Windows Registry Editor Version 5.00ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System]ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001]ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001\services]ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001\services\eventlog]ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001\services\eventlog\Application]ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001\services\eventlog\Application\MsiInstaller]ഀ
"EventMessageFile"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,\ഀ
  00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\ഀ
  5c,00,6d,00,73,00,69,00,6d,00,73,00,67,00,2e,00,64,00,6c,00,6c,00,00,00ഀ
"TypesSupported"=dword:00000007ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001\services\msiserver]ഀ
"DisplayName"="@%SystemRoot%\\system32\\msimsg.dll,-27"ഀ
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\ഀ
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6d,\ഀ
  00,73,00,69,00,65,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,\ഀ
  56,00,00,00ഀ
"Description"="@%SystemRoot%\\system32\\msimsg.dll,-32"ഀ
"ObjectName"="LocalSystem"ഀ
"ErrorControl"=dword:00000001ഀ
"Start"=dword:00000003ഀ
"Type"=dword:00000010ഀ
"DependOnService"=hex(7):72,00,70,00,63,00,73,00,73,00,00,00,00,00ഀ
"ServiceSidType"=dword:00000001ഀ
"RequiredPrivileges"=hex(7):53,00,65,00,54,00,63,00,62,00,50,00,72,00,69,00,76,\ഀ
  00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,\ഀ
  74,00,65,00,50,00,61,00,67,00,65,00,66,00,69,00,6c,00,65,00,50,00,72,00,69,\ഀ
  00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,4c,00,6f,00,63,00,\ഀ
  6b,00,4d,00,65,00,6d,00,6f,00,72,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,\ഀ
  00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6e,00,63,00,72,00,65,00,61,00,\ഀ
  73,00,65,00,42,00,61,00,73,00,65,00,50,00,72,00,69,00,6f,00,72,00,69,00,74,\ഀ
  00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,\ഀ
  65,00,43,00,72,00,65,00,61,00,74,00,65,00,50,00,65,00,72,00,6d,00,61,00,6e,\ഀ
  00,65,00,6e,00,74,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\ഀ
  00,00,53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,00,69,00,76,00,69,\ഀ
  00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,53,00,65,00,63,00,75,00,72,00,\ഀ
  69,00,74,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,\ഀ
  00,53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,00,6f,00,74,00,69,00,\ഀ
  66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,\ഀ
  00,65,00,50,00,72,00,6f,00,66,00,69,00,6c,00,65,00,53,00,69,00,6e,00,67,00,\ഀ
  6c,00,65,00,50,00,72,00,6f,00,63,00,65,00,73,00,73,00,50,00,72,00,69,00,76,\ഀ
  00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,\ഀ
  72,00,73,00,6f,00,6e,00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,\ഀ
  00,65,00,67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,74,00,65,00,\ഀ
  47,00,6c,00,6f,00,62,00,61,00,6c,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,\ഀ
  00,67,00,65,00,00,00,53,00,65,00,41,00,73,00,73,00,69,00,67,00,6e,00,50,00,\ഀ
  72,00,69,00,6d,00,61,00,72,00,79,00,54,00,6f,00,6b,00,65,00,6e,00,50,00,72,\ഀ
  00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,52,00,65,00,\ഀ
  73,00,74,00,6f,00,72,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,\ഀ
  00,65,00,00,00,53,00,65,00,49,00,6e,00,63,00,72,00,65,00,61,00,73,00,65,00,\ഀ
  51,00,75,00,6f,00,74,00,61,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,\ഀ
  00,65,00,00,00,53,00,65,00,53,00,68,00,75,00,74,00,64,00,6f,00,77,00,6e,00,\ഀ
  50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,54,\ഀ
  00,61,00,6b,00,65,00,4f,00,77,00,6e,00,65,00,72,00,73,00,68,00,69,00,70,00,\ഀ
  50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,4c,\ഀ
  00,6f,00,61,00,64,00,44,00,72,00,69,00,76,00,65,00,72,00,50,00,72,00,69,00,\ഀ
  76,00,69,00,6c,00,65,00,67,00,65,00,00,00,00,00ഀ
"FailureActions"=hex:84,03,00,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\ഀ
  00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001\Services\TrustedInstaller]ഀ
"BlockTime"=dword:00002a30ഀ
"BlockTimeIncrement"=dword:00000384ഀ
"PreshutdownTimeout"=dword:0036ee80ഀ
"DisplayName"="@%SystemRoot%\\servicing\\TrustedInstaller.exe,-100"ഀ
"ErrorControl"=dword:00000001ഀ
"Group"="ProfSvc_Group"ഀ
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\ഀ
  74,00,25,00,5c,00,73,00,65,00,72,00,76,00,69,00,63,00,69,00,6e,00,67,00,5c,\ഀ
  00,54,00,72,00,75,00,73,00,74,00,65,00,64,00,49,00,6e,00,73,00,74,00,61,00,\ഀ
  6c,00,6c,00,65,00,72,00,2e,00,65,00,78,00,65,00,00,00ഀ
"Description"="@%SystemRoot%\\servicing\\TrustedInstaller.exe,-101"ഀ
"ObjectName"="localSystem"ഀ
"Start"=dword:00000003ഀ
"Type"=dword:00000010ഀ
"ServiceSidType"=dword:00000001ഀ
"FailureActions"=hex:84,03,00,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\ഀ
  00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00ഀ
ഀ
[HKEY_LOCAL_MACHINE\Tmp_System\ControlSet001\Services\TrustedInstaller\Security]ഀ
"Security"=hex:01,00,14,80,90,00,00,00,a0,00,00,00,14,00,00,00,34,00,00,00,02,\ഀ
  00,20,00,01,00,00,00,02,c0,18,00,00,00,0c,00,01,02,00,00,00,00,00,05,20,00,\ഀ
  00,00,20,02,00,00,02,00,5c,00,04,00,00,00,00,02,14,00,ff,01,0f,00,01,01,00,\ഀ
  00,00,00,00,05,12,00,00,00,00,00,18,00,ff,01,02,00,01,02,00,00,00,00,00,05,\ഀ
  20,00,00,00,20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,\ഀ
  00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,01,02,\ഀ
  00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,\ഀ
  00,20,02,00,00ഀ