitCodes = @(0, 1605, 1614, 1641, 3010)
if ($validExitCodes -contains $exitCode) {
  Exit 0
}

Exit $exitCode


- name: Ensure registryexplorer installed
  win_chocolatey:
    name: registryexplorer
    state: present
    version: 1.2.0.0
    source: STEP 3 URL

See docs at https://docs.ansible.com/ansible/latest/modules/win_chocolatey_module.html.


chocolatey_package 'registryexplorer' do
  action    :install
  version  '1.2.0.0'
  source   'STEP 3 URL'
end

See docs at https://docs.chef.io/resource_chocolatey_package.html.


Chocolatey::Ensure-Package
(
    Name: registryexplorer,
    Version: 1.2.0.0,
    Source: STEP 3 URL
);

Requires Otter Chocolatey Extension. See docs at https://inedo.com/den/otter/chocolatey.


cChocoPackageInstaller registryexplorer
{
   Name     = 'registryexplorer'
   Ensure   = 'Present'
   Version  = '1.2.0.0'
   Source   = 'STEP 3 URL'
}

Requires cChoco DSC Resource. See docs at https://github.com/chocolatey/cChoco.


package { 'registryexplorer':
  provider => 'chocolatey',
  ensure   => '1.2.0.0',
  source   => 'STEP 3 URL',
}

Requires Puppet Chocolatey Provider module. See docs at https://forge.puppet.com/puppetlabs/chocolatey.


salt '*' chocolatey.install registryexplorer version="1.2.0.0" source="STEP 3 URL"

See docs at https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html.

5. If applicable - Chocolatey configuration/installation

See infrastructure management matrix for Chocolatey configuration elements and examples.

This package was approved as a trusted package on 13 Jan 2019.

Description

Supports recovery of deleted keys and values, multi hive support, the fastest searching, viewing slack space, plugin support, and much more

tools\chocolateyinstall.ps1 
$desktop = $([System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::DesktopDirectory))

$link = Join-Path $desktop "Registry Explorer.lnk"
$target = Join-Path $env:chocolateyPackageFolder "tools\RE\RegistryExplorer.exe"
$work = Join-Path $env:chocolateyPackageFolder "tools\RE"
Install-ChocolateyShortcut -ShortcutFilePath $link -TargetPath $target -WorkingDirectory $work -RunAsAdmin
tools\chocolateyuninstall.ps1 
$ErrorActionPreference = 'Stop'; # stop on all errors

$packageName = 'registryexplorer'
$softwareName = 'registryexplorer*' #part or all of the Display Name as you see it in Programs and Features. It should be enough to be unique

$desktop = $([System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::DesktopDirectory))

$link = Join-Path $desktop "Registry Explorer.lnk"

Remove-Item $link
tools\LICENSE.txt 
From: https://opensource.org/licenses/MIT

LICENSE

The MIT License (MIT)
Copyright (c) <2017> <Eric Zimmerman>

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
tools\RE\BatchExamples\BatchExample.reb
tools\RE\BatchExamples\BatchExampleServices.reb
tools\RE\BatchExamples\BatchExampleSysCache.reb
tools\RE\BatchExamples\BatchExampleUserAssist.reb
tools\RE\BatchExamples\BatchExampleWildCard.reb
tools\RE\BatchExamples\RECmd_Batch_MC.reb
tools\RE\Bookmarks\Common\Autoruns_NtUser_Run_2ec3d165-3d58-417e-bf86-d30652b7b53a
tools\RE\Bookmarks\Common\Autoruns_Software_Run_b747b395-acee-4576-9b52-a89349b8d831
tools\RE\Bookmarks\Common\Autoruns_UsrClass_VirtualStore_bac80d4f-92ed-41a6-bb70-9749bf17736e
tools\RE\Bookmarks\Common\Communication_NtUser_TeamViewer_d32c0647-339c-4d4f-8282-daf26b927699
tools\RE\Bookmarks\Common\Communication_NtUser_Terminal Server Client_9f79434c-685a-497d-aa57-6e7dbfc2513f
tools\RE\Bookmarks\Common\Communication_NtUser_UnreadMail_d6d419d3-bc7c-4e6c-b73d-e1235c3a2943
tools\RE\Bookmarks\Common\Logging_Software_LogonUI_f1627ffc-939e-4da8-9970-55a1f90f545e
tools\RE\Bookmarks\Common\Logging_UsrClass_ManagedByApp_0f413353-4273-44a3-8910-ac99b0ac73eb
tools\RE\Bookmarks\Common\Network_Software_LastConnect_1516cac4-ff62-4d2e-a9f5-a20815853b3e
tools\RE\Bookmarks\Common\Network_Software_NetworkCards_3cfa462c-31d1-4ad6-8b47-98f281c50728
tools\RE\Bookmarks\Common\Network_Software_NetworkList_d1f7ed49-2bc8-48c5-86cc-4d759cf7fb4f
tools\RE\Bookmarks\Common\Network_System_{4d36e972-e325-11ce-bfc1-08002be10318}_54796294-d279-4552-bda5-fe672b4ea675
tools\RE\Bookmarks\Common\Network_System_Interfaces_f4932e20-032d-4b7c-842f-776d37bddbdb
tools\RE\Bookmarks\Common\Operating system_NtUser_CD Burning_0f0005c8-7a16-4223-8a73-87dc0d307849
tools\RE\Bookmarks\Common\Operating system_NtUser_General_82caa00f-2dd2-400b-b9d1-13173b58e82f
tools\RE\Bookmarks\Common\Operating system_Sam_Users_58f6066e-53f0-43a7-823c-5679da0e4cd9
tools\RE\Bookmarks\Common\Operating system_Security_PolAcDmN_69adae64-b620-4879-bece-467ced7a2a78
tools\RE\Bookmarks\Common\Operating system_Security_PolAcDmS_27dd8985-481d-4842-8f90-5b8baff56c69
tools\RE\Bookmarks\Common\Operating system_Security_PolDnDDN_9b93734e-0905-4123-84de-67329767aa5b
tools\RE\Bookmarks\Common\Operating system_Security_PolPrDmS_a7486465-9764-437c-a39d-a6b4f0ec4085
tools\RE\Bookmarks\Common\Operating system_Software_Channels_8ab43ae7-05ce-4c41-9c70-f77df5317e67
tools\RE\Bookmarks\Common\Operating system_Software_Control Panel_7e993a1a-b5af-4247-8b34-6bbe13eb7f3c
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersionNT_3d9483dc-d89c-423a-ae83-a57405d6a752
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersion_0a017e3d-c0fe-40c9-84fb-8bcd45c96a7e
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersion_3d9483dc-d89c-423a-ae83-a57405d6a752
tools\RE\Bookmarks\Common\Operating system_Software_CurrentVersion_4a87fdc4-0aa5-4691-868f-baf78c3e0dbc
tools\RE\Bookmarks\Common\Operating system_Software_Devices_121a3617-c512-4b5f-a770-11b1cdb19983
tools\RE\Bookmarks\Common\Operating system_Software_EMDMgmt_5c905164-7055-4422-a141-f8539d5ef4fe
tools\RE\Bookmarks\Common\Operating system_Software_Image File Execution Options_59ddbb92-609a-44e8-9bb7-e1f5b797e397
tools\RE\Bookmarks\Common\Operating system_Software_System_00b53738-2f64-4419-895c-2c91eb98a186
tools\RE\Bookmarks\Common\Operating system_Software_Windows Portable Devices_39661eda-1373-493a-b333-583c51c9e74b
tools\RE\Bookmarks\Common\Operating system_Software_Winlogon_129b227e-57cd-400b-b370-4ef3d08f9627
tools\RE\Bookmarks\Common\Operating system_System_{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_18c3eafb-034d-49b6-9558-45b92416bf33
tools\RE\Bookmarks\Common\Operating system_System_{6bdd1fc6-810f-11d0-bec7-08002be2092f}_80aafc9b-f28d-41a8-929c-6c016c4b5bc0
tools\RE\Bookmarks\Common\Operating system_System_BTHPORT_aa11dce3-ce1e-4a70-abbe-7a18419afe33
tools\RE\Bookmarks\Common\Operating system_System_ComputerName_f5259882-9906-413f-b845-b2bbca09ffeb
tools\RE\Bookmarks\Common\Operating system_System_CrashControl_a4d38e6e-fa6e-4ceb-8a1f-b7b2f25bf573
tools\RE\Bookmarks\Common\Operating system_System_Environment_7044cf87-168f-4588-bae0-426632d08330
tools\RE\Bookmarks\Common\Operating system_System_EventLog_e99f1b87-9f35-4876-a5c5-3c99b92e4bfd
tools\RE\Bookmarks\Common\Operating system_System_FilesNotToSnapshot_af3e091f-8598-43e1-9e19-39c1352a72ea
tools\RE\Bookmarks\Common\Operating system_System_FileSystem_b20a0736-0d62-4a26-9539-a53ded5f152b
tools\RE\Bookmarks\Common\Operating system_System_Memory Management_15dc67bb-bf95-46ef-87db-e4e34e387125
tools\RE\Bookmarks\Common\Operating system_System_PrefetchParameters_0f9651f6-3aa8-4bac-89aa-e57a73744ee2
tools\RE\Bookmarks\Common\Operating system_System_RDP-Tcp_6e9f18d0-7173-424c-b695-e8c2894ee110
tools\RE\Bookmarks\Common\Operating system_System_SafeBoot_1da3ee50-90bf-49ed-9aa6-b97ba9948eee
tools\RE\Bookmarks\Common\Operating system_System_Services_9a4c3785-ec1c-4248-8b0a-cc32a3578d67
tools\RE\Bookmarks\Common\Operating system_System_Terminal Server_bc0da746-e8c5-465a-a70f-2779e7c914de
tools\RE\Bookmarks\Common\Operating system_System_TimeZoneInformation_e16fbaa9-172c-4501-a55d-0cb4adb02cac
tools\RE\Bookmarks\Common\Operating system_System_USB_d9ecec7b-e4c6-4c8d-9f65-2b971efbb4c4
tools\RE\Bookmarks\Common\Operating system_System_VSS_7afab042-09fb-4f0f-ae3e-b3c58c93f83c
tools\RE\Bookmarks\Common\Operating system_System_Windows_29e05135-bc83-4332-a11b-ea3c357e4de5
tools\RE\Bookmarks\Common\Operating system_System_Windows_d73fc227-8ea3-45e8-ac69-041a06a6c629
tools\RE\Bookmarks\Common\Program execution_NtUser_FileExts_03427bd9-675f-4564-9d7b-058e797a7cb6
tools\RE\Bookmarks\Common\Program execution_NtUser_FirstFolder_a640410c-d053-4966-ace5-36bc4b977c9a
tools\RE\Bookmarks\Common\Program execution_NtUser_MUICache_a51a8919-ffdd-4135-91fa-affac7f65bb5
tools\RE\Bookmarks\Common\Program execution_NtUser_RecentApps_3b793e2f-72d9-45b5-ad3a-290a6e967a04
tools\RE\Bookmarks\Common\Program execution_NtUser_RunMRU_524957bc-0c7e-490c-a8cf-f6bce2e1e1b5
tools\RE\Bookmarks\Common\Program execution_NtUser_Sysinternals_a801be22-7473-4c4c-9a57-9dbc90bcbf7c
tools\RE\Bookmarks\Common\Program execution_NtUser_UserAssist_660a4ade-592f-4c64-bd85-8241378d0839
tools\RE\Bookmarks\Common\Program execution_Software_System_2a35482d-0630-4d28-96fd-9691023be4fd
tools\RE\Bookmarks\Common\Program execution_System_AppCompatCache_f1adf410-8700-4a83-bc2e-f53cededc03d
tools\RE\Bookmarks\Common\Software_NtUser_Main_95d1b312-336b-45f0-b219-f8a2b2ecea4e
tools\RE\Bookmarks\Common\Software_Software_Internet Explorer_140f36ce-6571-4966-b6e4-641c30a9b9b1
tools\RE\Bookmarks\Common\Software_Software_Products_a3ce0f6a-434d-4c2d-ba8f-16ce24209fe4
tools\RE\Bookmarks\Common\Software_Software_Products_c6b061c4-df1d-477f-bcde-4846ec328c31
tools\RE\Bookmarks\Common\Storage_System_{10497b1b-ba51-44e5-8318-a65c837b6661}_9fe29ea5-44f1-4d92-82a0-d6b1fb84ee34
tools\RE\Bookmarks\Common\Storage_System_MountedDevices_0d010e87-8b14-4ce1-b084-e99b5ab9748c
tools\RE\Bookmarks\Common\Storage_System_USBSTOR_3d1bc4ba-8eb2-4ec7-a4be-e6792505f999
tools\RE\Bookmarks\Common\User configuration_NtUser_CurrentVersion_9fef0ee2-99c9-4131-bd77-3f28fad9f8c7
tools\RE\Bookmarks\Common\User configuration_NtUser_CurrentVersion_b8239cb1-3e84-41ae-a156-ebabfadea7d1
tools\RE\Bookmarks\Common\User configuration_NtUser_Internet Settings_57563b19-0d7b-4f61-a76a-5ec5dfecb7c4
tools\RE\Bookmarks\Common\User configuration_NtUser_PrinterPorts_fe1bbde9-e2bc-4764-9948-3c3b8d8c2112
tools\RE\Bookmarks\Common\User configuration_Software_command_0054aabe-ed43-4485-b3ce-bc6490cfe81e
tools\RE\Bookmarks\Common\User configuration_Software_StartMenuInternet_dc7c443e-51be-41c6-bd71-851c9d108ad6
tools\RE\Bookmarks\Common\User files and folders_NtUser_7-Zip_af7dfd06-6a98-4c8b-a795-bfb9f5ae407d
tools\RE\Bookmarks\Common\User files and folders_NtUser_ComDlg32_44d580cf-ef19-4749-b833-f787ac1b0220
tools\RE\Bookmarks\Common\User files and folders_NtUser_Compression_d0e9ff87-f6be-47ec-888d-164cb58f19f3
tools\RE\Bookmarks\Common\User files and folders_NtUser_FileHistory_2895d67d-8601-45df-9758-f72958482822
tools\RE\Bookmarks\Common\User files and folders_NtUser_Map Network Drive MRU_df6ed689-944a-46b1-a806-f5f78830429a
tools\RE\Bookmarks\Common\User files and folders_NtUser_MountPoints2_28014255-7733-4398-a859-dd76642a19c7
tools\RE\Bookmarks\Common\User files and folders_NtUser_RecentDocs_51af122a-734f-4b9b-8138-4633f67e0cad
tools\RE\Bookmarks\Common\User files and folders_NtUser_Shell Folders_feec11a9-1482-4629-a083-0caf2df99873
tools\RE\Bookmarks\Common\User files and folders_NtUser_User MRU_41e2c5c4-4da2-4b96-99ae-a4fb532f93d4
tools\RE\Bookmarks\Common\User files and folders_NtUser_User MRU_6bbf4038-b3c6-4ba5-a4e1-d04d3166e675
tools\RE\Bookmarks\Common\User files and folders_NtUser_User MRU_83fcbc4b-a0d4-40d2-b414-91ffa96d778c
tools\RE\Bookmarks\Common\User files and folders_NtUser_WinRAR_204cf564-85f5-42b9-983f-d94a970e7374
tools\RE\Bookmarks\Common\User files and folders_UsrClass_BagMRU_237fdb41-7713-485d-94ab-f07f4c157356
tools\RE\Bookmarks\Common\User general_NtUser_Applets_c6065d08-af30-4da3-b586-2f96def5fe7f
tools\RE\Bookmarks\Common\User general_NtUser_CCleaner_ec48ddd3-4f09-4431-b388-7f5d18eaab43
tools\RE\Bookmarks\Common\User general_NtUser_WordWheelQuery_89ca3fef-d045-4ff2-8891-4c61cf6c30ea
tools\RE\Bookmarks\Common\User network_NtUser_Ares_fe9bac6b-b1fd-4710-8579-80b31f4fe288
tools\RE\Bookmarks\Common\User network_NtUser_Default_617e9fc6-565a-4986-a3fa-7e517fcbf6a3
tools\RE\Bookmarks\Common\User network_NtUser_FTP_013baa05-0d47-4db7-9dbd-d4cb6231dc90
tools\RE\Bookmarks\Common\User network_NtUser_Servers_f7ae7fd1-b145-45e0-a8bd-805333e40c62
tools\RE\Bookmarks\Common\User network_NtUser_TeamViewer_6aa0d3cd-9926-4f23-bf9b-f675636944f0
tools\RE\Bookmarks\Common\User network_System_FirewallPolicy_6701136a-ccfb-476e-af28-d58543636ba4
tools\RE\Bookmarks\Common\User network_System_Shares_7794e865-4630-4703-ac0f-76e650314b01
tools\RE\Bookmarks\Common\Web browsing_NtUser_TypedURLs_24aec1e0-f92a-49db-8ec0-8443a7bbd130
tools\RE\Bookmarks\Common\Web browsing_UsrClass_TypedURLsTime_6393ca56-3949-4897-826f-7873b06b33a5
tools\RE\Bookmarks\Common\Web browsing_UsrClass_TypedURLsVisitCount_ede76781-af8b-4693-8cb1-3dc8421510c9
tools\RE\Bookmarks\Common\Web browsing_UsrClass_TypedURLs_03cf59d5-b3e7-4947-bc5e-6faec6cde342
tools\RE\Plugins\RegistryPlugin.7-ZipHistory.dll 
md5: 73920E2FD09FF4A17AED9EE4374363FC | sha1: DAF9A8B6FF4357790257A924EF7393F1A8BD2B06 | sha256: D5257998646CAEDAE0C620233B781507172F7A2CCC10D6FC49CCB1E57CCB26BC | sha512: F614321871F0C354BA414D439CB6FF09F6CEFAA328FEA96F0B6E2C6D38F9F1A057F7863DF68698191444244282523C1BBF578DD873CEEF347F5F612A9947E5A6
tools\RE\Plugins\RegistryPlugin.AppCompatCache.dll 
md5: D2F00E83ECCE79BBBC86AF6C90376A19 | sha1: 354124428FF71389A0B4C18B1F9AE5D81E119BA5 | sha256: 92A14117BD39508B546A2DB3A5B944196581C976974CFC1DDC01C89D71C812F3 | sha512: B006D3F61B9AD6A7D9899F1289826CA0FBD656F24E0574AC5A5D9131F4BB650CC610A2A36AEF77AB9176218141003DFC3F6109A27EAD821563D8B1B4915849AA
tools\RE\Plugins\RegistryPlugin.AppCompatFlags.dll 
md5: B00B72FF4D8E5E4284D4BA052A17D239 | sha1: 5BB3461FE3D98CD31680ED19BDDAA8DDEBE40573 | sha256: 0AE15734173BD9EE2A60B0111BB92162424950A9C0A2C6434A1B91A104EB9600 | sha512: E4D1DAC14819393AC84ADF6F64D0D20780988F6234501A82AFE70901FDE5B2CF00739960883993D3610F4D4DCA3AE010E2FCDE65268C949091E244F84B349234
tools\RE\Plugins\RegistryPlugin.Ares.dll 
md5: 45D78C0B5E05360FF92E3A98293699F5 | sha1: 7BF46FDC0C557FE28D9887554FB2E993918CB183 | sha256: 908A8CF7816D4076ECAE72FDA13C3D9FCF5C7C347687E2B3923C0D4288D85D74 | sha512: 83FDB05C0FF34107B69166C4A679D93C424B58B6C619A21F2B68D9C529AF62310E8C5D384BE015EFFB61ECBF68A01906C12F00535C4B292EC898F7A3AA14DC35
tools\RE\Plugins\RegistryPlugin.BamDam.dll 
md5: 08F926D6BC0761B31726A1E70E60F44A | sha1: 16D79A129C240D93B2B114FB6205D31B6DDAD124 | sha256: CAB6547597C49CC218EA17061CA1B167B77AE7E97856F20A41EDB47EC2B6012D | sha512: 9BAF45AB63D4A64BC6B7DAD6025D0994C23F39AC4824B4828D2811D565EB057123B8CBFAE9FC503FE8273BE64B84E0051AE9AE74030D33AE12E7C513CD8AF2E9
tools\RE\Plugins\RegistryPlugin.BluetoothServicesBthPort.dll 
md5: 2C28666BC6095F059A47C23BCD6B78FB | sha1: 8030007F4BD16ECFF95C2F5F75B530DB7719A519 | sha256: DB415153BBABB299BC1BAFD2A466F4BBF04FB65487B06FD3A9FD6FEECEECE93D | sha512: 8A882A5A79AE3A6184FA08B11B786EE3B1FA22FC82DFA88C79B4D2FA108366B08D6139DEF78025FDBF80E868C6BAE259DD0BC72147827BAC2DA4D2799DB7E872
tools\RE\Plugins\RegistryPlugin.CIDSizeMRU.dll 
md5: 0619F1E2169DD367D6D6E7D320604650 | sha1: 0BC727E25D10476CF1DDD232BFDBB0E46CB2FE46 | sha256: 207AF00BD9D14D6B37CB1EBD4911299410F21788987090E79893EDC7BDFA02B1 | sha512: 5A3588107A3C02ECC0FA5F30BCEB97C9C5EA2B8957A9B32CD4272E69DB8EF2E6909169F29E056CB0419661381ABDCEB155AEC57196A8F871E026F7F311FE39AB
tools\RE\Plugins\RegistryPlugin.DHCPNetworkHint.dll 
md5: 71B818FBDAA920579D634B637507A464 | sha1: 3CCEC6E76B899878DA8B1265FAE4236D5D992282 | sha256: B335082188EDFDD12804E49D3C6CF3FDE02B5AC0C0DDF7F3F35D60B7958D30A8 | sha512: 9BC50B6F2CEDD22EA8E9F11785E6F382EA717BFA63635E7A4C25FE0875F38865C4AE4719E75D8A9552B964415F369E3F71FF95448066D819C1A00E707C3CD820
tools\RE\Plugins\RegistryPlugin.FileExts.dll 
md5: 6612B12B59F0F53B94D4E98E39044716 | sha1: 4AA0163474189B621E6CF91365790C5A67DD0707 | sha256: 396F351F3F26279767AC4D7BEC8BBF868179CFE47ECAD3A7362233A1046F7AAC | sha512: BED19B0F8FD09CF6950F1BA692A9EF7FF17BEABA7944D6FCFD0EEDC7272DF9B038850A0D017E9FB4AF89CFBE80130D5A45F77FF2932E21BAA73152DBDC576C2E
tools\RE\Plugins\RegistryPlugin.FirstFolder.dll 
md5: 58A1E7035B6E173A860325E697E359C8 | sha1: B3B20A661C19D9256E3D8F6C1154D1D1EAECA6A7 | sha256: 9CD749CB9E86B9E9D5CB6F982337B8969F95353CCA378C5565B26C21D02FF834 | sha512: 1F58C3C108B5FFD7A80F6DAE01DC2170315A87815C9D84038E67E1689C156E5C55D3E5E72503EFA90359D0A8321E026BFD367BC36EB13595DC8D5F372D92F314
tools\RE\Plugins\RegistryPlugin.KnownNetworks.dll 
md5: A2490C74985F7246A8F86F694B6AD158 | sha1: 9B852C4D7A22575F34411E2653321F21595AC5E1 | sha256: 1A70CFB1AB60239B6237C1BED387B69FBA743917D3D4D9A1D484CDABA1518FBA | sha512: C51DF8EE57A18BF65F01D9D83CBDCA0EB50CB3A195CBC3C056194B6E5AF30AA3E8AE325F990E6C61943C5C451C5B3EEBB608CA78A3EF36AB87F2D0221F4D2D9C
tools\RE\Plugins\RegistryPlugin.LastVisitedMRU.dll 
md5: 69F4DFE4D066F589EFCAD13B32289765 | sha1: 218F4BF585F1F8ED52B2D4DD8A6F3A65D7F41F14 | sha256: BB56E29A358133CD657A5244B7C086DDCC1B1BB2B87454CDD6A7945772D2E0FB | sha512: 23D453B2404A3F33EA93104A7B099588F2EDDA4FA62167E54EB7E54D3C62B757ACDC1C8A83B6ECBA8A8D7B744E422BABE951448448C3B51980BA7C8388654CB2
tools\RE\Plugins\RegistryPlugin.LastVisitedPidlMRU.dll 
md5: BD563B72A4035F5D0C2B6C559E6A215F | sha1: C71267162484AFC6B90EBA66B30D1E4C8D83C089 | sha256: 846866799E34924956BAEA6143484F903CA4E24E2E89F442F6362232307B807D | sha512: 46E1F6DC56BC3F58722144AE4D26888F912980399E24B87828CC7027D4203416FCFDA3CF9C076A6CD8F5F5B9BB4A357F07196C15BE91E6279FBF2EA40ABDB597
tools\RE\Plugins\RegistryPlugin.OfficeMRU.dll 
md5: F32F25A8B6660B5120ABA84A60CD7066 | sha1: 4311942F99F7CCD83F6718FE41AFCE42429EA524 | sha256: 11D5BB861AA20945C470E180C6666A3D7CB66A6365B478EE05FA4908F3CE8054 | sha512: 3DA1A48F5039427441C20B7DD31A097FB75D0F8017676ABF94E9C42C8DC71646CAF8FBE7604C06EDEC4156D49BBFFEADCD634E506E6E3914EE2D16789687888C
tools\RE\Plugins\RegistryPlugin.OpenSaveMRU.dll 
md5: 34B4DB7C5C9877306A2C2C4698EF171C | sha1: 038B16762ADFA57D3B44386E202140B483F29974 | sha256: BCC9BE6E6AF9777A81A35A068681D63509D8180AD799381A6A37E9A0A2A8FDD5 | sha512: 5C8ED65647B71876F0F2C34B450E06934DF4BE7FE1534557F6B5408D73E530893325795297C300913F8E4708863EF3F8EF176225CBC2F3F099EF34495E6B7901
tools\RE\Plugins\RegistryPlugin.OpenSavePidlMRU.dll 
md5: 23DC3A78FEE4B75F6C3F6C924B1E8185 | sha1: 0F1D2712552DE73D09F41436DAB09DDB67D21CC0 | sha256: FE35507FC6B6A9CF9BC0FF11A74DCBD438FEB03A8F584309E97C6913AA371BFA | sha512: 482201B50AAA6B21BD4CDEBEE5B5111C21E5F10B24D4CD07EF32B1A3F737FA648E4A2AEF26C79AA4AA59DF60BDE61A0F551B5B6F50924410E1D587776AE08DC5
tools\RE\Plugins\RegistryPlugin.RecentApps.dll 
md5: EE151D7FD2793F258E1D629AB0A54EA4 | sha1: 147A508C25D05298196410B5353060E095335645 | sha256: 1A210BF90941157E72EE3DAA9686EC92B37BFF7832B33A22A3CAC6B217A388BA | sha512: 9CF44C28E649359614585CCC70807DA1FAAF58266A39104FA92EB51F5A7053507E25497D0E23C7C104CAEB9B78C1B504FEEDF3FBB780FD1DD4B161562ED29532
tools\RE\Plugins\RegistryPlugin.RecentDocs.dll 
md5: D9B6B2F0D520211E0B20F6CD6BF08445 | sha1: 0A020D05519DADA677AF86E6ED97600ABEE8CFD4 | sha256: 943A9EA58B6DF6AA024EC5C4E947E38D7D512809871BA995E507698645F4D42F | sha512: 94E845D5FC330BDFEAF2A18C341F990E63E96787127AACB00F6950EA025A5900D4E2AEFC62FA058326F2841CE637897D199D38669820B562C1C1EE5161BBB451
tools\RE\Plugins\RegistryPlugin.RunMRU.dll 
md5: 6EA0E40E42305906C0E7E7BE33802C71 | sha1: 9B9EB0214F990310A4A33873BAAD983F1C8C993D | sha256: 10CB9CBEFCE0B2C46CB9D37A3B5DAC7022C26E510679583A49077D4057C80ADC | sha512: C6E08F34DAA623C68E4D210049E4800D6F4513BEEAA0B840971C67BB1045F91B08922CFAA3241334302C62318D48194034C84562458659FBBA3FD218346199BE
tools\RE\Plugins\RegistryPlugin.SAM.dll 
md5: F8F67C62BC72BD2DD115D345637C51D2 | sha1: ACCAF5A610CBF311814B94BD2AE04FDC8B80532B | sha256: 986D4C8AE3C368DA02E209E51D99B2C590874678395C7FBB837D6BC9AC6D695C | sha512: 94E94B51F4AE61FFFE530B3108E4733C326BC5732522CFCB7A533DC98C1C845F1981118A4E5E3BD0BE983E19A0A204F9FDB7909F1F1426048CCC316AFA4CEFD5
tools\RE\Plugins\RegistryPlugin.Services.dll 
md5: 4BC22FC675B0F2DF053592887708A5F5 | sha1: B74926412C292265DF35FB3A061E8F6FB5B77355 | sha256: 527DFA8ED6536AD109856168211F63DC7A1AE71569790AAD9841885E835148A8 | sha512: 3C4E33D4C0380C43A26037630E4B4BC35E27D9539A9C1AEA251B10CD1CF3E6864B7F9D17AE458374595EC01D991B9864EA540350A7578B404887D3FF8D9F2B91
tools\RE\Plugins\RegistryPlugin.SyscacheObjectTable.dll 
md5: 88B5439CEC143A86F952866E299B0E86 | sha1: 105DCE6B07453B4999F19475DB43942C181CF64E | sha256: 14F0D1B7D761A92D76E243165C623C6317E027028606574A92E08C7799A573CA | sha512: 89CFF88F4C9808EB8F550CDAD94A5682A6D30B0C38326EBE48F30C2EBC0E4738D4747C8E82F04BEA056B3096F6652CCE6DD71982539764B8D2EEEEC534616719
tools\RE\Plugins\RegistryPlugin.TaskFlowShellActivities.dll 
md5: C8E0B5AA820F22A2363C2B79FC3B2D5E | sha1: 3E2F06D0328100CD5E84AA03DB642690337BFC1F | sha256: DA92B2B21868CED54DC70EA76C68F946F2BF83355C618617C81C49AB2B1A257E | sha512: 3AFBD426525C2EC1EED43447E5375D4ACD26CD336EEA5E446520EB5D7FD23C5AF46749DCD99A712FD4BCFFEB0476E13926ECCA92B07EA03A66DBF532A93D64D9
tools\RE\Plugins\RegistryPlugin.TerminalServerClient.dll 
md5: 8EF05CC1726D6CF0D7EB1CE573E9C555 | sha1: 71DB4E09EEDD9D0B4B85953D4966ECF329F7775C | sha256: 07454391E1798903A2233025B3CC9CA299AED7C5ED03F22FD23A2D7E0C7E3E06 | sha512: 77ECD012EAFF9ED431D329C4122134B35316D327C3D24DE48207955D37335E8D9C2002D7E7CC5D7B9FE5FBC5352ADA32FF68AC45E2D34FBA147422EE1C567950
tools\RE\Plugins\RegistryPlugin.TimeZoneInformation.dll 
md5: 281C7B3351CCC5E00DAF6A6C6A124CEF | sha1: 82B89B8CC931032F4336A5B9D00AB7F2B0FE066C | sha256: E55B40773F86F9F157173F1A26D2975AB1586E69B0471B5B78C82B78C8F72C7B | sha512: 680A893162752DB6C3C171C542FAEB8A7A5DC8E3507807C9F75F818183C2A072528C715B6A9041251E334BB2F861442009C1ADA2DEFDBD6A9C6DA554D79F573D
tools\RE\Plugins\RegistryPlugin.TypedURLs.dll 
md5: 07C3F4C9C7C0C856634459EA18393C02 | sha1: 452707E92C20712800EF8412CCA92CFE45366469 | sha256: 917E676A71CF99550EF0CA4F72D01FC93B58FB7AFF1B6349557A74C8B70DE15B | sha512: 1E170E01FAC95DD3C82CBDF5F724806549FB0F164E12E35C891B5509D5CA20E9C93FFD7AE82C8BD79458F6668EBA8139C7CFED6B6009D10F3173EF6EF317D04E
tools\RE\Plugins\RegistryPlugin.UserAssist.dll 
md5: B34D073AC62C5650F091B96E74DE5247 | sha1: 28F1CB8A847216540CA127AE13DA2A7A12C525F5 | sha256: 7A4F177EE624B2FE4E1DCBA7C165F9C464380FDDDEEC769284C34883F2D5DD44 | sha512: D9395AF8AE07004B720ED89C48F5A62684EBA51E320B993659176E240BC3A1B9D5999C2BFD55C27CBD931F33F04346FA4D8DD252C5953A238DC9075899D233F7
tools\RE\Plugins\RegistryPlugin.WordWheelQuery.dll 
md5: CF162C7FB51263A57446B030AA64FF7D | sha1: 436A14EF55B38569FC5EBE3E978FEEF0F5EC3CEC | sha256: 27C6E9C78F401198A53C7A8A4FF35B665CC1608C5765691F03A8FA423C78E051 | sha512: 8F099FD0C4EDEAC196C2E2771E16E593D126602C6C0A7706768E220EBF055956AA2051452E655F7AFDD08D7A6672FABBCE2107E6872FA291C959A9C557B47784
tools\RE\RECmd.exe 
md5: 5D67F7A9E8B4A9BD342E57DC191CD987 | sha1: A9316BAB03B292E9F09BF568E6B173B0F97220BC | sha256: 1C638B81F153FD1C488DFA7F590E1CF259F54B42060553A0D0836302DDA64B6E | sha512: 6BE1D781747DC7AD24AC74FF40BE2805243292C9A02BA89A92C2F1B62FDE27C34A77A1EC96E77D40445A163DAB4BAFE550DFAE84A1F4E86BB3EC22A75CE34AD9
tools\RE\RegistryExplorer.exe 
md5: 64CE659089B108AAEF7EA057D71B5868 | sha1: 6E4DA645F1C85E26CAEA11BC972D9C29F355D7B9 | sha256: 30A25B5F99D2A1EE6BF899AD9322F2C8EA1A363CB12A2E08734D3898F8CAEDA5 | sha512: 8B51968BC6EFCDA4036C1C2F26AC99AA2D93C87E99478CA68940F84093666F4A820572453F59E79BD035BBD236D53038B256E8DFE5EE6D8C734DDA4225B46934
tools\RE\RegistryExplorerManual.pdf
tools\RE\Settings\Categories
tools\RE\Settings\General
tools\RE\Settings\HiddenKeys
tools\RE\Settings\ValuesGrid.layout
tools\VERIFICATION.txt 

VERIFICATION
Verification is intended to assist the Chocolatey moderators and community
in verifying that this package's contents are trustworthy.
 
This is all my stuff. References

https://github.com/ericzimmerman
https://binaryforay.blogspot.com/
https://gist.github.com/EricZimmerman/4288bc5e0ac188af2ca9
https://www.sans.org/instructors/eric-zimmerman

Log in or click on link to see number of positives.

In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).

Chocolatey Pro provides runtime protection from possible malware.

Version Downloads Last Updated Status
[DEPRECIATED] Registry Explorer 1.3.0.1 1382 Monday, January 28, 2019 Approved
Registry Explorer 1.3.0.0 276 Thursday, January 17, 2019 Approved
Registry Explorer 1.2.0.0 210 Sunday, January 13, 2019 Approved
Registry Explorer 1.1.0.65 269 Tuesday, December 18, 2018 Approved
Registry Explorer 1.1.0.64 136 Tuesday, December 18, 2018 Approved
Registry Explorer 1.1.0.62 289 Sunday, November 25, 2018 Approved
Registry Explorer 1.1.0.61 328 Monday, October 8, 2018 Approved
Registry Explorer 1.1.0.5 232 Wednesday, September 19, 2018 Approved
Registry Explorer 1.1.0.4 144 Monday, September 17, 2018 Approved

This package has no dependencies.

Discussion for the Registry Explorer Package

Ground Rules:

  • This discussion is only about Registry Explorer and the Registry Explorer package. If you have feedback for Chocolatey, please contact the Google Group.
  • This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
  • The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
  • Tell us what you love about the package or Registry Explorer, or tell us what needs improvement.
  • Share your experiences with the package, or extra configuration or gotchas that you've found.
  • If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.
comments powered by Disqus