[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ThemeManager]
"ServerChangeNumber"=dword:0000000b
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\DWM]
"ColorizationColor"=dword:6b74b8fc
"ColorizationColorBalance"=dword:00000008
"ColorizationAfterglow"=dword:6b74b8fc
"ColorizationAfterglowBalance"=dword:0000002b
"ColorizationBlurBalance"=dword:00000031
"ColorizationGlassReflectionIntensity"=dword:00000004
[HKEY_USERS\.DEFAULT\Control Panel\Colors]
"ActiveTitle"="153 180 209"
"ButtonDkShadow"="105 105 105"
"ButtonFace"="240 240 240"
"ButtonLight"="227 227 227"
"ButtonShadow"="160 160 160"
"GradientActiveTitle"="185 209 234"
"GradientInactiveTitle"="215 228 242"
"GrayText"="109 109 109"
"Hilight"="51 153 255"
"InactiveTitle"="191 205 219"
"InactiveTitleText"="67 78 84"
"Menu"="240 240 240"
"TitleText"="0 0 0"
"Background"="0 0 0"
"MenuHilight"="51 153 255"
"MenuBar"="240 240 240"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2]
"ProgramsCache"=hex:13,00,00,00,19,57,11,a4,2e,d6,1d,49,aa,7c,e7,4b,8b,e3,b0,\
67,00,58,00,00,00,56,00,31,00,00,00,00,00,09,3f,0b,41,11,00,50,72,6f,67,72,\
61,6d,73,00,00,3e,00,08,00,04,00,ef,be,07,3f,46,13,09,3f,18,45,2a,00,00,00,\
29,10,00,00,1f,fb,0f,fb,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,00,72,\
00,6f,00,67,00,72,00,61,00,6d,00,73,00,00,00,18,00,00,00,01,48,02,00,00,46,\
02,32,00,8b,05,00,00,09,3f,0b,...
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop]
"TaskbarWinXP"=hex:0c,00,00,00,08,00,00,00,01,00,00,00,00,00,00,00,aa,4f,28,68,\
48,6a,d0,11,8c,78,00,c0,4f,d9,18,b4,fe,02,00,00,40,0d,00,00,00,00,00,00,16,\
00,00,00,00,00,00,00,00,00,00,00,16,00,00,00,00,00,00,00,01,00,00,00
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\StuckRects2]
"Settings"=hex:28,00,00,00,ff,ff,ff,ff,02,00,00,00,03,00,00,00,3e,00,00,00,1e,\
00,00,00,fe,ff,ff,ff,e4,03,00,00,02,05,00,00,02,04,00,00
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count]
"HRZR_PGYFRFFVBA"=hex:00,00,00,00,05,00,00,00,0f,00,00,00,22,07,03,00,02,00,00,\
00,09,00,00,00,c7,40,02,00,7b,00,46,00,33,00,38,00,42,00,46,00,34,00,30,00,\
34,00,2d,00,31,00,44,00,34,00,33,00,2d,00,34,00,32,00,46,00,32,00,2d,00,39,\
00,33,00,30,00,35,00,2d,00,36,00,37,00,44,00,45,00,30,00,42,00,32,00,38,00,\
46,00,43,00,32,00,33,00,7d,00,5c,00,65,00,78,00,70,00,6c,00,6f,00,72,00,65,\
00,72,00,2e,00,65,00,78,00,65,...
"Zvpebfbsg.Jvaqbjf.PbagebyCnary"=hex:00,00,00,00,00,00,00,00,10,00,00,00,7b,f4,\
02,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\
bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,00,\
00,00,00,00,00,00,00,00
"{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr"=hex:00,00,00,00,02,00,\
00,00,09,00,00,00,c7,40,02,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\
bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\
ff,ff,ff,ff,80,a9,67,16,70,56,cc,01,00,00,00,00
"{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\gnfxzte.rkr"=hex:00,00,00,00,00,00,00,\
00,06,00,00,00,f7,5d,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\
00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\
ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"ThemeActive"="1"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"LoadedBefore"="1"
"LastUserLangID"="1033"
"LastLoadedDPI"="96"
"DllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,5c,\
00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,41,00,65,00,72,00,6f,00,5c,00,\
41,00,65,00,72,00,6f,00,2e,00,6d,00,73,00,73,00,74,00,79,00,6c,00,65,00,73,\
00,00,00
"ColorName"="NormalColor"
"SizeName"="NormalSize"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Shell\Bags\1\Desktop]
"FFlags"=dword:40200224
"ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,10,\
00,00,00,00,00,00,00,00,00,00,00,04,00,00,00,18,00,00,00,30,f1,25,b7,ef,47,\
1a,10,a5,f1,02,60,8c,9e,eb,ac,0a,00,00,00,8c,00,00,00,30,f1,25,b7,ef,47,1a,\
10,a5,f1,02,60,8c,9e,eb,ac,0c,00,00,00,46,00,00,00,a6,6a,63,28,3d,95,d2,11,\
b5,d6,00,c0,4f,d9,18,d0,0b,00,00,00,69,00,00,00,30,f1,25,b7,ef,47,1a,10,a5,\
f1,02,60,8c,9e,eb,ac,0e,...
"Sort"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,30,f1,\
25,b7,ef,47,1a,10,a5,f1,02,60,8c,9e,eb,ac,0a,00,00,00,01,00,00,00
"GroupView"=dword:00000000
"GroupByKey:FMTID"="{00000000-0000-0000-0000-000000000000}"
"GroupByKey:PID"=dword:00000000
"GroupByDirection"=dword:00000001
[HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify]
"LastAdvertisement"=hex(
:6d,f8,e4,ac,35,57,cc,01
"UserStartTime"=hex(
:6d,38,7b,82,6c,56,cc,01
"PastIconsStream"=hex:14,00,00,00,05,00,00,00,01,00,01,00,04,00,00,00,14,00,00,\
00,49,4c,20,06,04,00,0c,00,04,00,10,00,10,00,ff,ff,ff,ff,21,00,ff,ff,ff,ff,\
ff,ff,ff,ff,42,4d,36,00,00,00,00,00,00,00,36,00,00,00,28,00,00,00,10,00,00,\
00,c0,00,00,00,01,00,20,00,00,00,00,00,00,30,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,...
"IconStreams"=hex:14,00,00,00,07,00,00,00,01,00,01,00,06,00,00,00,14,00,00,00,\
7b,00,53,00,33,00,38,00,4f,00,53,00,34,00,30,00,34,00,2d,00,31,00,51,00,34,\
00,33,00,2d,00,34,00,32,00,53,00,32,00,2d,00,39,00,33,00,30,00,35,00,2d,00,\
36,00,37,00,51,00,52,00,30,00,4f,00,32,00,38,00,53,00,50,00,32,00,33,00,7d,\
00,5c,00,72,00,6b,00,63,00,79,00,62,00,65,00,72,00,65,00,2e,00,72,00,6b,00,\
72,00,00,00,00,00,00,00,00,...
[HKEY_USERS\S-1-5-18\Control Panel\Desktop]
"SCRNSAVE.EXE"="GPhotos.scr"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\DWM]
"ColorizationColor"=dword:6b74b8fc
"ColorizationColorBalance"=dword:00000008
"ColorizationAfterglow"=dword:6b74b8fc
"ColorizationAfterglowBalance"=dword:0000002b
"ColorizationBlurBalance"=dword:00000031
"ColorizationGlassReflectionIntensity"=dword:00000004
[HKEY_USERS\S-1-5-18\Control Panel\Colors]
"ActiveTitle"="153 180 209"
"ButtonDkShadow"="105 105 105"
"ButtonFace"="240 240 240"
"ButtonLight"="227 227 227"
"ButtonShadow"="160 160 160"
"GradientActiveTitle"="185 209 234"
"GradientInactiveTitle"="215 228 242"
"GrayText"="109 109 109"
"Hilight"="51 153 255"
"InactiveTitle"="191 205 219"
"InactiveTitleText"="67 78 84"
"Menu"="240 240 240"
"TitleText"="255 255 255"
"Background"="0 78 152"
"MenuHilight"="51 153 255"
"MenuBar"="240 240 240"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2]
"ProgramsCache"=hex:13,00,00,00,19,57,11,a4,2e,d6,1d,49,aa,7c,e7,4b,8b,e3,b0,\
67,00,58,00,00,00,56,00,31,00,00,00,00,00,09,3f,0b,41,11,00,50,72,6f,67,72,\
61,6d,73,00,00,3e,00,08,00,04,00,ef,be,07,3f,46,13,09,3f,18,45,2a,00,00,00,\
29,10,00,00,1f,fb,0f,fb,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,00,72,\
00,6f,00,67,00,72,00,61,00,6d,00,73,00,00,00,18,00,00,00,01,48,02,00,00,46,\
02,32,00,8b,05,00,00,09,3f,0b,...
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop]
"TaskbarWinXP"=hex:0c,00,00,00,08,00,00,00,01,00,00,00,00,00,00,00,aa,4f,28,68,\
48,6a,d0,11,8c,78,00,c0,4f,d9,18,b4,fe,02,00,00,40,0d,00,00,00,00,00,00,16,\
00,00,00,00,00,00,00,00,00,00,00,16,00,00,00,00,00,00,00,01,00,00,00
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\StuckRects2]
"Settings"=hex:28,00,00,00,ff,ff,ff,ff,02,00,00,00,03,00,00,00,3e,00,00,00,1e,\
00,00,00,fe,ff,ff,ff,e4,03,00,00,02,05,00,00,02,04,00,00
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count]
"HRZR_PGYFRFFVBA"=hex:00,00,00,00,05,00,00,00,0f,00,00,00,22,07,03,00,02,00,00,\
00,09,00,00,00,c7,40,02,00,7b,00,46,00,33,00,38,00,42,00,46,00,34,00,30,00,\
34,00,2d,00,31,00,44,00,34,00,33,00,2d,00,34,00,32,00,46,00,32,00,2d,00,39,\
00,33,00,30,00,35,00,2d,00,36,00,37,00,44,00,45,00,30,00,42,00,32,00,38,00,\
46,00,43,00,32,00,33,00,7d,00,5c,00,65,00,78,00,70,00,6c,00,6f,00,72,00,65,\
00,72,00,2e,00,65,00,78,00,65,...
"Zvpebfbsg.Jvaqbjf.PbagebyCnary"=hex:00,00,00,00,00,00,00,00,10,00,00,00,7b,f4,\
02,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\
bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,00,\
00,00,00,00,00,00,00,00
"{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr"=hex:00,00,00,00,02,00,\
00,00,09,00,00,00,c7,40,02,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,\
bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\
ff,ff,ff,ff,80,a9,67,16,70,56,cc,01,00,00,00,00
"{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\gnfxzte.rkr"=hex:00,00,00,00,00,00,00,\
00,06,00,00,00,f7,5d,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\
00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\
ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"ThemeActive"="1"
[HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify]
"LastAdvertisement"=hex(
:6d,f8,e4,ac,35,57,cc,01
"UserStartTime"=hex(
:6d,38,7b,82,6c,56,cc,01
"PastIconsStream"=hex:14,00,00,00,05,00,00,00,01,00,01,00,04,00,00,00,14,00,00,\
00,49,4c,20,06,04,00,0c,00,04,00,10,00,10,00,ff,ff,ff,ff,21,00,ff,ff,ff,ff,\
ff,ff,ff,ff,42,4d,36,00,00,00,00,00,00,00,36,00,00,00,28,00,00,00,10,00,00,\
00,c0,00,00,00,01,00,20,00,00,00,00,00,00,30,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,...
"IconStreams"=hex:14,00,00,00,07,00,00,00,01,00,01,00,06,00,00,00,14,00,00,00,\
7b,00,53,00,33,00,38,00,4f,00,53,00,34,00,30,00,34,00,2d,00,31,00,51,00,34,\
00,33,00,2d,00,34,00,32,00,53,00,32,00,2d,00,39,00,33,00,30,00,35,00,2d,00,\
36,00,37,00,51,00,52,00,30,00,4f,00,32,00,38,00,53,00,50,00,32,00,33,00,7d,\
00,5c,00,72,00,6b,00,63,00,79,00,62,00,65,00,72,00,65,00,2e,00,72,00,6b,00,\
72,00,00,00,00,00,00,00,00,...
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"LoadedBefore"="1"
"LastUserLangID"="1033"
"LastLoadedDPI"="96"
"DllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,5c,\
00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,41,00,65,00,72,00,6f,00,5c,00,\
41,00,65,00,72,00,6f,00,2e,00,6d,00,73,00,73,00,74,00,79,00,6c,00,65,00,73,\
00,00,00
"ColorName"="NormalColor"
"SizeName"="NormalSize"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\Shell\Bags\1\Desktop]
"FFlags"=dword:40200224
"ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,10,\
00,00,00,00,00,00,00,00,00,00,00,04,00,00,00,18,00,00,00,30,f1,25,b7,ef,47,\
1a,10,a5,f1,02,60,8c,9e,eb,ac,0a,00,00,00,8c,00,00,00,30,f1,25,b7,ef,47,1a,\
10,a5,f1,02,60,8c,9e,eb,ac,0c,00,00,00,46,00,00,00,a6,6a,63,28,3d,95,d2,11,\
b5,d6,00,c0,4f,d9,18,d0,0b,00,00,00,69,00,00,00,30,f1,25,b7,ef,47,1a,10,a5,\
f1,02,60,8c,9e,eb,ac,0e,...
"Sort"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,30,f1,\
25,b7,ef,47,1a,10,a5,f1,02,60,8c,9e,eb,ac,0a,00,00,00,01,00,00,00
"GroupView"=dword:00000000
"GroupByKey:FMTID"="{00000000-0000-0000-0000-000000000000}"
"GroupByKey:PID"=dword:00000000
"GroupByDirection"=dword:00000001