Obscure Windows 7 File Types
Do you know all of the default Windows 7 file formats? I’ve certainly seen a few in my time, though I can’t say I’ve seen a corpus of all the samples in one place.
As Binary Gold Grand Prix 4 (BGGP4) is starting up, I’m considering a Windows based submission and it would be in my best interest to document all of these in the same place. Even if this doesn’t end up being useful for myself, I’m sure this will be useful for others over time as it gets indexed by search engines.
Let’s spin up a Windows 7 SP1 virtual machine and write some Powershell to make this reproducible. The VM I’m using comes from Microsoft’s Internet Explorer test VM’s, so it has a few additional items included such as OpenSSH, but it’s otherwise a default image. As Windwos 7 shipped with Powershell version 2.0, all below commands should be compatible if you wanted to take a peek a Windows 8, 8.1, 10, 11, etc…
File Handlers for File Name Extensions
On Windows, file handlers for file name extensions are defined within the registry under HKEY_CLASSES_ROOT.
This hive can be inspected with the GUI tool regedit, but for the purposes of this blog I’ll be using Powershell. Powershell can work with and query the Windows registry, but HKEY_CLASSES_ROOT is not available as a PS-Drive by default. It can be added with:
New-PSDrive -Name "HKCR" -PSProvider Registry -Root "HKEY_CLASSES_ROOT"
Then, we can simply query it in the typical fashion using Get-ChildItem
Get-ChildItem -Path "HKCR:\" | Select Name | Select-Object -First 10
This hive can be futher inspected to determine information about how the file extension is run or parsed. While this can provide important context for a file’s usage, the full list is quite…long. It also doesn’t tell us what the files actually look like.
Let’s take another approach with Powershell and walk the filesystem and collect some samples to see what some of these look like:
# Recurse throughout the entire C drive
Get-ChildItem -Path "C:\" -Recurse -ErrorAction SilentlyContinue |
# We only care about files, not folders
Where-Object { !$_.PSIsContainer } |
# Re-Format file object as only lowercase Extension and FullName (file path)
ForEach-Object {
New-Object PSObject -Property @{
Extension = $_.Extension.ToLower()
FullName = $_.FullName
}
} |
# Group objects by their file extension to get Counts property
Group-Object Extension |
# Re-Format grouped object so that we preserve the total count for extension,
# grab 1 FullName (file path) and Base64 encode the first 128 bytes of that file
# for a sampling
ForEach-Object {
$SamplePath = $_.Group | Select-Object -First 1 | Select-Object -ExpandProperty FullName
New-Object PSObject -Property @{
Count = $_.Count
Extension = $_.Name
FilePath = $SamplePath
Sniffed = [convert]::ToBase64String((Get-Content -path $SamplePath -Encoding byte -TotalCount 128))
}
} |
# Drop all of the weird .exe_82askc extensions as part of winsxs
Where-Object { $_.Count -gt 1 } |
# Sort with "most rare" at the top
Sort-Object -Property Count |
# Export objects to CSV for use in this blog
Export-Csv -Path .\forblog.csv -NoTypeInformation
Where The “Magic” Happens
Below this section are the results produced from the above script. You’ll no doubt notice some commonalities across various file extensions in the starting bytes. These are often file signatures (also referred to as “magic numbers”) which are often used to identify a file type.
There are many tools to identify these such as the file command under *nix systems, but for a quick start you can reference the following table:
Enjoy a quick peek into the beauty of Windows computing. From the MZ for the DOS MZ executable and it’s oft used <?xml eXtensible Markup Language companion files, to the rare XEX2 Xbox 360 executable format utilized in the bootstrapping process for streaming media from Windows Media Center.
Extension .template, Count 2
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\i18n\translation.template
00000000: EF BB BF 3B 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ...;------------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000050: 2D 2D 0D 0A 3B 20 55 6C 74 72 61 44 65 66 72 61 --..; UltraDefra
00000060: 67 20 47 55 49 20 7B 52 65 70 6C 61 63 65 20 62 g GUI {Replace b
00000070: 79 20 4C 61 6E 67 75 61 67 65 20 4E 61 6D 65 7D y Language Name}
Extension .luar, Count 2
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\reports\fraglist_c.luar
00000000: 2D 2D 20 55 6C 74 72 61 44 65 66 72 61 67 20 72 -- UltraDefrag r
00000010: 65 70 6F 72 74 20 66 6F 72 20 64 69 73 6B 20 43 eport for disk C
00000020: 3A 0D 0A 0D 0A 66 6F 72 6D 61 74 5F 76 65 72 73 :....format_vers
00000030: 69 6F 6E 20 3D 20 37 0D 0A 0D 0A 76 6F 6C 75 6D ion = 7....volum
00000040: 65 5F 6C 65 74 74 65 72 20 3D 20 22 43 22 0D 0A e_letter = "C"..
00000050: 63 6F 6D 70 75 74 65 72 5F 6E 61 6D 65 20 3D 20 computer_name =
00000060: 22 49 45 57 49 4E 37 22 0D 0A 0D 0A 63 75 72 72 "IEWIN7"....curr
00000070: 65 6E 74 5F 74 69 6D 65 20 3D 20 7B 0D 0A 09 79 ent_time = {...y
Extension .003, Count 2
C:\Windows\System32\LogFiles\AIT\AitEventLog.etl.003
00000000: 00 04 00 00 00 00 00 00 00 02 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 08 04 00 03 00 00 00 ................
00000030: 00 02 00 00 01 00 04 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 02 00 01 C0 B2 01 00 00 ................
00000050: 78 00 00 00 04 00 00 00 FD 15 7A 00 00 00 00 00 x.........z.....
00000060: 00 00 00 00 00 00 00 00 00 04 00 00 06 01 01 05 ................
00000070: B0 1D 00 00 01 00 00 00 F0 59 24 14 31 84 D3 01 .........Y$.1...
Extension .ds, Count 2
C:\Windows\twain_32\wiatwain.ds
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 E8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .ecf, Count 2
C:\Windows\addins\FXSEXT.ecf
00000000: 5B 47 65 6E 65 72 61 6C 5D 0D 0A 44 69 73 70 6C [General]..Displ
00000010: 61 79 20 4E 61 6D 65 3D 3C 44 69 73 70 6C 61 79 ay Name=<Display
00000020: 4E 61 6D 65 3E 0D 0A 44 65 73 63 72 69 70 74 69 Name>..Descripti
00000030: 6F 6E 3D 3C 44 65 73 63 72 69 70 74 69 6F 6E 3E on=<Description>
00000040: 0D 0A 47 55 49 44 3D 7B 41 39 43 45 43 41 32 34 ..GUID={A9CECA24
00000050: 2D 39 46 33 31 2D 31 31 64 32 2D 39 31 32 45 2D -9F31-11d2-912E-
00000060: 30 30 36 30 39 34 45 42 36 33 30 42 7D 0D 0A 50 006094EB630B}..P
00000070: 61 74 68 3D 22 66 78 73 65 78 74 33 32 2E 64 6C ath="fxsext32.dl
Extension .contact, Count 2
C:\Program Files\OpenSSH\home\IEUser\Contacts\IEUser.contact
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 55 54 .0" encoding="UT
00000020: 46 2D 38 22 3F 3E 0D 0A 3C 63 3A 63 6F 6E 74 61 F-8"?>..<c:conta
00000030: 63 74 20 63 3A 56 65 72 73 69 6F 6E 3D 22 31 22 ct c:Version="1"
00000040: 20 78 6D 6C 6E 73 3A 63 3D 22 68 74 74 70 3A 2F xmlns:c="http:/
00000050: 2F 73 63 68 65 6D 61 73 2E 6D 69 63 72 6F 73 6F /schemas.microso
00000060: 66 74 2E 63 6F 6D 2F 43 6F 6E 74 61 63 74 22 20 ft.com/Contact"
00000070: 78 6D 6C 6E 73 3A 78 73 69 3D 22 68 74 74 70 3A xmlns:xsi="http:
Extension .002, Count 2
C:\Windows\System32\LogFiles\AIT\AitEventLog.etl.002
00000000: 00 04 00 00 00 00 00 00 00 02 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 08 04 00 03 00 00 00 ................
00000030: 00 02 00 00 01 00 04 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 02 00 01 C0 B2 01 00 00 ................
00000050: 94 00 00 00 04 00 00 00 89 79 39 0D 00 00 00 00 .........y9.....
00000060: 00 00 00 00 00 00 00 00 00 04 00 00 06 01 01 05 ................
00000070: B0 1D 00 00 04 00 00 00 4D 28 33 80 3F 04 CA 01 ........M(3.?...
Extension .dls, Count 2
C:\Windows\System32\drivers\gm.dls
00000000: 52 49 46 46 0C 80 34 00 44 4C 53 20 63 6F 6C 68 RIFF..4.DLS colh
00000010: 04 00 00 00 EB 00 00 00 76 65 72 73 08 00 00 00 ........vers....
00000020: 00 00 01 00 02 00 10 00 6D 73 79 6E 04 00 00 00 ........msyn....
00000030: 01 00 00 00 4C 49 53 54 EE 3D 04 00 6C 69 6E 73 ....LIST.=..lins
00000040: 4C 49 53 54 FA 04 00 00 69 6E 73 20 69 6E 73 68 LIST....ins insh
00000050: 0C 00 00 00 0A 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 4C 49 53 54 C4 03 00 00 6C 72 67 6E 4C 49 53 54 LIST....lrgnLIST
00000070: 58 00 00 00 72 67 6E 20 72 67 6E 68 0C 00 00 00 X...rgn rgnh....
Extension .hxx, Count 2
C:\Windows\inf\ESENT\esentprf.hxx
00000000: 2F 2A 20 20 4D 61 63 68 69 6E 65 20 67 65 6E 65 /* Machine gene
00000010: 72 61 74 65 64 20 73 79 6D 62 6F 6C 20 66 69 6C rated symbol fil
00000020: 65 20 22 65 73 65 6E 74 70 72 66 2E 68 78 78 22 e "esentprf.hxx"
00000030: 20 66 72 6F 6D 20 22 70 65 72 66 64 61 74 61 2E from "perfdata.
00000040: 74 78 74 22 20 2A 2F 0D 0A 0D 0A 0D 0A 23 64 65 txt" */......#de
00000050: 66 69 6E 65 20 45 53 45 20 30 0D 0A 23 64 65 66 fine ESE 0..#def
00000060: 69 6E 65 20 50 61 67 65 73 43 6F 6E 76 65 72 74 ine PagesConvert
00000070: 65 64 53 65 63 20 32 0D 0A 23 64 65 66 69 6E 65 edSec 2..#define
Extension .1, Count 2
C:\Windows\System32\DriverStore\INFCACHE.1
00000000: 01 00 00 00 09 04 00 00 00 00 00 00 08 0E 17 00 ................
00000010: 28 00 00 00 9C BF 11 00 C8 BF 11 00 CC 6C 00 00 (............l..
00000020: 98 2C 12 00 2E 9C 00 00 08 18 00 00 AC 4C 0E 00 .,...........L..
00000030: C0 BD 05 00 68 AC 0E 00 48 50 0E 00 60 82 01 00 ....h...HP..`...
00000040: F4 07 00 00 F8 C1 02 00 7C DF 06 00 54 EB 06 00 ........|...T...
00000050: 5C 84 02 00 84 62 00 00 2C 20 08 00 84 C1 01 00 \....b.., ......
00000060: FC 21 11 00 EC 98 10 00 FC 3D 0E 00 AC 22 11 00 .!.......=..."..
00000070: 4C 2F 0E 00 00 72 04 00 20 2D 0E 00 24 63 0E 00 L/...r.. -..$c..
Extension .s3, Count 2
C:\Windows\System32\DriverStore\FileRepository\atiriolh.inf_x86_neutral_cdb610d99bcbc631\CTRL.s3
00000000: 53 33 32 35 39 46 43 30 30 30 30 30 30 31 30 30 S3259FC000000100
00000010: 31 41 32 34 43 30 42 46 30 31 33 43 46 43 30 36 1A24C0BF013CFC06
00000020: 32 31 33 34 30 30 30 30 33 41 41 43 30 46 30 30 213400003AAC0F00
00000030: 30 30 30 30 30 30 36 30 31 42 34 30 30 30 30 30 000000601B400000
00000040: 30 30 30 30 30 30 30 30 30 30 30 30 37 39 0D 0A 00000000000079..
00000050: 53 33 32 35 39 46 43 30 30 30 32 30 30 30 30 30 S3259FC000200000
00000060: 30 30 30 30 30 38 30 30 30 31 33 43 32 34 44 38 00000800013C24D8
00000070: 36 31 30 33 30 36 30 30 36 30 31 33 30 30 30 30 6103060060130000
Extension .stp, Count 2
C:\Windows\Help\Help\en-US\stopwrds.stp
00000000: FF FE 61 00 0D 00 0A 00 61 00 66 00 74 00 65 00 ..a.....a.f.t.e.
00000010: 72 00 0D 00 0A 00 61 00 67 00 61 00 69 00 6E 00 r.....a.g.a.i.n.
00000020: 73 00 74 00 0D 00 0A 00 61 00 6C 00 6C 00 0D 00 s.t.....a.l.l...
00000030: 0A 00 61 00 6C 00 6F 00 6E 00 67 00 0D 00 0A 00 ..a.l.o.n.g.....
00000040: 61 00 6C 00 73 00 6F 00 0D 00 0A 00 61 00 6C 00 a.l.s.o.....a.l.
00000050: 74 00 68 00 6F 00 75 00 67 00 68 00 0D 00 0A 00 t.h.o.u.g.h.....
00000060: 61 00 6D 00 0D 00 0A 00 61 00 6D 00 6F 00 6E 00 a.m.....a.m.o.n.
00000070: 67 00 0D 00 0A 00 61 00 6E 00 0D 00 0A 00 61 00 g.....a.n.....a.
Extension .tha, Count 2
C:\Windows\System32\NOISE.THA
00000000: 61 62 6F 75 74 0D 0A 31 0D 0A 61 66 74 65 72 0D about..1..after.
00000010: 0A 32 0D 0A 61 6C 6C 0D 0A 61 6C 73 6F 0D 0A 33 .2..all..also..3
00000020: 0D 0A 61 6E 0D 0A 34 0D 0A 61 6E 64 0D 0A 35 0D ..an..4..and..5.
00000030: 0A 61 6E 6F 74 68 65 72 0D 0A 36 0D 0A 61 6E 79 .another..6..any
00000040: 0D 0A 37 0D 0A 61 72 65 0D 0A 38 0D 0A 61 73 0D ..7..are..8..as.
00000050: 0A 39 0D 0A 61 74 0D 0A 30 0D 0A 62 65 0D 0A 24 .9..at..0..be..$
00000060: 0D 0A 62 65 63 61 75 73 65 0D 0A 62 65 65 6E 0D ..because..been.
00000070: 0A 62 65 66 6F 72 65 0D 0A 62 65 69 6E 67 0D 0A .before..being..
Extension .chs, Count 2
C:\Windows\System32\NOISE.CHS
00000000: FF FE 3F 00 61 00 62 00 6F 00 75 00 74 00 0D 00 ..?.a.b.o.u.t...
00000010: 0A 00 24 00 20 00 31 00 20 00 32 00 20 00 33 00 ..$. .1. .2. .3.
00000020: 20 00 34 00 20 00 35 00 20 00 36 00 20 00 37 00 .4. .5. .6. .7.
00000030: 20 00 38 00 20 00 39 00 20 00 30 00 20 00 5F 00 .8. .9. .0. ._.
00000040: 0D 00 0A 00 61 00 20 00 62 00 20 00 63 00 20 00 ....a. .b. .c. .
00000050: 64 00 20 00 65 00 20 00 66 00 20 00 67 00 20 00 d. .e. .f. .g. .
00000060: 68 00 20 00 69 00 20 00 6A 00 20 00 6B 00 20 00 h. .i. .j. .k. .
00000070: 6C 00 20 00 6D 00 20 00 6E 00 20 00 6F 00 20 00 l. .m. .n. .o. .
Extension .wsf, Count 2
C:\Windows\System32\manage-bde.wsf
00000000: 3C 70 61 63 6B 61 67 65 3E 0D 0A 3C 6A 6F 62 20 <package>..<job
00000010: 69 64 3D 22 6D 61 6E 61 67 65 2D 62 64 65 22 3E id="manage-bde">
00000020: 0D 0A 3C 73 63 72 69 70 74 20 6C 61 6E 67 75 61 ..<script langua
00000030: 67 65 3D 22 56 42 53 63 72 69 70 74 22 3E 0D 0A ge="VBScript">..
00000040: 0D 0A 27 4E 4F 54 45 3A 20 6D 61 6E 61 67 65 2D ..'NOTE: manage-
00000050: 62 64 65 2E 77 73 66 20 68 61 73 20 62 65 65 6E bde.wsf has been
00000060: 20 72 65 70 6C 61 63 65 64 2E 20 50 6C 65 61 73 replaced. Pleas
00000070: 65 20 75 73 65 20 74 68 65 20 72 65 70 6C 61 63 e use the replac
Extension .cht, Count 2
C:\Windows\System32\NOISE.CHT
00000000: FF FE 3F 00 61 00 62 00 6F 00 75 00 74 00 0D 00 ..?.a.b.o.u.t...
00000010: 0A 00 24 00 20 00 31 00 20 00 32 00 20 00 33 00 ..$. .1. .2. .3.
00000020: 20 00 34 00 20 00 35 00 20 00 36 00 20 00 37 00 .4. .5. .6. .7.
00000030: 20 00 38 00 20 00 39 00 20 00 30 00 20 00 5F 00 .8. .9. .0. ._.
00000040: 0D 00 0A 00 61 00 20 00 62 00 20 00 63 00 20 00 ....a. .b. .c. .
00000050: 64 00 20 00 65 00 20 00 66 00 20 00 67 00 20 00 d. .e. .f. .g. .
00000060: 68 00 20 00 69 00 20 00 6A 00 20 00 6B 00 20 00 h. .i. .j. .k. .
00000070: 6C 00 20 00 6D 00 20 00 6E 00 20 00 6F 00 20 00 l. .m. .n. .o. .
Extension .kor, Count 2
C:\Windows\System32\noise.kor
00000000: FF FE 61 00 62 00 6F 00 75 00 74 00 0D 00 0A 00 ..a.b.o.u.t.....
00000010: 31 00 0D 00 0A 00 61 00 66 00 74 00 65 00 72 00 1.....a.f.t.e.r.
00000020: 0D 00 0A 00 32 00 0D 00 0A 00 61 00 6C 00 6C 00 ....2.....a.l.l.
00000030: 0D 00 0A 00 61 00 6C 00 73 00 6F 00 0D 00 0A 00 ....a.l.s.o.....
00000040: 33 00 0D 00 0A 00 61 00 6E 00 0D 00 0A 00 34 00 3.....a.n.....4.
00000050: 0D 00 0A 00 61 00 6E 00 64 00 0D 00 0A 00 35 00 ....a.n.d.....5.
00000060: 0D 00 0A 00 61 00 6E 00 6F 00 74 00 68 00 65 00 ....a.n.o.t.h.e.
00000070: 72 00 0D 00 0A 00 36 00 0D 00 0A 00 61 00 6E 00 r.....6.....a.n.
Extension .jpn, Count 2
C:\Windows\System32\noise.jpn
00000000: FF FE 3F 00 61 00 62 00 6F 00 75 00 74 00 0D 00 ..?.a.b.o.u.t...
00000010: 0A 00 24 00 20 00 31 00 20 00 32 00 20 00 33 00 ..$. .1. .2. .3.
00000020: 20 00 34 00 20 00 35 00 20 00 36 00 20 00 37 00 .4. .5. .6. .7.
00000030: 20 00 38 00 20 00 39 00 20 00 30 00 20 00 5F 00 .8. .9. .0. ._.
00000040: 0D 00 0A 00 61 00 20 00 62 00 20 00 63 00 20 00 ....a. .b. .c. .
00000050: 64 00 20 00 65 00 20 00 66 00 20 00 67 00 20 00 d. .e. .f. .g. .
00000060: 68 00 20 00 69 00 20 00 6A 00 20 00 6B 00 20 00 h. .i. .j. .k. .
00000070: 6C 00 20 00 6D 00 20 00 6E 00 20 00 6F 00 20 00 l. .m. .n. .o. .
Extension .xst, Count 2
C:\Windows\System32\DriverStore\FileRepository\wiaxx002.inf_x86_neutral_47abc82fbe682ba5\xrWPdeft.xst
00000000: 23 0D 0A 23 09 44 45 46 41 55 4C 54 2E 58 53 54 #..#.DEFAULT.XST
00000010: 09 31 2E 31 32 0D 0A 23 09 31 33 3A 33 37 3A 34 .1.12..#.13:37:4
00000020: 35 09 30 39 2F 32 37 2F 30 32 0D 0A 23 09 31 36 5.09/27/02..#.16
00000030: 3A 30 39 3A 30 35 09 30 33 2F 31 36 2F 30 30 0D :09:05.03/16/00.
00000040: 0A 23 0D 0A 23 09 44 65 73 63 72 69 70 74 69 6F .#..#.Descriptio
00000050: 6E 3A 0D 0A 23 09 09 54 68 69 73 20 66 69 6C 65 n:..#..This file
00000060: 20 69 73 20 74 68 65 20 64 65 66 61 75 6C 74 20 is the default
00000070: 74 65 6D 70 6C 61 74 65 20 66 69 6C 65 20 66 6F template file fo
Extension .dcf, Count 2
C:\Windows\ehome\CreateDisc\Pconfig.dcf
00000000: E2 00 7C B3 0B 4A 95 AE AA F1 30 6F D7 F8 F0 25 ..|..J....0o...%
00000010: D9 12 62 9C EE 19 3E 73 99 D2 22 5C D0 ED 32 7D ..b...>s.."\..2}
00000020: AC DC F4 29 C7 00 50 8A 86 B2 F7 2B 84 CE 0B 38 ...)..P....+...8
00000030: A5 BA FF 71 E7 0D 4E 7A 42 77 02 32 9F DE 24 46 ...q..NzBw.2..$F
00000040: 3F 53 98 09 7F B5 FE 31 1B 65 9B CB 38 77 BD DF ?S.....1.e..8w..
00000050: 4D 61 A6 21 87 C4 01 3F 2A 73 A9 D9 46 85 CB ED Ma.!...?*s..F...
00000060: 1F 33 78 F3 4F 90 DF 21 F2 38 7D B6 1D 4A 8B C6 .3x.O..!.8}..J..
00000070: 4B 8B CF F1 49 5D A2 1D 0B 4A 85 B9 2B 4D 89 9D K...I]...J..+M..
Extension .uaq, Count 2
C:\Windows\Panther\actionqueue\oobeSystem.uaq
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 3F 3E 0D 0A 3C 61 63 74 69 6F 6E 73 3E .0"?>..<actions>
00000020: 0D 0A 20 20 20 20 3C 61 63 74 69 6F 6E 20 69 6E .. <action in
00000030: 64 65 78 3D 22 30 22 0D 0A 20 20 20 20 20 20 20 dex="0"..
00000040: 20 20 20 20 20 63 6F 6D 6D 61 6E 64 3D 22 43 3A command="C:
00000050: 5C 57 69 6E 64 6F 77 73 5C 53 59 53 54 45 4D 33 \Windows\SYSTEM3
00000060: 32 5C 52 55 4E 44 4C 4C 33 32 2E 45 58 45 22 0D 2\RUNDLL32.EXE".
00000070: 0A 20 20 20 20 20 20 20 20 20 20 20 20 61 72 67 . arg
Extension .ird, Count 2
C:\Windows\ehome\ehcir.ird
00000000: 7F 31 F3 48 CD CE 66 33 FB D8 DE 6E 05 6F 45 94 .1.H..f3...n.oE.
00000010: E4 A3 1E 7A DD 07 C4 2F 98 BB C7 64 F2 DB 3E A8 ...z.../...d..>.
00000020: 48 A7 D3 DD A6 6A 27 8A AE CC 3F 8D A0 D4 2C B0 H....j'...?...,.
00000030: 1D D7 EC D3 9F F8 6B 32 B4 78 2F FD 43 37 51 AF ......k2.x/.C7Q.
00000040: 30 9D 06 91 AE D5 6C 89 C9 6F 01 0A F2 EF EE 05 0.....l..o......
00000050: E0 56 43 06 E8 1A AF 82 80 EF 81 76 17 F6 C3 29 .VC........v...)
00000060: 73 D4 D7 27 D8 1C D4 7E E4 D6 24 6E A8 F4 39 D9 s..'...~..$n..9.
00000070: 81 24 C5 7D 19 37 1A 07 AB 08 50 E2 EC CA 3B 0C .$.}.7....P...;.
Extension .001, Count 2
C:\Windows\System32\LogFiles\AIT\AitEventLog.etl.001
00000000: 00 04 00 00 00 00 00 00 00 02 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 08 04 00 03 00 00 00 ................
00000030: 00 02 00 00 01 00 04 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 02 00 01 C0 B2 01 00 00 ................
00000050: 78 00 00 00 04 00 00 00 CE A1 75 00 00 00 00 00 x.........u.....
00000060: 00 00 00 00 00 00 00 00 00 04 00 00 06 01 01 05 ................
00000070: B0 1D 00 00 01 00 00 00 E0 A6 F3 AC 3C 84 D3 01 ............<...
Extension .que, Count 2
C:\Windows\Panther\MainQueueOnline0.que
00000000: 64 00 00 00 14 00 00 00 00 00 00 00 00 00 00 00 d...............
00000010: 01 00 00 00 52 00 00 00 32 00 00 00 04 00 00 00 ....R...2.......
00000020: 52 00 00 00 18 00 00 00 53 00 45 00 51 00 20 00 R.......S.E.Q. .
00000030: 43 00 6F 00 6E 00 74 00 72 00 6F 00 6C 00 00 00 C.o.n.t.r.o.l...
00000040: 1A 00 00 00 4D 00 6F 00 64 00 75 00 6C 00 65 00 ....M.o.d.u.l.e.
00000050: 4C 00 6F 00 61 00 64 00 65 00 72 00 00 00 1E 00 L.o.a.d.e.r.....
00000060: 00 00 49 00 6E 00 69 00 74 00 69 00 61 00 6C 00 ..I.n.i.t.i.a.l.
00000070: 69 00 7A 00 61 00 74 00 69 00 6F 00 6E 00 00 00 i.z.a.t.i.o.n...
Extension .dub, Count 2
C:\Windows\Globalization\ELS\SpellDictionaries\MsSp7en.dub
00000000: 12 E2 91 77 50 94 5D 56 CE 35 13 84 2C E2 A7 77 ...wP.]V.5..,..w
00000010: 63 94 23 56 FD 35 18 84 2B E2 BB 77 4A 94 5D 56 c.#V.5..+..wJ.]V
00000020: DD 35 18 84 28 E2 B0 77 1E 94 18 56 89 35 70 84 .5..(..w...V.5p.
00000030: 08 E2 B6 77 5C 94 46 56 C8 35 0E 84 28 E2 B6 77 ...w\.FV.5..(..w
00000040: 5F 94 4D 56 9B 35 09 84 69 E2 E5 77 0B 94 23 56 _.MV.5..i..w..#V
00000050: FD 35 17 84 28 E2 B8 77 59 94 48 56 9C 35 4B 84 .5..(..wY.HV.5K.
00000060: 7C E2 DE 77 7F 94 44 56 DD 35 16 84 2E E2 B5 77 |..w..DV.5.....w
00000070: 19 94 5A 56 9C 35 4B 84 7C E2 DE 77 7F 94 42 56 ..ZV.5K.|..w..BV
Extension .t4, Count 2
C:\Windows\System32\DriverStore\FileRepository\avmisdnc.inf_x86_neutral_e8031e434b323b61\b1.t4
00000000: F0 B4 D1 D1 D1 24 F2 71 E0 24 F2 21 FC 24 F2 21 .....$.q.$.!.$.!
00000010: F8 61 4C 21 FB D0 16 23 FF F0 C0 C0 F5 23 F4 D4 .aL!...#.....#..
00000020: 4E 21 FB D5 75 74 75 FC D5 75 74 F0 24 FA 74 F6 N!..utu..ut.$.t.
00000030: 20 74 75 F5 23 FF F0 C0 C0 F5 23 F4 23 FC 60 BA tu.#.....#.#.`.
00000040: 28 0F 20 20 20 00 00 00 00 07 42 54 4C 01 00 00 (. .....BTL...
00000050: 0B 62 31 63 62 61 73 65 2E 63 66 62 00 00 00 00 .b1cbase.cfb....
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .acl, Count 2
C:\Windows\Globalization\ELS\SpellDictionaries\MsSp7en.acl
00000000: FF FE 61 00 62 00 62 00 6F 00 75 00 74 00 7C 00 ..a.b.b.o.u.t.|.
00000010: 61 00 62 00 6F 00 75 00 74 00 0D 00 0A 00 61 00 a.b.o.u.t.....a.
00000020: 62 00 6F 00 74 00 75 00 7C 00 61 00 62 00 6F 00 b.o.t.u.|.a.b.o.
00000030: 75 00 74 00 0D 00 0A 00 61 00 62 00 6F 00 75 00 u.t.....a.b.o.u.
00000040: 74 00 61 00 7C 00 61 00 62 00 6F 00 75 00 74 00 t.a.|.a.b.o.u.t.
00000050: 20 00 61 00 0D 00 0A 00 61 00 62 00 6F 00 75 00 .a.....a.b.o.u.
00000060: 74 00 69 00 74 00 7C 00 61 00 62 00 6F 00 75 00 t.i.t.|.a.b.o.u.
00000070: 74 00 20 00 69 00 74 00 0D 00 0A 00 61 00 62 00 t. .i.t.....a.b.
Extension .xex, Count 2
C:\Windows\ehome\MCX\X02\XboxMCX-V.XEX
00000000: 58 45 58 32 00 00 00 01 00 00 40 00 00 00 00 00 XEX2......@.....
00000010: 00 00 01 08 00 00 00 0E 00 00 02 FF 00 00 19 3C ...............<
00000020: 00 00 03 FF 00 00 19 C0 00 01 01 00 92 17 DE 20 ...............
00000030: 00 01 02 01 92 00 00 00 00 01 03 FF 00 00 38 A8 ..............8.
00000040: 00 01 80 02 00 00 19 E4 00 01 83 FF 00 00 19 EC ................
00000050: 00 02 00 FF 00 00 1A 00 00 02 01 04 00 00 1A C4 ................
00000060: 00 02 02 00 00 01 00 00 00 03 00 00 00 08 01 69 ...............i
00000070: 00 04 00 06 00 00 1A D4 00 04 04 04 00 00 1A EC ................
Extension .hpi, Count 2
C:\Windows\System32\DriverStore\FileRepository\prnhp002.inf_x86_neutral_e6daa9c39ac001a3\I386\HPEACLHN.HPI
00000000: 3B 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ;***************
00000010: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000020: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000030: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000040: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 0D 0A 3B 2A 0D 0A **********..;*..
00000050: 3B 2A 09 47 65 6E 65 72 61 6C 20 53 65 63 74 69 ;*.General Secti
00000060: 6F 6E 0D 0A 3B 2A 0D 0A 3B 2A 2A 2A 2A 2A 2A 2A on..;*..;*******
00000070: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
Extension .unt, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UNT
00000000: 01 00 00 00 00 01 00 00 05 01 00 00 00 00 00 00 ................
00000010: 14 05 00 00 43 6D 02 00 00 00 00 00 00 00 00 00 ....Cm..........
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .wih, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.WIH
00000000: 00 00 00 00 03 00 00 00 80 3E 00 00 02 00 01 00 .........>......
00000010: 80 E1 80 E1 63 60 5B 59 5A 55 5C 57 53 53 3E 53 ....c`[YZU\WSS>S
00000020: 54 53 54 53 54 54 54 54 53 53 53 53 50 54 53 54 TSTSTTTTSSSSPTST
00000030: 51 51 4E 54 4E 4D 53 4F 4B 4D 4B 4E 49 47 49 49 QQNTNMSOKMKNIGII
00000040: 45 43 44 44 42 41 47 43 43 44 41 45 45 4B 45 34 ECDDBAGCCDAEEKE4
00000050: 3B 43 45 3E 41 80 E6 56 41 3C 4B 4F 58 5B 5C 5B ;CE>A..VA<KOX[\[
00000060: 5B 5C 5D 6E 5E 51 4C 51 50 52 52 52 55 51 55 55 [\]n^QLQPRRRUQUU
00000070: 55 56 56 56 57 57 57 57 57 58 57 58 57 57 57 55 UVVVWWWWWXWXWWWU
Extension .udt, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UDT
00000000: 55 44 54 00 01 00 00 00 04 01 00 00 09 04 1C 00 UDT.............
00000010: 00 00 00 00 11 11 00 00 00 00 00 00 08 00 00 00 ................
00000020: 0C 00 00 00 09 04 1D 00 0E 00 00 00 11 11 00 00 ................
00000030: 00 00 00 00 16 00 00 00 1C 00 00 00 09 04 1E 00 ................
00000040: 20 00 00 00 11 11 00 00 00 00 00 00 28 00 00 00 ...........(...
00000050: 2E 00 00 00 09 04 1F 00 32 00 00 00 11 11 00 00 ........2.......
00000060: 00 00 00 00 3A 00 00 00 40 00 00 00 09 04 20 00 ....:...@..... .
00000070: 44 00 00 00 11 11 00 00 00 00 00 00 4C 00 00 00 D...........L...
Extension .lts, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.LTS
00000000: EC 00 00 00 1C 00 00 00 00 00 00 00 02 00 00 00 ................
00000010: 04 00 00 00 06 00 00 00 08 00 00 00 0A 00 00 00 ................
00000020: 0C 00 00 00 0E 00 00 00 10 00 00 00 12 00 00 00 ................
00000030: 14 00 00 00 16 00 00 00 18 00 00 00 1A 00 00 00 ................
00000040: 1C 00 00 00 1E 00 00 00 20 00 00 00 22 00 00 00 ........ ..."...
00000050: 24 00 00 00 26 00 00 00 28 00 00 00 2A 00 00 00 $...&...(...*...
00000060: 2C 00 00 00 2E 00 00 00 30 00 00 00 32 00 00 00 ,.......0...2...
00000070: 34 00 00 00 36 00 00 00 70 00 00 00 40 00 00 00 4...6...p...@...
Extension .tts, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.TTS
00000000: C3 45 B5 12 03 30 D3 11 9C 26 00 C0 4F 8E F8 7C .E...0...&..O..|
00000010: 44 E4 6F 37 28 30 D3 11 9C 26 00 C0 4F 8E F8 7C D.o7(0...&..O..|
00000020: 09 04 00 00 71 5D 02 00 AE 5F 02 00 00 03 00 00 ....q]..._......
00000030: 25 CA 02 00 18 00 00 00 58 9B E5 00 20 01 00 00 %.......X... ...
00000040: D4 01 00 00 9E 00 00 00 1C 00 00 00 37 00 00 00 ............7...
00000050: 36 00 00 00 27 00 63 00 61 00 75 00 73 00 65 00 6...'.c.a.u.s.e.
00000060: 00 00 6F 00 72 00 6D 00 67 00 69 00 6E 00 74 00 ..o.r.m.g.i.n.t.
00000070: 68 00 6C 00 77 00 78 00 66 00 62 00 6B 00 64 00 h.l.w.x.f.b.k.d.
Extension .hit, Count 2
C:\Windows\rescache\rc0003\ResCache.hit
00000000: 52 45 53 43 48 49 54 00 01 00 00 00 08 02 00 00 RESCHIT.........
00000010: E0 79 F6 6D 35 84 D3 01 00 00 00 00 00 00 00 00 .y.m5...........
00000020: 00 00 00 00 00 00 00 00 E0 79 F6 6D 35 84 D3 01 .........y.m5...
00000030: E0 79 F6 6D 35 84 D3 01 E0 79 F6 6D 35 84 D3 01 .y.m5....y.m5...
00000040: E0 79 F6 6D 35 84 D3 01 E0 79 F6 6D 35 84 D3 01 .y.m5....y.m5...
00000050: E0 79 F6 6D 35 84 D3 01 E0 79 F6 6D 35 84 D3 01 .y.m5....y.m5...
00000060: E0 79 F6 6D 35 84 D3 01 E0 79 F6 6D 35 84 D3 01 .y.m5....y.m5...
00000070: E0 79 F6 6D 35 84 D3 01 E0 79 F6 6D 35 84 D3 01 .y.m5....y.m5...
Extension .grl, Count 2
C:\Windows\winsxs\x86_microsoft-windows-mfgrl_31bf3856ad364e35_6.1.7600.16385_none_5939172243b7538b\Active.GRL
00000000: 4D 00 53 00 47 00 52 00 4C 00 00 00 01 00 00 00 M.S.G.R.L.......
00000010: A0 DB 25 85 ED F6 C5 01 03 00 00 00 02 00 00 00 ..%.............
00000020: 01 00 00 00 58 00 00 00 02 00 00 00 01 00 00 00 ....X...........
00000030: 01 00 00 00 03 00 00 00 E4 00 00 00 02 00 00 00 ................
00000040: 04 21 00 00 01 00 00 00 00 00 00 00 01 00 00 00 .!..............
00000050: 4C 21 00 00 E4 2D 00 00 4A 5B 2F 3D 8E 6F 33 94 L!...-..J[/=.o3.
00000060: 83 9D 5B 3B 23 94 8D 4E 5A BD 7E DF DE 67 FB F4 ..[;#..NZ.~..g..
00000070: CE D6 7F 9B 4A F7 DC 4B 7A E6 FD 4B 97 A6 44 64 ....J..Kz..K..Dd
Extension .zfsendtotarget, Count 2
C:\Windows\winsxs\x86_microsoft-windows-zipfldr_31bf3856ad364e35_6.1.7600.16385_none_77dca05f969c1c0c\Compressed (zipped) Folder.ZFSendToTarget
00000000: 5A 69 70 Zip
Extension .prm, Count 2
C:\Windows\winsxs\x86_subsystem-for-unix-based-applications_31bf3856ad364e35_6.1.7600.16385_none_73beade95143314a\BaseU.prm
00000000: 62 69 6E 09 30 37 37 35 09 41 64 6D 69 6E 69 73 bin.0775.Adminis
00000010: 74 72 61 74 6F 72 09 41 64 6D 69 6E 69 73 74 72 trator.Administr
00000020: 61 74 6F 72 73 0D 0A 63 6F 6D 6D 6F 6E 09 30 37 ators..common.07
00000030: 37 35 09 41 64 6D 69 6E 69 73 74 72 61 74 6F 72 75.Administrator
00000040: 09 41 64 6D 69 6E 69 73 74 72 61 74 6F 72 73 0D .Administrators.
00000050: 0A 64 65 76 09 30 37 37 35 09 41 64 6D 69 6E 69 .dev.0775.Admini
00000060: 73 74 72 61 74 6F 72 09 41 64 6D 69 6E 69 73 74 strator.Administ
00000070: 72 61 74 6F 72 73 0D 0A 65 74 63 09 30 37 37 35 rators..etc.0775
Extension .dnl, Count 2
C:\Windows\winsxs\x86_subsystem-for-unix-based-applications_31bf3856ad364e35_6.1.7600.16385_none_73beade95143314a\BaseU.dnl
00000000: 65 74 63 5C 68 6F 73 74 73 09 25 53 79 73 74 65 etc\hosts.%Syste
00000010: 6D 52 6F 6F 74 25 5C 73 79 73 74 65 6D 33 32 5C mRoot%\system32\
00000020: 64 72 69 76 65 72 73 5C 65 74 63 5C 68 6F 73 74 drivers\etc\host
00000030: 73 0D 0A 65 74 63 5C 70 72 6F 74 6F 63 6F 6C 73 s..etc\protocols
00000040: 09 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 .%SystemRoot%\sy
00000050: 73 74 65 6D 33 32 5C 64 72 69 76 65 72 73 5C 65 stem32\drivers\e
00000060: 74 63 5C 70 72 6F 74 6F 63 6F 6C 0D 0A 65 74 63 tc\protocol..etc
00000070: 5C 73 65 72 76 69 63 65 73 09 25 53 79 73 74 65 \services.%Syste
Extension .crt, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CRT
00000000: 48 FD 07 00 00 01 00 00 F8 0D 00 00 F8 0E 00 00 H...............
00000010: 04 01 00 00 00 00 00 00 28 1B 00 00 00 93 02 01 ........(.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .csd, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CSD
00000000: 7F B9 42 7B 0E 3D EC B4 8E 78 F5 11 4B 71 A1 5F ..B{.=...x..Kq._
00000010: 51 5A 61 E5 01 D8 BB 52 85 E6 E4 5E 02 E8 26 DB QZa....R...^..&.
00000020: BE E5 82 C6 A8 2A D7 F5 EF A0 59 2C AD EF 80 69 .....*....Y,...i
00000030: AE EB 37 6F B1 7D 69 BD CA 25 B2 D2 4C F6 3E EA ..7o.}i..%..L.>.
00000040: D7 18 6D 94 A9 B1 69 E8 86 41 E9 0D B3 91 2F 3A ..m...i..A..../:
00000050: 59 31 86 5E 4A DA 57 19 70 AA 34 E7 65 3C 31 91 Y1.^J.W.p.4.e<1.
00000060: 21 A4 B0 A2 3E 6E 8A 02 F3 9D 4F C0 95 CC 6B 55 !...>n....O...kU
00000070: F5 20 53 67 86 20 A9 C6 D5 16 A2 4A A7 DE D7 6B . Sg. .....J...k
Extension .apl, Count 2
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.APL
00000000: 01 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .iem, Count 2
C:\Windows\winsxs\x86_microsoft-windows-i..mostfiles.resources_31bf3856ad364e35_8.0.7600.16385_en-us_31369c4f4638d0f5\inetcorp.iem
00000000: FF FE 23 00 69 00 66 00 20 00 76 00 65 00 72 00 ..#.i.f. .v.e.r.
00000010: 73 00 69 00 6F 00 6E 00 20 00 3E 00 3D 00 20 00 s.i.o.n. .>.=. .
00000020: 33 00 0D 00 0A 00 0D 00 0A 00 43 00 4C 00 41 00 3.........C.L.A.
00000030: 53 00 53 00 20 00 55 00 53 00 45 00 52 00 0D 00 S.S. .U.S.E.R...
00000040: 0A 00 0D 00 0A 00 43 00 41 00 54 00 45 00 47 00 ......C.A.T.E.G.
00000050: 4F 00 52 00 59 00 20 00 20 00 21 00 21 00 49 00 O.R.Y. . .!.!.I.
00000060: 45 00 41 00 4B 00 4F 00 6E 00 6C 00 79 00 0D 00 E.A.K.O.n.l.y...
00000070: 0A 00 0D 00 0A 00 20 00 20 00 20 00 20 00 50 00 ...... . . . .P.
Extension .clb, Count 2
C:\Windows\Registration\R000000000001.clb
00000000: 43 4F 4D 2B 01 00 00 00 01 00 12 00 24 00 00 00 COM+........$...
00000010: 00 01 01 00 63 00 00 00 00 00 00 01 01 00 00 00 ....c...........
00000020: 00 01 10 00 00 00 00 00 C0 00 00 00 00 00 00 46 ...............F
00000030: 0E 00 00 00 30 01 00 00 E8 02 00 00 33 5F 30 00 ....0.......3_0.
00000040: 18 04 00 00 0C 00 00 00 33 5F 31 00 24 04 00 00 ........3_1.$...
00000050: 58 02 00 00 33 5F 32 00 7C 06 00 00 3C 00 00 00 X...3_2.|...<...
00000060: 33 5F 33 00 B8 06 00 00 E8 07 00 00 33 5F 34 00 3_3.........3_4.
00000070: A0 0E 00 00 28 00 00 00 33 5F 35 00 C8 0E 00 00 ....(...3_5.....
Extension .chk, Count 2
C:\Windows\SoftwareDistribution\DataStore\Logs\edb.chk
00000000: BE CE 92 D9 00 00 00 00 00 00 00 00 B1 01 28 04 ..............(.
00000010: 65 02 00 00 5E 0E 01 00 10 15 01 03 01 76 01 00 e...^........v..
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 43 3A 5C 57 69 6E 64 6F 77 73 5C 53 6F 66 74 77 C:\Windows\Softw
00000040: 61 72 65 44 69 73 74 72 69 62 75 74 69 6F 6E 5C areDistribution\
00000050: 44 61 74 61 53 74 6F 72 65 5C 4C 6F 67 73 5C 00 DataStore\Logs\.
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .c, Count 2
C:\Program Files\OpenSSH\bin\mkpasswd.c
00000000: 2F 2A 20 6D 6B 70 61 73 73 77 64 2E 63 3A 0A 0A /* mkpasswd.c:..
00000010: 20 20 20 43 6F 70 79 72 69 67 68 74 20 31 39 39 Copyright 199
00000020: 37 2C 20 31 39 39 38 2C 20 31 39 39 39 2C 20 32 7, 1998, 1999, 2
00000030: 30 30 30 2C 20 32 30 30 31 2C 20 32 30 30 32 2C 000, 2001, 2002,
00000040: 20 32 30 30 33 20 52 65 64 20 48 61 74 2C 20 49 2003 Red Hat, I
00000050: 6E 63 2E 0A 0A 20 20 20 54 68 69 73 20 66 69 6C nc... This fil
00000060: 65 20 69 73 20 70 61 72 74 20 6F 66 20 43 79 67 e is part of Cyg
00000070: 77 69 6E 2E 0A 0A 20 20 20 54 68 69 73 20 73 6F win... This so
Extension .cpi, Count 3
C:\Windows\System32\ega.cpi
00000000: FF 46 4F 4E 54 2E 4E 54 00 00 00 00 00 00 00 00 .FONT.NT........
00000010: 01 00 01 17 00 00 00 0D 00 1C 00 34 26 00 00 01 ...........4&...
00000020: 00 45 47 41 20 20 20 20 20 B5 01 00 00 00 00 00 .EGA .......
00000030: 00 1C 00 00 00 01 00 03 00 12 26 10 08 00 00 00 ..........&.....
00000040: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 7E 81 A5 81 81 BD 99 81 81 7E 00 00 00 ...~........~...
00000060: 00 00 00 7E FF DB FF FF C3 E7 FF FF 7E 00 00 00 ...~........~...
00000070: 00 00 00 00 00 6C FE FE FE FE 7C 38 10 00 00 00 .....l....|8....
Extension .pro, Count 3
C:\Windows\System32\graphics.pro
00000000: 3B 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ;---------------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A 3B -------------..;
00000050: 20 47 52 41 50 48 49 43 53 2E 50 52 4F 20 46 69 GRAPHICS.PRO Fi
00000060: 6C 65 20 66 6F 72 20 4D 69 63 72 6F 73 6F 66 74 le for Microsoft
00000070: 20 4D 53 2D 44 4F 53 0D 0A 3B 2D 2D 2D 2D 2D 2D MS-DOS..;------
Extension .msi, Count 3
C:\Program Files\OpenSSH\tmp\7z920.msi
00000000: D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 3E 00 03 00 FE FF 09 00 ........>.......
00000020: 06 00 00 00 00 00 00 00 00 00 00 00 12 00 00 00 ................
00000030: 01 00 00 00 00 00 00 00 00 10 00 00 02 00 00 00 ................
00000040: 03 00 00 00 FE FF FF FF 00 00 00 00 00 00 00 00 ................
00000050: 1B 00 00 00 1C 00 00 00 1D 00 00 00 1E 00 00 00 ................
00000060: 1F 00 00 00 20 00 00 00 21 00 00 00 22 00 00 00 .... ...!..."...
00000070: 23 00 00 00 24 00 00 00 25 00 00 00 26 00 00 00 #...$...%...&...
Extension .wtv, Count 3
C:\Program Files\OpenSSH\home\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv
00000000: B7 D8 00 20 37 49 DA 11 A6 4E 00 07 E9 5E AD 8D ... 7I...N...^..
00000010: 8C C3 D2 C2 7E 9A DA 11 8B F7 00 07 E9 5E AD 8D ....~........^..
00000020: 01 00 00 00 02 00 00 00 00 10 00 00 00 00 04 00 ................
00000030: 08 04 00 00 00 00 00 00 11 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 01 09 00 00 40 09 00 00 ............@...
00000060: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .xbap, Count 3
C:\Windows\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.xbap
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D ="1.0" encoding=
00000020: 22 75 74 66 2D 38 22 3F 3E 0D 0A 3C 61 73 6D 76 "utf-8"?>..<asmv
00000030: 31 3A 61 73 73 65 6D 62 6C 79 20 78 73 69 3A 73 1:assembly xsi:s
00000040: 63 68 65 6D 61 4C 6F 63 61 74 69 6F 6E 3D 22 75 chemaLocation="u
00000050: 72 6E 3A 73 63 68 65 6D 61 73 2D 6D 69 63 72 6F rn:schemas-micro
00000060: 73 6F 66 74 2D 63 6F 6D 3A 61 73 6D 2E 76 31 20 soft-com:asm.v1
00000070: 61 73 73 65 6D 62 6C 79 2E 61 64 61 70 74 69 76 assembly.adaptiv
Extension .cap, Count 3
C:\Windows\System32\DriverStore\FileRepository\atiilhag.inf_x86_neutral_1d882551ede2c65b\atiumdva.cap
00000000: 18 00 00 00 76 98 CD AB 0C 00 00 00 C4 00 00 00 ....v...........
00000010: 08 00 00 00 60 01 00 00 0E 00 00 00 00 00 00 00 ....`...........
00000020: 05 00 00 00 0D 00 00 00 06 00 00 00 0A 00 00 00 ................
00000030: 0C 00 00 00 0B 00 00 00 0F 00 00 00 0B 00 00 00 ................
00000040: 10 00 00 00 30 00 00 00 0A 00 00 00 31 00 00 00 ....0.......1...
00000050: 49 00 00 00 09 00 00 00 4A 00 00 00 91 00 00 00 I.......J.......
00000060: 08 00 00 00 92 00 00 00 F6 00 00 00 07 00 00 00 ................
00000070: F7 00 00 00 5F 01 00 00 70 00 00 00 01 00 00 00 ...._...p.......
Extension .hkf, Count 3
C:\Windows\Microsoft.NET\Framework\netfxsbs12.hkf
00000000: 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 ################
00000010: 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 ################
00000020: 23 23 23 23 23 20 49 6E 73 74 61 6C 6C 20 48 6F ##### Install Ho
00000030: 6F 6B 20 23 23 23 23 23 23 23 23 23 23 23 23 23 ok #############
00000040: 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 ################
00000050: 23 23 23 23 23 23 23 23 23 23 23 0D 0A 0D 0A 23 ###########....#
00000060: 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 ################
00000070: 23 20 53 6F 75 72 63 65 3A 20 6D 73 63 6F 72 64 # Source: mscord
Extension .mod, Count 3
C:\Windows\System32\WINOLDAP.MOD
00000000: 4D 5A 7E 00 03 00 00 00 20 00 00 00 FF FF 07 00 MZ~..... .......
00000010: 00 01 65 40 00 00 00 00 40 00 00 00 01 00 00 00 ..e@....@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .sed, Count 3
C:\Windows\winsxs\x86_microsoft-windows-rascmak-unicode_31bf3856ad364e35_6.1.7600.16385_none_e247147a5aee2c8d\template.sed
00000000: 5B 56 65 72 73 69 6F 6E 5D 0D 0A 43 6C 61 73 73 [Version]..Class
00000010: 3D 49 45 58 50 52 45 53 53 0D 0A 43 44 46 56 65 =IEXPRESS..CDFVe
00000020: 72 73 69 6F 6E 3D 33 0D 0A 5B 4F 70 74 69 6F 6E rsion=3..[Option
00000030: 73 5D 0D 0A 50 61 63 6B 61 67 65 50 75 72 70 6F s]..PackagePurpo
00000040: 73 65 3D 49 6E 73 74 61 6C 6C 41 70 70 0D 0A 53 se=InstallApp..S
00000050: 68 6F 77 49 6E 73 74 61 6C 6C 50 72 6F 67 72 61 howInstallProgra
00000060: 6D 57 69 6E 64 6F 77 3D 30 0D 0A 48 69 64 65 45 mWindow=0..HideE
00000070: 78 74 72 61 63 74 41 6E 69 6D 61 74 69 6F 6E 3D xtractAnimation=
Extension .cmp, Count 3
C:\Windows\winsxs\x86_microsoft-windows-rascmak-unicode_31bf3856ad364e35_6.1.7600.16385_none_e247147a5aee2c8d\template.cmp
00000000: FF FE 5B 00 50 00 72 00 6F 00 66 00 69 00 6C 00 ..[.P.r.o.f.i.l.
00000010: 65 00 20 00 46 00 6F 00 72 00 6D 00 61 00 74 00 e. .F.o.r.m.a.t.
00000020: 5D 00 0D 00 0A 00 56 00 65 00 72 00 73 00 69 00 ].....V.e.r.s.i.
00000030: 6F 00 6E 00 3D 00 35 00 0D 00 0A 00 0D 00 0A 00 o.n.=.5.........
00000040: 5B 00 43 00 6F 00 6E 00 6E 00 65 00 63 00 74 00 [.C.o.n.n.e.c.t.
00000050: 69 00 6F 00 6E 00 20 00 4D 00 61 00 6E 00 61 00 i.o.n. .M.a.n.a.
00000060: 67 00 65 00 72 00 5D 00 0D 00 0A 00 43 00 4D 00 g.e.r.].....C.M.
00000070: 53 00 46 00 69 00 6C 00 65 00 3D 00 0D 00 0A 00 S.F.i.l.e.=.....
Extension .sam, Count 3
C:\Windows\System32\drivers\etc\lmhosts.sam
00000000: 23 20 43 6F 70 79 72 69 67 68 74 20 28 63 29 20 # Copyright (c)
00000010: 31 39 39 33 2D 31 39 39 39 20 4D 69 63 72 6F 73 1993-1999 Micros
00000020: 6F 66 74 20 43 6F 72 70 2E 0D 0A 23 0D 0A 23 20 oft Corp...#..#
00000030: 54 68 69 73 20 69 73 20 61 20 73 61 6D 70 6C 65 This is a sample
00000040: 20 4C 4D 48 4F 53 54 53 20 66 69 6C 65 20 75 73 LMHOSTS file us
00000050: 65 64 20 62 79 20 74 68 65 20 4D 69 63 72 6F 73 ed by the Micros
00000060: 6F 66 74 20 54 43 50 2F 49 50 20 66 6F 72 20 57 oft TCP/IP for W
00000070: 69 6E 64 6F 77 73 2E 0D 0A 23 0D 0A 23 20 54 68 indows...#..# Th
Extension .cms, Count 3
C:\Windows\winsxs\x86_microsoft-windows-rascmak-unicode_31bf3856ad364e35_6.1.7600.16385_none_e247147a5aee2c8d\template.cms
00000000: FF FE 5B 00 50 00 72 00 6F 00 66 00 69 00 6C 00 ..[.P.r.o.f.i.l.
00000010: 65 00 20 00 46 00 6F 00 72 00 6D 00 61 00 74 00 e. .F.o.r.m.a.t.
00000020: 5D 00 0D 00 0A 00 56 00 65 00 72 00 73 00 69 00 ].....V.e.r.s.i.
00000030: 6F 00 6E 00 3D 00 35 00 0D 00 0A 00 0D 00 0A 00 o.n.=.5.........
00000040: 5B 00 49 00 53 00 50 00 5D 00 0D 00 0A 00 50 00 [.I.S.P.].....P.
00000050: 42 00 46 00 69 00 6C 00 65 00 3D 00 0D 00 0A 00 B.F.i.l.e.=.....
00000060: 52 00 65 00 67 00 69 00 6F 00 6E 00 46 00 69 00 R.e.g.i.o.n.F.i.
00000070: 6C 00 65 00 3D 00 0D 00 0A 00 50 00 42 00 55 00 l.e.=.....P.B.U.
Extension .win32manifest, Count 3
C:\Windows\Microsoft.NET\Framework\v3.5\default.win32manifest
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D ="1.0" encoding=
00000020: 22 55 54 46 2D 38 22 20 73 74 61 6E 64 61 6C 6F "UTF-8" standalo
00000030: 6E 65 3D 22 79 65 73 22 3F 3E 0D 0A 3C 61 73 73 ne="yes"?>..<ass
00000040: 65 6D 62 6C 79 20 78 6D 6C 6E 73 3D 22 75 72 6E embly xmlns="urn
00000050: 3A 73 63 68 65 6D 61 73 2D 6D 69 63 72 6F 73 6F :schemas-microso
00000060: 66 74 2D 63 6F 6D 3A 61 73 6D 2E 76 31 22 20 6D ft-com:asm.v1" m
00000070: 61 6E 69 66 65 73 74 56 65 72 73 69 6F 6E 3D 22 anifestVersion="
Extension .wim, Count 3
C:\Windows\System32\oobe\FirstUXRes.WIM
00000000: 4D 53 57 49 4D 00 00 00 D0 00 00 00 00 0D 01 00 MSWIM...........
00000010: 82 00 04 00 00 80 00 00 28 80 13 DF 4A 7F 60 44 ........(...J.`D
00000020: B4 14 3F 13 C5 45 49 39 01 00 01 00 01 00 00 00 ..?..EI9........
00000030: 94 11 00 00 00 00 00 02 BA A3 09 00 00 00 00 00 ................
00000040: 94 11 00 00 00 00 00 00 2E 03 00 00 00 00 00 02 ................
00000050: 4E B5 09 00 00 00 00 00 2E 03 00 00 00 00 00 00 N...............
00000060: 66 0C 00 00 00 00 00 06 54 97 09 00 00 00 00 00 f.......T.......
00000070: 28 40 00 00 00 00 00 00 01 00 00 00 00 00 00 00 (@..............
Extension .dun, Count 3
C:\Windows\System32\sppui\migip.dun
00000000: 5B 50 68 6F 6E 65 5D 0D 0A 44 69 61 6C 5F 41 73 [Phone]..Dial_As
00000010: 5F 49 73 3D 4E 4F 0D 0A 43 6F 75 6E 74 72 79 5F _Is=NO..Country_
00000020: 49 44 3D 31 0D 0A 41 72 65 61 5F 43 6F 64 65 3D ID=1..Area_Code=
00000030: 34 32 35 0D 0A 0D 0A 5B 45 6E 74 72 79 5D 0D 0A 425....[Entry]..
00000040: 45 6E 74 72 79 5F 4E 61 6D 65 3D 4D 6F 64 65 6D Entry_Name=Modem
00000050: 20 64 69 61 6C 2D 75 70 0D 0A 0D 0A 5B 53 65 72 dial-up....[Ser
00000060: 76 65 72 5D 0D 0A 54 79 70 65 3D 50 50 50 0D 0A ver]..Type=PPP..
00000070: 53 57 5F 43 6F 6D 70 72 65 73 73 3D 59 45 53 0D SW_Compress=YES.
Extension .msstyles, Count 3
C:\Windows\Resources\Themes\Aero\aero.msstyles
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .obe, Count 3
C:\Windows\System32\sppui\migrate.obe
00000000: 5B 56 45 52 53 49 4F 4E 5D 0D 0A 56 45 52 53 49 [VERSION]..VERSI
00000010: 4F 4E 3D 30 30 30 30 36 0D 0A 0D 0A 5B 31 5D 20 ON=00006....[1]
00000020: 0D 0A 52 45 47 49 4F 4E 3D 55 4E 49 54 45 44 20 ..REGION=UNITED
00000030: 53 54 41 54 45 53 20 0D 0A 52 45 47 49 4F 4E 5F STATES ..REGION_
00000040: 43 4F 44 45 3D 31 20 0D 0A 52 41 4E 44 4F 4D 3D CODE=1 ..RANDOM=
00000050: 4E 6F 0D 0A 4E 55 4D 42 45 52 53 3D 31 0D 0A 4E No..NUMBERS=1..N
00000060: 55 4D 42 45 52 31 5F 43 49 54 59 3D 4E 41 54 49 UMBER1_CITY=NATI
00000070: 4F 4E 57 49 44 45 20 0D 0A 4E 55 4D 42 45 52 31 ONWIDE ..NUMBER1
Extension .fxh, Count 3
C:\Program Files\DVD Maker\Shared\Common.fxh
00000000: 2F 2F 20 3C 63 6F 6D 70 61 6E 79 3E 4D 69 63 72 // <company>Micr
00000010: 6F 73 6F 66 74 20 43 6F 72 70 6F 72 61 74 69 6F osoft Corporatio
00000020: 6E 3C 2F 63 6F 6D 70 61 6E 79 3E 0D 0A 2F 2F 2F n</company>..///
00000030: 20 3C 63 6F 70 79 72 69 67 68 74 3E 43 6F 70 79 <copyright>Copy
00000040: 72 69 67 68 74 20 28 63 29 20 4D 69 63 72 6F 73 right (c) Micros
00000050: 6F 66 74 20 43 6F 72 70 6F 72 61 74 69 6F 6E 20 oft Corporation
00000060: 32 30 30 35 3C 2F 63 6F 70 79 72 69 67 68 74 3E 2005</copyright>
00000070: 0D 0A 2F 2F 2F 20 3C 73 75 6D 6D 61 72 79 3E 0D ../// <summary>.
Extension .pif, Count 3
C:\Windows_default.pif
00000000: 00 C9 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ..
00000010: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
00000020: 80 00 80 00 5F 44 45 46 41 55 4C 54 2E 42 41 54 ...._DEFAULT.BAT
00000030: 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 .
00000040: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
00000050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
00000060: 20 20 20 10 00 00 20 20 20 20 20 20 20 20 20 20 ...
00000070: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
Extension .isp, Count 3
C:\Windows\System32\sppui\reg.isp
00000000: 5B 49 53 50 20 49 4E 46 4F 5D 0D 0A 50 68 6F 6E [ISP INFO]..Phon
00000010: 65 42 6F 6F 6B 46 69 6C 65 3D 4D 49 47 52 41 54 eBookFile=MIGRAT
00000020: 45 2E 4F 42 45 0D 0A 44 55 4E 46 69 6C 65 3D 6D E.OBE..DUNFile=m
00000030: 69 67 69 70 2E 64 75 6E 0D 0A 0D 0A 5B 4F 70 74 igip.dun....[Opt
00000040: 69 6F 6E 73 5D 0D 0A 43 68 65 63 6B 4D 6F 64 65 ions]..CheckMode
00000050: 6D 47 43 49 3D 31 0D 0A mGCI=1..
Extension .map, Count 3
C:\Windows\System32\wbem\Repository\MAPPING1.MAP
00000000: CD AB 00 00 30 A6 00 00 7C 01 00 00 7B 01 00 00 ....0...|...{...
00000010: 43 07 00 00 A2 06 00 00 00 00 00 00 31 3C DC E0 C...........1<..
00000020: 91 00 00 00 00 00 00 00 7C 01 00 00 03 00 00 00 ........|.......
00000030: 2B 01 00 00 9A 5A A7 72 66 00 00 00 00 00 00 00 +....Z.rf.......
00000040: 7C 01 00 00 07 00 00 00 05 00 00 00 60 61 8B 68 |...........`a.h
00000050: 5F 00 00 00 00 00 00 00 7C 01 00 00 03 00 00 00 _.......|.......
00000060: 03 00 00 00 79 86 BA A8 00 00 00 00 00 00 00 00 ....y...........
00000070: 7C 01 00 00 03 00 00 00 04 00 00 00 59 1A 57 B1 |...........Y.W.
Extension .idx, Count 3
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.IDX
00000000: 48 00 00 00 C2 01 40 00 0A 00 01 00 80 3E 00 00 H.....@......>..
00000010: DC 05 00 00 C2 01 10 00 2E 00 10 00 04 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 10 00 00 00 A7 99 1A 00 ................
00000030: 05 C9 2D 40 14 5A 60 00 00 00 00 00 00 00 00 00 ..-@.Z`.........
00000040: 00 00 00 00 00 00 00 00 C0 12 C0 12 80 16 C0 12 ................
00000050: C0 21 80 16 C0 12 80 16 80 25 80 16 80 16 C0 21 .!.......%.....!
00000060: 80 25 40 1A 00 1E 00 1E 00 1E C0 21 00 1E 80 25 .%@........!...%
00000070: 00 2D C0 21 80 25 C0 21 C0 21 00 2D 00 1E 00 1E .-.!.%.!.!.-....
Extension .psm1, Count 3
C:\Windows\System32\WindowsPowerShell\v1.0\Modules\PSDiagnostics\PSDiagnostics.psm1
00000000: FF FE 3C 00 23 00 0D 00 0A 00 20 00 20 00 50 00 ..<.#..... . .P.
00000010: 6F 00 77 00 65 00 72 00 53 00 68 00 65 00 6C 00 o.w.e.r.S.h.e.l.
00000020: 6C 00 20 00 44 00 69 00 61 00 67 00 6E 00 6F 00 l. .D.i.a.g.n.o.
00000030: 73 00 74 00 69 00 63 00 73 00 20 00 4D 00 6F 00 s.t.i.c.s. .M.o.
00000040: 64 00 75 00 6C 00 65 00 0D 00 0A 00 20 00 20 00 d.u.l.e..... . .
00000050: 54 00 68 00 69 00 73 00 20 00 6D 00 6F 00 64 00 T.h.i.s. .m.o.d.
00000060: 75 00 6C 00 65 00 20 00 63 00 6F 00 6E 00 74 00 u.l.e. .c.o.n.t.
00000070: 61 00 69 00 6E 00 73 00 20 00 61 00 20 00 73 00 a.i.n.s. .a. .s.
Extension .devicemetadata-ms, Count 3
C:\Windows\winsxs\x86_microsoft-windows-dxp-deviceexperience_31bf3856ad364e35_6.1.7600.16385_none_46fb81e75b1ad412\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms
00000000: 4D 53 43 46 00 00 00 00 CE 1F 00 00 00 00 00 00 MSCF............
00000010: 44 00 00 00 00 00 00 00 03 01 01 00 04 00 04 00 D...............
00000020: 55 21 00 00 14 00 00 00 00 00 10 00 CE 1F 00 00 U!..............
00000030: 68 17 00 00 00 00 00 00 00 00 00 00 DC 00 00 00 h...............
00000040: 02 00 01 00 4C 75 00 00 00 00 00 00 00 00 A4 3A ....Lu.........:
00000050: 0B 4E 20 00 50 61 63 6B 61 67 65 49 6E 66 6F 2E .N .PackageInfo.
00000060: 78 6D 6C 00 BD 18 00 00 4C 75 00 00 00 00 A4 3A xml.....Lu.....:
00000070: BB 5A 20 00 53 69 67 6E 2E 63 61 74 00 B0 18 00 .Z .Sign.cat....
Extension .cw, Count 4
C:\Windows\Speech\Engines\SR\en-GB\l2057.cw
00000000: 77 82 CE FE 00 00 00 00 37 81 3B 59 00 00 00 00 w.......7.;Y....
00000010: 2E 00 00 00 07 07 00 00 50 81 00 00 88 B9 00 00 ........P.......
00000020: 08 1D 00 00 24 32 00 00 48 00 00 00 30 07 00 00 ....$2..H...0...
00000030: BA 06 00 00 29 00 00 00 2B 00 00 00 0E 07 00 00 ....)...+.......
00000040: E8 B9 00 00 1A 29 21 30 00 00 00 00 00 00 10 20 .....)!0.......
00000050: 00 10 30 00 00 33 33 00 00 13 01 01 20 33 22 00 ..0..33..... 3".
00000060: 00 00 00 00 00 00 21 31 00 20 41 00 01 44 44 00 ......!1. A..DD.
00000070: 00 25 02 02 30 44 33 00 00 00 00 00 00 00 21 31 .%..0D3.......!1
Extension .phn, Count 4
C:\Windows\Speech\Engines\SR\en-GB\l2057.phn
00000000: 86 3D 4C A1 4A FE 22 BD 5C 0E D2 33 7F 46 B0 2D .=L.J.".\..3.F.-
00000010: 03 75 FF FF FC FB FE FC FD FF 6E 6E 9C FF FF FF .u........nn....
00000020: FF FF FF FF E0 FF FF FF FF FF FF FF FF FF FF FF ................
00000030: FF FF FF FF FF FF FF FF FF FF FF FF CF CF CF CF ................
00000040: CF CE CE CE CE CE CE CE CF CF CF CF CE CE CE CF ................
00000050: CF CF CE CE CF CF CF CF CF CF CE CE CE CF CF CF ................
00000060: CF CF CF CE CE CF CF CF CF CF CF CF CF CF CF CF ................
00000070: CF CF CF CF CF CF CF CF CF CF CF CF CF CF CF CF ................
Extension .mllr, Count 4
C:\Windows\Speech\Engines\SR\en-GB\l2057.mllr
00000000: 70 68 6F 6E 65 63 6C 61 73 73 0D 0A 28 20 0D 0A phoneclass..( ..
00000010: 20 20 28 0D 0A 20 20 20 73 20 7A 20 0D 0A 20 20 (.. s z ..
00000020: 20 73 68 20 7A 68 20 6A 68 20 63 68 20 20 0D 0A sh zh jh ch ..
00000030: 20 20 20 76 20 66 20 0D 0A 20 20 20 74 68 20 64 v f .. th d
00000040: 68 20 0D 0A 20 20 29 20 0D 0A 20 20 28 0D 0A 20 h .. ) .. (..
00000050: 20 20 74 20 64 20 0D 0A 20 20 20 67 20 6B 20 0D t d .. g k .
00000060: 0A 20 20 20 70 20 62 20 0D 0A 20 20 20 68 68 20 . p b .. hh
00000070: 0D 0A 20 20 29 0D 0A 20 20 72 20 65 72 20 20 0D .. ).. r er .
Extension .smp, Count 4
C:\Windows\Speech\Engines\SR\en-GB\l2057.smp
00000000: 22 82 CE FE 37 81 3B 59 00 00 00 00 96 10 00 00 "...7.;Y........
00000010: B3 01 00 00 91 00 00 00 50 01 00 00 1A 29 00 00 ........P....)..
00000020: 1A 29 00 00 B8 04 00 00 DC A6 00 00 B3 01 B3 01 .)..............
00000030: B3 01 B3 01 B3 01 B3 01 DF 01 2B 02 85 02 BB 02 ..........+.....
00000040: D8 02 F4 03 3E 04 75 04 90 04 05 05 3B 05 AD 05 ....>.u.....;...
00000050: D5 05 30 06 74 06 96 06 D2 06 96 07 3A 08 55 08 ..0.t.......:.U.
00000060: C2 08 49 09 A4 09 79 0A 9A 0A E5 0A 3A 0B 46 0B ..I...y.....:.F.
00000070: 91 0B 48 0C D4 0C F4 0C BB 0D DA 0D F9 0D 51 0E ..H...........Q.
Extension .cpx, Count 4
C:\Windows\System32\12520437.cpx
00000000: 5B 57 69 6E 64 6F 77 73 20 4C 61 74 69 6E 20 31 [Windows Latin 1
00000010: 2F 34 33 37 20 28 45 6E 67 6C 69 73 68 29 5D 0D /437 (English)].
00000020: 0A 31 33 30 3A 34 34 0D 0A 31 33 31 3A 31 35 39 .130:44..131:159
00000030: 0D 0A 31 33 32 3A 34 34 0D 0A 31 33 33 3A 39 35 ..132:44..133:95
00000040: 0D 0A 31 33 34 3A 32 35 33 0D 0A 31 33 35 3A 32 ..134:253..135:2
00000050: 35 32 0D 0A 31 33 37 3A 33 37 0D 0A 31 33 38 3A 52..137:37..138:
00000060: 38 33 0D 0A 31 33 39 3A 36 30 0D 0A 31 34 30 3A 83..139:60..140:
00000070: 37 39 0D 0A 31 34 35 3A 39 36 0D 0A 31 34 36 3A 79..145:96..146:
Extension .dir, Count 4
C:\Windows\Panther\Contents0.dir
00000000: 01 00 00 00 04 00 00 00 01 00 00 00 20 00 00 00 ............ ...
00000010: 4D 00 61 00 69 00 6E 00 51 00 75 00 65 00 75 00 M.a.i.n.Q.u.e.u.
00000020: 65 00 4F 00 6E 00 6C 00 69 00 6E 00 65 00 00 00 e.O.n.l.i.n.e...
00000030: 04 00 00 00 00 00 00 00 08 00 00 00 71 00 75 00 ............q.u.
00000040: 65 00 00 00 e...
Extension .mp4, Count 4
C:\Windows\Performance\WinSAT\Clip_1080_5sec_10mbps_h264.mp4
00000000: 00 00 00 14 66 74 79 70 6D 70 34 32 00 00 00 00 ....ftypmp42....
00000010: 69 73 6F 6D 00 00 0C 07 6D 6F 6F 76 00 00 00 6C isom....moov...l
00000020: 6D 76 68 64 00 00 00 00 C4 EE 1C 93 C4 EE 1C 93 mvhd............
00000030: 00 01 5F 90 00 06 DF 92 00 01 00 00 01 00 00 00 .._.............
00000040: 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .wwd, Count 4
C:\Windows\Speech\Engines\SR\en-GB\l2057.wwd
00000000: 75 AB CE FE 59 0D 00 00 12 2E 23 00 78 0E 26 20 u...Y.....#.x.&
00000010: 6F 00 8E 24 1F 85 2D 00 9F 1D 1C 59 22 00 33 1B o..$..-....Y".3.
00000020: 15 06 48 00 3A 10 1F 57 0A 00 98 1D 0E 82 26 00 ..H.:..W......&.
00000030: 26 0A 1C 6C 12 00 30 1B 23 04 30 00 25 22 25 1D &..l..0.#.0.%"%.
00000040: 68 00 5C 24 17 2D 34 00 F6 13 29 42 1F 00 A3 26 h.\$.-4...)B...&
00000050: 49 48 4A 00 CD 28 19 04 4D 00 D9 15 1F 57 27 00 IHJ..(..M....W'.
00000060: 98 1D 2A 1F 80 00 1B 27 0E 16 31 00 25 0A 1F 55 ..*....'..1.%..U
00000070: 0F 00 A2 1D 13 17 3D 00 51 0F 1C 6A 17 00 3E 1B ......=.Q..j..>.
Extension .fe, Count 4
C:\Windows\Speech\Engines\SR\en-GB\c2057dsk.fe
00000000: 99 AF 68 89 CB 10 C1 43 92 B6 8E DD BD 72 26 91 ..h....C.....r&.
00000010: 4F 24 5E D1 00 00 00 00 00 00 00 00 00 00 00 00 O$^.............
00000020: 9D 00 00 00 17 00 31 00 36 00 6B 00 48 00 7A 00 ......1.6.k.H.z.
00000030: 31 00 36 00 42 00 69 00 74 00 4D 00 6F 00 6E 00 1.6.B.i.t.M.o.n.
00000040: 6F 00 50 00 43 00 4D 00 53 00 74 00 72 00 65 00 o.P.C.M.S.t.r.e.
00000050: 61 00 6D 00 16 00 31 00 36 00 6B 00 48 00 7A 00 a.m...1.6.k.H.z.
00000060: 38 00 42 00 69 00 74 00 4D 00 6F 00 6E 00 6F 00 8.B.i.t.M.o.n.o.
00000070: 50 00 43 00 4D 00 53 00 74 00 72 00 65 00 61 00 P.C.M.S.t.r.e.a.
Extension .toc, Count 4
C:\Windows\rescache\rc0003\Segment0.toc
00000000: 52 45 53 53 54 4F 43 00 00 00 00 00 00 00 00 00 RESSTOC.........
00000010: E8 03 00 00 5F 00 00 00 5F 00 00 00 A9 77 3F 00 ...._..._....w?.
00000020: EE 02 00 00 00 00 40 00 00 00 00 00 00 00 00 00 ......@.........
00000030: 00 00 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 ................
00000040: 3C A5 4B 6F 1A 97 8F 8A 1E FA 93 36 2E CD 5C D3 <.Ko.......6..\.
00000050: 09 04 00 00 00 08 00 00 00 00 00 00 2B 00 00 00 ............+...
00000060: FF FF FF FF 54 00 00 00 00 00 00 00 00 00 00 00 ....T...........
00000070: 32 66 54 33 1F A0 32 8A 37 D0 AD 8C 19 84 BD EE 2fT3..2.7.......
Extension .cmf, Count 4
C:\Windows\rescache\rc0003\Segment0.cmf
00000000: 52 45 53 43 53 45 47 00 01 00 00 00 00 00 00 00 RESCSEG.........
00000010: 5F 00 00 00 5F 00 00 00 EE 02 00 00 A9 77 3F 00 _..._........w?.
00000020: 09 88 3F 00 00 00 00 00 00 00 00 00 00 00 00 00 ..?.............
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF ................
00000040: FF FF FF FF FF FF FF FF FF FF FF FF 01 00 00 00 ................
00000050: 00 00 01 00 40 00 00 00 A5 1A 00 00 00 00 00 00 ....@...........
00000060: 67 43 00 00 BE 9A 00 00 CD D4 00 00 15 1C 01 00 gC..............
00000070: 54 57 01 00 19 94 01 00 AC CD 01 00 81 F7 01 00 TW..............
Extension .jrs, Count 4
C:\Windows\SoftwareDistribution\DataStore\Logs\edbres00001.jrs
00000000: DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA ................
00000010: EA DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA ................
00000020: FA DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA ................
00000030: 0A DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA ................
00000040: 1A DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA ................
00000050: 2A DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA *...............
00000060: 3A DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA :...............
00000070: 4A DA DA DA DA DA DA DA DA DA DA DA DA DA DA DA J...............
Extension .uni, Count 4
C:\Windows\winsxs\x86_microsoft-windows-winocr-ocrengines_31bf3856ad364e35_6.1.7600.16385_none_a31b6cff9464aa03\jpcode.uni
00000000: 16 55 03 5A 3F 96 75 84 1C 83 50 7A 25 6E A1 65 .U.Z?.u...Pz%n.e
00000010: 7B 86 BE 7D 8E 9B B5 5E 09 63 8D 97 37 59 09 5C {..}...^.c..7Y.\
00000020: 70 61 0E 84 02 8B C1 90 A2 6E 32 7A 2F 9C EB 6D pa.......n2z/..m
00000030: E4 80 C2 8F 6F 53 5C 9D 11 4E 1A 85 E5 59 A9 53 ....oS\..N...Y.S
00000040: 8F 95 30 5B 29 6D 5B 74 C8 76 4E 7A 34 98 8E 69 ..0[)m[t.vNz4..i
00000050: AD 53 30 58 B4 5B 28 60 A9 63 14 71 59 71 D5 71 .S0X.[(`.c.qYq.q
00000060: 3F 73 76 82 D1 82 97 85 5B 92 25 75 56 89 2C 9D ?sv.....[.%uV.,.
00000070: 0E 9D C4 9E C6 81 61 72 B6 67 C2 73 8D 79 3C 7A ......ar.g.s.y<z
Extension .dvr-ms, Count 4
C:\Windows\ehome\SS2.dvr-ms
00000000: 30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6C 0&.u.f.......b.l
00000010: A5 09 00 00 00 00 00 00 06 00 00 00 01 02 40 A4 ..............@.
00000020: D0 D2 07 E3 D2 11 97 F0 00 A0 C9 5E A8 50 4A 01 ...........^.PJ.
00000030: 00 00 00 00 00 00 07 00 2C 00 44 00 56 00 52 00 ........,.D.V.R.
00000040: 20 00 49 00 6E 00 64 00 65 00 78 00 20 00 47 00 .I.n.d.e.x. .G.
00000050: 72 00 61 00 6E 00 75 00 6C 00 61 00 72 00 69 00 r.a.n.u.l.a.r.i.
00000060: 74 00 79 00 00 00 03 00 04 00 F4 01 00 00 22 00 t.y...........".
00000070: 44 00 56 00 52 00 20 00 46 00 69 00 6C 00 65 00 D.V.R. .F.i.l.e.
Extension .psd, Count 4
C:\Windows\ehome\CreateDisc\Styles\NTSC\Symphony\Symphony\Symphony.psd
00000000: 38 42 50 53 00 01 00 00 00 00 00 00 00 04 00 00 8BPS............
00000010: 01 E0 00 00 02 D0 00 08 00 03 00 00 00 00 00 00 ................
00000020: 2C 22 38 42 49 4D 04 25 00 00 00 00 00 10 00 00 ,"8BIM.%........
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 42 ..............8B
00000040: 49 4D 04 24 00 00 00 00 12 29 3C 3F 78 70 61 63 IM.$.....)<?xpac
00000050: 6B 65 74 20 62 65 67 69 6E 3D 27 EF BB BF 27 20 ket begin='...'
00000060: 69 64 3D 27 57 35 4D 30 4D 70 43 65 68 69 48 7A id='W5M0MpCehiHz
00000070: 72 65 53 7A 4E 54 63 7A 6B 63 39 64 27 3F 3E 0A reSzNTczkc9d'?>.
Extension .frm, Count 4
C:\Windows\System32\DriverStore\FileRepository\avmisdnc.inf_x86_neutral_e8031e434b323b61\fus2base.frm
00000000: ED 09 00 00 00 70 56 AF 12 BB EB 17 00 00 00 00 .....pV.........
00000010: 03 DA 3A 00 00 00 00 A3 06 06 04 00 04 12 01 01 ..:.............
00000020: 01 FF FF FF 40 7C 05 00 00 00 00 01 02 00 02 09 ....@|..........
00000030: 02 20 00 01 01 04 00 00 09 04 00 00 02 FF FF FF . ..............
00000040: 05 07 05 01 02 40 00 00 07 05 82 02 40 00 00 EC .....@......@...
00000050: 1C 00 1D 53 00 B8 0B 53 00 A7 0A 53 00 C4 09 53 ...S...S...S...S
00000060: 00 03 09 53 00 5E 08 53 00 D0 07 53 00 53 07 53 ...S.^.S...S.S.S
00000070: 00 E4 06 53 00 82 06 53 00 2A 06 53 00 DC 05 00 ...S...S.*.S....
Extension .hex, Count 4
C:\Windows\System32\DriverStore\FileRepository\divacx86.inf_x86_neutral_d9558f410186db36\usbdldv2.hex
00000000: 3A 30 33 30 30 30 30 30 30 31 32 30 30 30 33 45 :03000000120003E
00000010: 38 0D 0A 3A 30 33 30 30 33 33 30 30 30 32 30 30 8..:030033000200
00000020: 35 32 37 36 0D 0A 3A 31 30 31 38 46 37 30 30 31 5276..:1018F7001
00000030: 39 35 38 31 39 35 43 31 39 37 41 31 39 39 38 31 958195C197A19981
00000040: 39 41 45 31 39 43 30 31 39 43 45 31 39 44 38 33 9AE19C019CE19D83
00000050: 46 0D 0A 3A 30 33 31 39 30 37 30 30 30 30 30 30 F..:031907000000
00000060: 30 30 44 44 0D 0A 3A 31 30 30 30 30 33 30 30 45 00DD..:10000300E
00000070: 34 46 35 44 30 43 32 41 46 37 35 38 31 39 37 31 4F5D0C2AF7581971
Extension .pub, Count 4
C:\Program Files\OpenSSH\etc\ssh_host_dsa_key.pub
00000000: 73 73 68 2D 64 73 73 20 41 41 41 41 42 33 4E 7A ssh-dss AAAAB3Nz
00000010: 61 43 31 6B 63 33 4D 41 41 41 43 42 41 50 53 71 aC1kc3MAAACBAPSq
00000020: 42 6D 7A 6E 63 39 50 65 31 59 2F 34 79 4F 4B 65 Bmznc9Pe1Y/4yOKe
00000030: 42 48 52 38 36 6A 44 6C 58 55 77 53 4A 4A 46 7A BHR86jDlXUwSJJFz
00000040: 67 64 75 76 47 4E 76 2F 38 30 44 34 61 6F 32 57 gduvGNv/80D4ao2W
00000050: 76 54 70 44 73 5A 63 32 50 66 36 54 34 42 48 6F vTpDsZc2Pf6T4BHo
00000060: 59 62 67 51 4B 6B 42 58 39 65 51 46 2B 69 59 48 YbgQKkBX9eQF+iYH
00000070: 70 52 47 6A 7A 50 71 46 61 63 32 55 46 4C 59 55 pRGjzPqFac2UFLYU
Extension .cov, Count 4
C:\Windows\winsxs\x86_microsoft-windows-fax-common.resources_31bf3856ad364e35_6.1.7600.16385_en-us_498517d29803903d\confident.cov
00000000: 46 41 58 43 4F 56 45 52 2D 56 45 52 30 30 35 77 FAXCOVER-VER005w
00000010: 87 00 00 00 10 08 00 00 17 00 00 00 52 03 00 00 ............R...
00000020: 4C 04 00 00 01 00 00 00 6C 00 00 00 4F 00 00 00 L.......l...O...
00000030: AF 00 00 00 4D 02 00 00 1F 02 00 00 00 00 00 00 ....M...........
00000040: 00 00 00 00 56 54 00 00 24 6D 00 00 20 45 4D 46 ....VT..$m.. EMF
00000050: 00 00 01 00 10 08 00 00 88 00 00 00 02 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 ................
00000070: 00 03 00 00 40 01 00 00 F0 00 00 00 00 00 00 00 ....@...........
Extension .zip, Count 4
C:\Program Files\OpenSSH\tmp\SDelete.zip
00000000: 50 4B 03 04 14 00 00 00 08 00 8C 61 BC 48 A0 BF PK.........a.H..
00000010: 43 E9 A7 21 01 00 A0 4E 02 00 0B 00 00 00 73 64 C..!...N......sd
00000020: 65 6C 65 74 65 2E 65 78 65 EC BD 7F 7C 54 D5 95 elete.exe...|T..
00000030: 00 FE E6 47 92 21 4C F2 06 48 20 F2 43 82 04 45 ...G.!L..H .C..E
00000040: 02 8A 4E 50 E2 10 9B 20 13 50 09 4E 8C CE 10 90 ..NP... .P.N....
00000050: A0 15 C7 E9 D4 55 1A E6 01 AE 04 12 5E C6 E6 E5 .....U......^...
00000060: F1 2A BB 2B BB 76 2B 55 8A B6 B4 B5 5B 5A 45 02 .*.+.v+U....[ZE.
00000070: 15 9C 10 4D 82 20 06 64 15 85 DA D8 A6 F6 C6 A1 ...M. .d........
Extension .camp, Count 4
C:\Windows\System32\spool\drivers\color\D50.camp
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 74 .0" encoding="ut
00000020: 66 2D 38 22 20 3F 3E 0D 0A 3C 63 61 6D 3A 43 6F f-8" ?>..<cam:Co
00000030: 6C 6F 72 41 70 70 65 61 72 61 6E 63 65 4D 6F 64 lorAppearanceMod
00000040: 65 6C 0D 0A 09 49 44 3D 22 68 74 74 70 3A 2F 2F el...ID="http://
00000050: 73 63 68 65 6D 61 73 2E 6D 69 63 72 6F 73 6F 66 schemas.microsof
00000060: 74 2E 63 6F 6D 2F 77 69 6E 64 6F 77 73 2F 32 30 t.com/windows/20
00000070: 30 35 2F 30 32 2F 63 6F 6C 6F 72 2F 44 35 30 2E 05/02/color/D50.
Extension .cdmp, Count 4
C:\Windows\System32\spool\drivers\color\wscRGB.cdmp
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 74 .0" encoding="ut
00000020: 66 2D 38 22 20 3F 3E 0D 0A 3C 63 64 6D 3A 43 6F f-8" ?>..<cdm:Co
00000030: 6C 6F 72 44 65 76 69 63 65 4D 6F 64 65 6C 0D 0A lorDeviceModel..
00000040: 09 49 44 3D 22 68 74 74 70 3A 2F 2F 73 63 68 65 .ID="http://sche
00000050: 6D 61 73 2E 6D 69 63 72 6F 73 6F 66 74 2E 63 6F mas.microsoft.co
00000060: 6D 2F 77 69 6E 64 6F 77 73 2F 32 30 30 35 2F 30 m/windows/2005/0
00000070: 32 2F 63 6F 6C 6F 72 2F 77 73 63 52 47 42 2E 63 2/color/wscRGB.c
Extension .dvd, Count 4
C:\Windows\ehome\CreateDisc\Styles\NTSC\Symphony\Symphony.dvd
00000000: 0F FF FF 0F 02 02 02 02 01 00 04 0A 06 27 07 42 .............'.B
00000010: 09 01 F1 0A 02 4C 0B 04 CA 0B 06 EB 0A 03 1D 0A .....L..........
00000020: 02 EB 0A 03 AF 0A 03 BB 08 B4 09 01 CB 09 01 B0 ................
00000030: 09 01 C9 08 FF 07 43 07 65 07 6D 07 7D 07 78 06 ......C.e.m.}.x.
00000040: 22 06 25 06 3D 07 58 07 64 07 71 07 5B 0C 0E 00 ".%.=.X.d.q.[...
00000050: 08 F3 08 BB 0A 03 F9 09 01 CE 0B 07 90 09 01 00 ................
00000060: 0A 03 E0 0B 04 CB 0B 04 DE 0B 04 1D 0B 07 EE 0B ................
00000070: 07 36 0B 07 95 0B 07 E5 0B 06 22 0A 03 B8 0B 07 .6........".....
Extension .h1t, Count 4
C:\Windows\Help\Help\en-US\Help.H1T
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 3F 3E 0D 0A 3C 21 44 4F 43 54 ="1.0"?>..<!DOCT
00000020: 59 50 45 20 48 65 6C 70 54 4F 43 3E 0D 0A 3C 48 YPE HelpTOC>..<H
00000030: 65 6C 70 54 4F 43 20 0D 0A 09 44 54 44 56 65 72 elpTOC ...DTDVer
00000040: 73 69 6F 6E 20 3D 20 22 31 2E 30 22 20 0D 0A 09 sion = "1.0" ...
00000050: 49 64 20 3D 20 22 48 65 6C 70 5F 54 4F 43 22 0D Id = "Help_TOC".
00000060: 0A 09 46 69 6C 65 56 65 72 73 69 6F 6E 20 3D 20 ..FileVersion =
00000070: 22 31 2E 30 2E 30 2E 30 22 20 0D 0A 09 4C 61 6E "1.0.0.0" ...Lan
Extension .h1c, Count 4
C:\Windows\Help\Help\en-US\Help.h1c
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 3F 3E 0D 0A 3C 21 44 4F 43 54 59 50 45 .0"?>..<!DOCTYPE
00000020: 20 48 65 6C 70 43 6F 6C 6C 65 63 74 69 6F 6E 3E HelpCollection>
00000030: 0D 0A 3C 48 65 6C 70 43 6F 6C 6C 65 63 74 69 6F ..<HelpCollectio
00000040: 6E 20 44 54 44 56 65 72 73 69 6F 6E 3D 22 31 2E n DTDVersion="1.
00000050: 30 22 20 4C 61 6E 67 49 64 3D 22 31 30 33 33 22 0" LangId="1033"
00000060: 20 54 69 74 6C 65 3D 22 57 69 6E 64 6F 77 73 20 Title="Windows
00000070: 4F 53 20 43 6F 6D 62 69 6E 65 64 20 43 6F 6C 6C OS Combined Coll
Extension .tasks, Count 5
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Common.Tasks
00000000: EF BB BF 3C 21 2D 2D 20 54 68 69 73 20 66 69 6C ...<!-- This fil
00000010: 65 20 6C 69 73 74 73 20 61 6C 6C 20 74 68 65 20 e lists all the
00000020: 74 61 73 6B 73 20 74 68 61 74 20 73 68 69 70 20 tasks that ship
00000030: 62 79 20 64 65 66 61 75 6C 74 20 77 69 74 68 20 by default with
00000040: 4D 53 42 75 69 6C 64 20 2D 2D 3E 0D 0A 3C 50 72 MSBuild -->..<Pr
00000050: 6F 6A 65 63 74 20 78 6D 6C 6E 73 3D 22 68 74 74 oject xmlns="htt
00000060: 70 3A 2F 2F 73 63 68 65 6D 61 73 2E 6D 69 63 72 p://schemas.micr
00000070: 6F 73 6F 66 74 2E 63 6F 6D 2F 64 65 76 65 6C 6F osoft.com/develo
Extension .wmz, Count 5
C:\Program Files\Windows Media Player\Skins\Revert.wmz
00000000: 50 4B 03 04 14 00 00 00 08 00 B5 90 64 3D D8 3A PK..........d=.:
00000010: 37 0E 90 15 00 00 2A ED 00 00 0A 00 24 00 6E 65 7.....*.....$.ne
00000020: 74 67 65 6E 2E 77 6D 73 0A 00 20 00 00 00 00 00 tgen.wms.. .....
00000030: 01 00 18 00 C9 A0 E4 F1 8D 7C CB 01 C9 A0 E4 F1 .........|......
00000040: 8D 7C CB 01 C9 A0 E4 F1 8D 7C CB 01 ED 5D EB 53 .|.......|...].S
00000050: 1C 37 12 9F AF BE AA FB 1F 36 A4 2A E0 2B C0 2C .7.......6.*.+.,
00000060: B0 3C E2 90 2B 6C E3 D8 E5 17 F1 12 FB EE BE 50 .<..+l.........P
00000070: CB F2 4C 96 C7 B1 8B 71 72 95 7F FD EE BA 5B D2 ..L....qr.....[.
Extension .iec, Count 5
C:\Windows\System32\html.iec
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 E8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .olb, Count 5
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vsavb7.olb
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B0 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .db, Count 5
C:\Windows\Prefetch\AgAppLaunch.db
00000000: 05 00 00 00 54 11 05 00 02 00 00 00 00 00 00 00 ....T...........
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .ins, Count 5
C:\Program Files\Internet Explorer\SIGNUP\install.ins
00000000: FF FE 5B 00 42 00 72 00 61 00 6E 00 64 00 69 00 ..[.B.r.a.n.d.i.
00000010: 6E 00 67 00 5D 00 0D 00 0A 00 43 00 6F 00 6D 00 n.g.].....C.o.m.
00000020: 70 00 61 00 6E 00 79 00 4E 00 61 00 6D 00 65 00 p.a.n.y.N.a.m.e.
00000030: 3D 00 4D 00 69 00 63 00 72 00 6F 00 73 00 6F 00 =.M.i.c.r.o.s.o.
00000040: 66 00 74 00 20 00 43 00 6F 00 72 00 70 00 6F 00 f.t. .C.o.r.p.o.
00000050: 72 00 61 00 74 00 69 00 6F 00 6E 00 0D 00 0A 00 r.a.t.i.o.n.....
00000060: 57 00 69 00 7A 00 61 00 72 00 64 00 5F 00 56 00 W.i.z.a.r.d._.V.
00000070: 65 00 72 00 73 00 69 00 6F 00 6E 00 3D 00 31 00 e.r.s.i.o.n.=.1.
Extension .ebd, Count 5
C:\Windows\System32\systemsf.ebd
00000000: 0E 00 00 00 A4 3D 02 00 48 00 00 00 00 00 00 00 .....=..H.......
00000010: 38 00 00 00 24 00 00 00 3C 00 00 00 08 00 00 00 8...$...<.......
00000020: 08 00 00 00 08 00 00 00 08 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 01 00 00 00 16 02 00 00 A6 2B 00 00 .............+..
00000040: 00 00 00 00 80 92 00 00 44 F7 0D 00 44 F7 0D 00 ........D...D...
00000050: 16 02 00 00 00 80 00 00 08 FA 60 00 00 00 00 00 ..........`.....
00000060: DE FE 49 ED F8 7A CB 01 A7 F2 EE F4 00 00 00 00 ..I..z..........
00000070: C8 01 5A 00 17 00 01 00 EC 71 5E 00 00 00 00 00 ..Z......q^.....
Extension .grm, Count 5
C:\Windows\IME\IMEJP10\DICTS\IMJPGN.GRM
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B0 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .cpa, Count 5
C:\Windows\System32\DriverStore\FileRepository\atiilhag.inf_x86_neutral_1d882551ede2c65b\ativcaxx.cpa
00000000: 9C 60 E8 0B 00 00 00 89 44 24 1C 89 54 24 14 61 .`......D$..T$.a
00000010: 9D C3 55 8B EC 8D 45 08 50 E8 34 01 00 00 83 C4 ..U...E.P.4.....
00000020: 04 68 9D C2 A8 00 68 A5 0F 77 61 68 7C CB 4D 77 .h....h..wah|.Mw
00000030: 68 3B 7C 24 30 68 C8 75 E7 47 68 83 C1 08 FE 68 h;|$0h.u.Gh....h
00000040: 01 83 C3 08 68 EF 01 0F 7F 68 0F 7F 03 0F 68 03 ....h....h....h.
00000050: 0F EF C1 68 24 28 0F 6F 68 00 00 03 4C 68 69 C9 ...h$(.oh...Lhi.
00000060: A0 00 68 F1 8F B0 14 68 4C EC 30 80 68 FF 8B CF ..h....hL.0.h...
00000070: 33 68 5C 24 28 33 68 24 5E 5E 03 68 56 0F 6F 0C 3h\$(3h$^^.hV.o.
Extension .sdi, Count 5
C:\Windows\Boot\DVD\PCAT\boot.sdi
00000000: 24 53 44 49 30 30 30 31 00 00 00 00 00 00 00 00 $SDI0001........
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .tsk, Count 5
C:\Windows\system\mmtask.tsk
00000000: 4D 5A 0F 01 01 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 72 65 71 75 69 is program requi
00000060: 72 65 73 20 4D 69 63 72 6F 73 6F 66 74 20 57 69 res Microsoft Wi
00000070: 6E 64 6F 77 73 2E 0D 0A 24 00 00 00 00 00 00 00 ndows...$.......
Extension .shp, Count 6
C:\Windows\winsxs\x86_microsoft-windows-winocr-ocrengines_31bf3856ad364e35_6.1.7600.16385_none_a31b6cff9464aa03\baltic.shp
00000000: 58 49 53 00 00 00 00 7C 00 00 00 56 00 00 00 34 XIS....|...V...4
00000010: 00 00 04 E9 00 00 00 73 02 23 73 00 00 00 25 00 .......s.#s...%.
00000020: 00 00 27 00 00 00 5F 00 00 00 95 00 00 00 4F 00 ..'..._.......O.
00000030: 00 00 6F 00 00 00 6C 00 00 00 53 00 00 00 38 00 ..o...l...S...8.
00000040: 00 00 31 00 00 00 30 00 00 00 70 00 00 00 35 00 ..1...0...p...5.
00000050: 00 00 4C 4A 00 00 32 00 00 00 67 00 00 00 71 00 ..LJ..2...g...q.
00000060: 00 00 6C 6F 00 00 36 00 00 00 63 6C 00 00 39 00 ..lo..6...cl..9.
00000070: 00 00 6C 69 00 00 6A 00 00 00 69 00 00 00 72 6E ..li..j...i...rn
Extension .cty, Count 6
C:\Windows\System32\DriverStore\FileRepository\mdmcxav3.inf_x86_neutral_3c9275be906b01dd\VSTProf.cty
00000000: 3B 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ;***************
00000010: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000020: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000030: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000040: 2A 2A 2A 2A 2A 2A 2A 0D 0A 3B 20 43 6F 70 79 72 *******..; Copyr
00000050: 69 67 68 74 20 28 43 29 20 31 39 39 36 2D 31 39 ight (C) 1996-19
00000060: 39 38 2C 20 52 6F 63 6B 77 65 6C 6C 20 53 65 6D 98, Rockwell Sem
00000070: 69 63 6F 6E 64 75 63 74 6F 72 20 53 79 73 74 65 iconductor Syste
Extension .jnt, Count 6
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_1787de7505ebcb56\Journal.jnt
00000000: 4E 42 2A 00 FA 00 00 00 50 01 00 10 02 00 00 00 NB*.....P.......
00000010: 00 0A 00 00 01 00 00 00 FF FF FF FF 00 00 00 00 ................
00000020: 78 01 BB 70 5E F0 C1 C2 8D 52 0F 19 D0 80 1D 03 x..p^....R......
00000030: 33 C3 BF FF 9C 0C 6C 48 E2 8C 40 36 08 83 81 00 3.....lH..@6....
00000040: 03 03 13 90 01 E2 FF FB FF FF 3F 44 90 81 01 C8 ..........?D....
00000050: 1C 05 43 28 04 FE 02 DD 0A 8A 3F 18 1E 42 4E 1F ..C(......?..BN.
00000060: 75 2A 15 42 20 88 21 1F 08 4B 18 14 18 5C 19 F2 u*.B .!..K...\..
00000070: 80 74 11 43 25 2C 2B 13 45 8B 31 B0 C2 F3 3C BC .t.C%,+.E.1...<.
Extension .nt, Count 6
C:\Windows\System32\autoexec.nt
00000000: 40 65 63 68 6F 20 6F 66 66 0D 0A 0D 0A 52 45 4D @echo off....REM
00000010: 20 41 55 54 4F 45 58 45 43 2E 42 41 54 20 69 73 AUTOEXEC.BAT is
00000020: 20 6E 6F 74 20 75 73 65 64 20 74 6F 20 69 6E 69 not used to ini
00000030: 74 69 61 6C 69 7A 65 20 74 68 65 20 4D 53 2D 44 tialize the MS-D
00000040: 4F 53 20 65 6E 76 69 72 6F 6E 6D 65 6E 74 2E 0D OS environment..
00000050: 0A 52 45 4D 20 41 55 54 4F 45 58 45 43 2E 4E 54 .REM AUTOEXEC.NT
00000060: 20 69 73 20 75 73 65 64 20 74 6F 20 69 6E 69 74 is used to init
00000070: 69 61 6C 69 7A 65 20 74 68 65 20 4D 53 2D 44 4F ialize the MS-DO
Extension .scp, Count 6
C:\Windows\System32\ras\cis.scp
00000000: 3B 0D 0A 3B 20 54 68 69 73 20 69 73 20 61 20 73 ;..; This is a s
00000010: 63 72 69 70 74 20 66 69 6C 65 20 74 68 61 74 20 cript file that
00000020: 64 65 6D 6F 6E 73 74 72 61 74 65 73 20 68 6F 77 demonstrates how
00000030: 0D 0A 3B 20 74 6F 20 65 73 74 61 62 6C 69 73 68 ..; to establish
00000040: 20 61 20 50 50 50 20 63 6F 6E 6E 65 63 74 69 6F a PPP connectio
00000050: 6E 20 77 69 74 68 20 43 6F 6D 70 75 73 65 72 76 n with Compuserv
00000060: 65 2C 0D 0A 3B 20 77 68 69 63 68 20 72 65 71 75 e,..; which requ
00000070: 69 72 65 73 20 63 68 61 6E 67 69 6E 67 20 74 68 ires changing th
Extension .bat, Count 6
C:\autoexec.bat
00000000: 52 45 4D 20 44 75 6D 6D 79 20 66 69 6C 65 20 66 REM Dummy file f
00000010: 6F 72 20 4E 54 56 44 4D or NTVDM
Extension .mpg, Count 6
C:\Windows\Performance\WinSAT\Clip_1080_5sec_MPEG2_HD_15mbps.mpg
00000000: 00 00 01 B3 78 04 38 34 24 9F 37 51 10 11 11 12 ....x.84$.7Q....
00000010: 12 12 13 13 13 13 14 14 14 14 14 15 15 15 15 15 ................
00000020: 15 16 16 16 16 16 16 16 17 17 17 17 17 17 17 17 ................
00000030: 18 18 18 18 18 18 18 19 1A 19 1A 1A 19 1B 1B 1B ................
00000040: 1A 1B 1C 1C 1C 1C 1E 1E 1E 1F 1F 21 00 00 01 B5 ...........!....
00000050: 11 42 00 01 00 00 00 00 01 B8 00 08 00 40 00 00 .B...........@..
00000060: 01 00 00 0E FF C8 00 00 01 B5 8F FF F7 40 00 00 .............@..
00000070: 00 01 01 5B 85 A7 B3 DD 72 93 C9 6B 6D 72 7B 74 ...[....r..kmr{t
Extension .mid, Count 6
C:\Windows\Media\flourish.mid
00000000: 4D 54 68 64 00 00 00 06 00 01 00 10 01 80 4D 54 MThd..........MT
00000010: 72 6B 00 00 00 5D 00 FF 03 08 46 6C 6F 75 72 69 rk...]....Flouri
00000020: 73 68 00 FF 02 1B A9 32 30 30 30 20 4D 69 63 72 sh.....2000 Micr
00000030: 6F 73 6F 66 74 20 43 6F 72 70 6F 72 61 74 69 6F osoft Corporatio
00000040: 6E 00 FF 01 0C 4E 61 74 68 61 6E 20 47 72 69 67 n....Nathan Grig
00000050: 67 00 FF 58 04 07 03 0C 08 00 FF 59 02 00 00 00 g..X.......Y....
00000060: FF 51 03 07 A1 20 83 84 40 FF 51 03 07 A1 20 00 .Q... ..@.Q... .
00000070: FF 2F 00 4D 54 72 6B 00 00 07 71 00 FF 03 04 57 ./.MTrk...q....W
Extension .prx, Count 6
C:\Windows\WMSysPr9.prx
00000000: FF FE 3C 00 50 00 52 00 58 00 3E 00 0D 00 0A 00 ..<.P.R.X.>.....
00000010: 0D 00 0A 00 20 00 20 00 20 00 20 00 3C 00 70 00 .... . . . .<.p.
00000020: 72 00 6F 00 66 00 69 00 6C 00 65 00 20 00 76 00 r.o.f.i.l.e. .v.
00000030: 65 00 72 00 73 00 69 00 6F 00 6E 00 3D 00 22 00 e.r.s.i.o.n.=.".
00000040: 34 00 35 00 38 00 37 00 35 00 32 00 22 00 20 00 4.5.8.7.5.2.". .
00000050: 0D 00 0A 00 20 00 20 00 20 00 20 00 20 00 20 00 .... . . . . . .
00000060: 20 00 20 00 20 00 20 00 20 00 20 00 20 00 6E 00 . . . . . . .n.
00000070: 61 00 6D 00 65 00 3D 00 22 00 56 00 69 00 64 00 a.m.e.=.".V.i.d.
Extension .propdesc, Count 6
C:\Program Files\Internet Explorer\ie9props.propdesc
00000000: EF BB BF 3C 3F 78 6D 6C 20 20 76 65 72 73 69 6F ...<?xml versio
00000010: 6E 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 n="1.0" encoding
00000020: 3D 22 75 74 66 2D 38 22 3F 3E 0D 0A 3C 21 2D 2D ="utf-8"?>..<!--
00000030: 0D 0A 0D 0A 20 20 20 20 54 68 65 20 70 72 6F 70 .... The prop
00000040: 65 72 74 69 65 73 20 69 6E 20 74 68 69 73 20 66 erties in this f
00000050: 69 6C 65 20 63 6F 76 65 72 20 74 68 65 20 66 6F ile cover the fo
00000060: 6C 6C 6F 77 69 6E 67 3A 0D 0A 0D 0A 20 20 20 20 llowing:....
00000070: 20 20 20 20 4D 69 63 72 6F 73 6F 66 74 2E 49 45 Microsoft.IE
Extension .fx, Count 6
C:\Program Files\DVD Maker\Shared\Parity.fx
00000000: 2F 2F 2F 20 3C 63 6F 6D 70 61 6E 79 3E 4D 69 63 /// <company>Mic
00000010: 72 6F 73 6F 66 74 20 43 6F 72 70 6F 72 61 74 69 rosoft Corporati
00000020: 6F 6E 3C 2F 63 6F 6D 70 61 6E 79 3E 0D 0A 2F 2F on</company>..//
00000030: 2F 20 3C 63 6F 70 79 72 69 67 68 74 3E 43 6F 70 / <copyright>Cop
00000040: 79 72 69 67 68 74 20 28 63 29 20 4D 69 63 72 6F yright (c) Micro
00000050: 73 6F 66 74 20 43 6F 72 70 6F 72 61 74 69 6F 6E soft Corporation
00000060: 20 32 30 30 35 3C 2F 63 6F 70 79 72 69 67 68 74 2005</copyright
00000070: 3E 0D 0A 2F 2F 2F 20 3C 73 75 6D 6D 61 72 79 3E >../// <summary>
Extension .lua, Count 6
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\options.lua
00000000: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D ---------------.
00000050: 0A 2D 2D 20 55 6C 74 72 61 44 65 66 72 61 67 20 .-- UltraDefrag
00000060: 63 6F 6E 66 69 67 75 72 61 74 69 6F 6E 20 66 69 configuration fi
00000070: 6C 65 0D 0A 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D le..------------
Extension .comments, Count 7
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config.comments
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 73 .0" encoding="us
00000020: 2D 61 73 63 69 69 22 3F 3E 0D 0A 3C 21 2D 2D 0D -ascii"?>..<!--.
00000030: 0A 20 20 20 20 50 6C 65 61 73 65 20 72 65 66 65 . Please refe
00000040: 72 20 74 6F 20 6D 61 63 68 69 6E 65 2E 63 6F 6E r to machine.con
00000050: 66 69 67 2E 63 6F 6D 6D 65 6E 74 73 20 66 6F 72 fig.comments for
00000060: 20 61 20 64 65 73 63 72 69 70 74 69 6F 6E 20 61 a description a
00000070: 6E 64 0D 0A 20 20 20 20 74 68 65 20 64 65 66 61 nd.. the defa
Extension .rll, Count 8
C:\Program Files\Common Files\System\Ole DB\sqloledb.rll
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .gmmp, Count 8
C:\Windows\System32\spool\drivers\color\Graphics.gmmp
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 74 .0" encoding="ut
00000020: 66 2D 38 22 20 3F 3E 0D 0A 3C 67 6D 6D 3A 47 61 f-8" ?>..<gmm:Ga
00000030: 6D 75 74 4D 61 70 4D 6F 64 65 6C 0D 0A 09 49 44 mutMapModel...ID
00000040: 3D 22 68 74 74 70 3A 2F 2F 73 63 68 65 6D 61 73 ="http://schemas
00000050: 2E 6D 69 63 72 6F 73 6F 66 74 2E 63 6F 6D 2F 77 .microsoft.com/w
00000060: 69 6E 64 6F 77 73 2F 32 30 30 35 2F 30 32 2F 63 indows/2005/02/c
00000070: 6F 6C 6F 72 2F 47 72 61 70 68 69 63 73 2E 67 6D olor/Graphics.gm
Extension .ntf, Count 8
C:\Windows\System32\DriverStore\FileRepository\ntprint.inf_x86_neutral_88459cb66b0e2d44\I386\PSCRIPT.NTF
00000000: 31 46 54 4E 53 50 54 4E 00 00 01 00 00 00 00 00 1FTNSPTN........
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 0E 00 00 00 30 00 00 00 11 01 00 00 F0 01 00 00 ....0...........
00000030: 40 24 00 00 94 00 00 00 78 02 00 00 10 24 00 00 @$......x....$..
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: B8 26 00 00 9A 00 00 00 18 06 00 00 88 26 00 00 .&...........&..
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: D0 2C 00 00 DF 03 00 00 54 02 00 00 A0 2C 00 00 .,......T....,..
Extension .lxa, Count 8
C:\Windows\Speech\Engines\Lexicon\en-GB\grph2057.lxa
00000000: 4E AD 8E 57 0C 33 D3 11 9C 26 00 C0 4F 8E F8 7C N..W.3...&..O..|
00000010: 27 0A 44 26 64 64 5B 4E 8E 78 5B CB 1E 2C E8 8E '.D&dd[N.x[..,..
00000020: 09 08 00 00 E4 02 00 00 D8 02 00 00 34 00 00 00 ............4...
00000030: 0C 00 1F 00 14 00 07 00 23 00 21 00 22 00 07 00 ........#.!."...
00000040: 1C 00 07 00 1C 00 23 00 17 00 12 00 24 00 07 00 ......#.....$...
00000050: 1C 00 00 00 61 00 00 00 12 00 00 00 62 00 00 00 ....a.......b...
00000060: 0C 00 17 00 00 00 63 00 00 00 23 00 17 00 00 00 ......c...#.....
00000070: 64 00 00 00 0E 00 17 00 00 00 65 00 00 00 17 00 d.........e.....
Extension .lex, Count 8
C:\Windows\Globalization\ELS\HyphenationDictionaries\MsHy7en.lex
00000000: 04 00 00 00 14 00 00 00 70 00 00 00 3C B8 06 00 ........p...<...
00000010: F8 32 07 00 0B 00 00 00 01 00 00 00 00 00 00 00 .2..............
00000020: 00 00 00 00 00 00 00 09 04 00 00 00 0F 00 00 00 ................
00000030: 0F 00 00 00 20 00 00 00 01 00 00 00 16 00 00 00 .... ...........
00000040: 11 00 00 00 03 00 00 00 1B 00 00 00 5E 00 00 00 ............^...
00000050: 1C 00 00 00 5E 00 00 00 02 00 00 00 01 00 00 00 ....^...........
00000060: 19 00 00 00 02 00 00 00 2F 00 00 00 03 00 00 00 ......../.......
00000070: 00 00 00 00 00 00 00 00 5A 00 00 80 21 00 00 00 ........Z...!...
Extension .sep, Count 8
C:\Windows\System32\pcl.sep
00000000: 5C 0D 0A 5C 48 31 42 5C 4C 25 2D 31 32 33 34 35 \..\H1B\L%-12345
00000010: 58 40 50 4A 4C 20 45 4E 54 45 52 20 4C 41 4E 47 X@PJL ENTER LANG
00000020: 55 41 47 45 3D 50 43 4C 0D 0A 5C 48 31 42 5C 4C UAGE=PCL..\H1B\L
00000030: 26 6C 31 54 5C 30 0D 0A 5C 4D 5C 42 5C 53 5C 4E &l1T\0..\M\B\S\N
00000040: 5C 55 0D 0A 5C 55 5C 4C 4A 6F 62 20 3A 20 5C 49 \U..\U\LJob : \I
00000050: 0D 0A 5C 55 5C 4C 44 61 74 65 3A 20 5C 44 0D 0A ..\U\LDate: \D..
00000060: 5C 55 5C 4C 54 69 6D 65 3A 20 5C 54 0D 0A 5C 45 \U\LTime: \T..\E
00000070: 0D 0A ..
Extension .ceb, Count 9
C:\Program Files\Internet Explorer\iessetup.ceb
00000000: 53 5A 44 44 88 F0 27 33 41 00 55 70 00 00 FF 56 SZDD..'3A.Up...V
00000010: 65 72 73 69 6F 6E 2C FF 20 31 0D 0A 46 69 6C 65 ersion,. 1..File
00000020: FF 2C 20 25 57 49 4E 44 49 FF 52 25 5C 53 59 53 ., %WINDI.R%\SYS
00000030: 54 45 FF 4D 33 32 5C 49 45 50 45 FF 45 52 53 2E TE.M32\IEPE.ERS.
00000040: 44 4C 4C 0D DF 0A 52 61 6E 67 FF F0 30 78 41 30 DLL...Rang..0xA0
00000050: 26 00 2D 04 26 01 F9 F0 21 06 31 2B 0D 20 3B 0D &.-.&...!.1+. ;.
00000060: 48 01 45 01 53 0D 48 04 32 6B 0D 45 07 49 33 86 H.E.S.H.2k.E.I3.
00000070: 0D 45 07 34 A1 0D 45 07 35 BC 0D 12 45 07 61 D7 .E.4..E.5...E.a.
Extension .mp3, Count 9
C:\Program Files\OpenSSH\home\Public\Music\Sample Music\Kalimba.mp3
00000000: 49 44 33 03 00 00 00 03 59 31 47 45 4F 42 00 00 ID3.....Y1GEOB..
00000010: 00 19 00 00 00 00 00 53 66 4D 61 72 6B 65 72 73 .......SfMarkers
00000020: 00 0C 00 00 00 64 00 00 00 00 00 00 00 43 4F 4D .....d.......COM
00000030: 4D 00 00 00 17 00 00 00 65 6E 67 00 4E 69 6E 6A M.......eng.Ninj
00000040: 61 20 54 75 6E 65 20 52 65 63 6F 72 64 73 50 52 a Tune RecordsPR
00000050: 49 56 00 00 00 29 00 00 57 4D 2F 4D 65 64 69 61 IV...)..WM/Media
00000060: 43 6C 61 73 73 53 65 63 6F 6E 64 61 72 79 49 44 ClassSecondaryID
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .cmd, Count 9
C:\Windows\System32\onlinesetup.cmd
00000000: 72 65 6D 20 40 65 63 68 6F 20 6F 66 66 0D 0A 73 rem @echo off..s
00000010: 65 74 6C 6F 63 61 6C 0D 0A 0D 0A 73 74 61 72 74 etlocal....start
00000020: 20 63 6D 64 2E 65 78 65 0D 0A 0D 0A 72 65 6D 0D cmd.exe....rem.
00000030: 0A 72 65 6D 20 49 74 20 73 65 65 6D 73 20 72 65 .rem It seems re
00000040: 64 69 72 65 63 74 69 6F 6E 73 20 6C 69 6B 65 20 directions like
00000050: 32 3E 6E 75 6C 20 64 6F 6E 27 74 20 77 6F 72 6B 2>nul don't work
00000060: 20 63 6F 72 72 65 63 74 6C 79 2C 20 73 6F 20 61 correctly, so a
00000070: 76 6F 69 64 20 74 68 65 6D 20 69 6E 20 74 68 69 void them in thi
Extension .wma, Count 10
C:\Windows\winsxs\x86_microsoft-windows-ringtonesamples_31bf3856ad364e35_6.1.7600.16385_none_b73fb7eb03882af2\Ringtone 01.wma
00000000: 30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6C 0&.u.f.......b.l
00000010: 3F 13 00 00 00 00 00 00 06 00 00 00 01 02 A1 DC ?...............
00000020: AB 8C 47 A9 CF 11 8E E4 00 C0 0C 20 53 65 68 00 ..G........ Seh.
00000030: 00 00 00 00 00 00 FE D2 2B E5 E4 C8 49 4B A9 DC ........+...IK..
00000040: 28 52 29 F5 43 7A 69 14 03 00 00 00 00 00 C0 6F (R).Czi........o
00000050: B1 1F 70 82 C9 01 16 00 00 00 00 00 00 00 40 46 ..p...........@F
00000060: 97 05 00 00 00 00 C0 F2 DE 04 00 00 00 00 2B 06 ..............+.
00000070: 00 00 00 00 00 00 02 00 00 00 F4 22 00 00 F4 22 ..........."..."
Extension .vrg, Count 10
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation_ServiceModelEndpointPerfCounters.vrg
00000000: 56 53 52 45 47 37 0D 0A 0D 0A 5B 48 4B 45 59 5F VSREG7....[HKEY_
00000010: 4C 4F 43 41 4C 5F 4D 41 43 48 49 4E 45 5C 53 59 LOCAL_MACHINE\SY
00000020: 53 54 45 4D 5C 43 75 72 72 65 6E 74 43 6F 6E 74 STEM\CurrentCont
00000030: 72 6F 6C 53 65 74 5C 53 65 72 76 69 63 65 73 5C rolSet\Services\
00000040: 53 65 72 76 69 63 65 4D 6F 64 65 6C 45 6E 64 70 ServiceModelEndp
00000050: 6F 69 6E 74 20 33 2E 30 2E 30 2E 30 5D 0D 0A 0D oint 3.0.0.0]...
00000060: 0A 5B 48 4B 45 59 5F 4C 4F 43 41 4C 5F 4D 41 43 .[HKEY_LOCAL_MAC
00000070: 48 49 4E 45 5C 53 59 53 54 45 4D 5C 43 75 72 72 HINE\SYSTEM\Curr
Extension .nlt, Count 12
C:\Windows\Globalization\ELS\Transliteration\bengali-to-latin.nlt
00000000: 45 4C 53 54 01 00 00 00 74 00 00 00 00 00 00 00 ELST....t.......
00000010: 2C 00 00 00 01 00 00 00 80 06 00 00 00 00 00 00 ,...............
00000020: 00 00 00 00 64 00 00 00 EC 00 00 00 01 00 20 00 ....d......... .
00000030: 00 00 00 00 00 00 00 00 01 00 30 00 00 00 00 00 ..........0.....
00000040: 01 00 31 00 00 00 00 00 02 00 31 00 36 00 00 00 ..1.......1.6...
00000050: 01 00 32 00 00 00 00 00 01 00 33 00 00 00 00 00 ..2.......3.....
00000060: 01 00 34 00 00 00 00 00 01 00 35 00 00 00 00 00 ..4.......5.....
00000070: 01 00 36 00 00 00 00 00 01 00 37 00 00 00 00 00 ..6.......7.....
Extension .wmf, Count 12
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_1787de7505ebcb56\grid_(cm).wmf
00000000: D7 CD C6 9A 00 00 00 00 00 00 5E 00 5E 00 60 00 ..........^.^.`.
00000010: 00 00 00 00 71 57 01 00 09 00 00 03 A9 05 00 00 ....qW..........
00000020: 04 00 5A 02 00 00 00 00 04 00 00 00 03 01 08 00 ..Z.............
00000030: 05 00 00 00 0B 02 00 00 00 00 05 00 00 00 0C 02 ................
00000040: 5E 00 5E 00 05 00 00 00 06 01 02 00 00 00 05 00 ^.^.............
00000050: 00 00 02 01 01 00 00 00 09 00 00 00 F7 00 00 03 ................
00000060: 02 00 00 00 00 00 FF FF FF 00 04 00 00 00 34 02 ..............4.
00000070: 00 00 03 00 00 00 35 00 5A 02 00 00 43 0F 20 00 ......5.Z...C. .
Extension .ani, Count 12
C:\Windows\Cursors\aero_busy.ani
00000000: 52 49 46 46 18 D5 03 00 41 43 4F 4E 61 6E 69 68 RIFF....ACONanih
00000010: 24 00 00 00 24 00 00 00 12 00 00 00 12 00 00 00 $...$...........
00000020: 00 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 ........ .......
00000030: 03 00 00 00 01 00 00 00 4C 49 53 54 E0 D4 03 00 ........LIST....
00000040: 66 72 61 6D 69 63 6F 6E 76 36 00 00 00 00 02 00 framiconv6......
00000050: 02 00 30 30 00 00 18 00 18 00 A8 25 00 00 26 00 ..00.......%..&.
00000060: 00 00 20 20 00 00 10 00 10 00 A8 10 00 00 CE 25 .. ...........%
00000070: 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 ..(...0...`.....
Extension .acm, Count 12
C:\Windows\System32\imaadp32.acm
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 D8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .rpo, Count 12
C:\Windows\System32\DriverStore\FileRepository\prnhp003.inf_x86_neutral_8685826a5ca37e6b\I386\hpfclw71.rpo
00000000: FC FF 00 00 02 00 00 00 02 00 00 00 18 00 00 00 ................
00000010: 10 2C 09 00 D4 C4 0F 00 8C 00 80 00 08 46 FE FF .,...........F..
00000020: 1B 00 02 03 00 00 00 00 60 4D 00 00 38 00 00 00 ........`M..8...
00000030: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF ................
00000040: FF FF FF FF FF FF FF FF 00 00 00 00 08 44 01 00 .............D..
00000050: 08 44 01 00 FF FF FF FF 24 4C 01 00 7C 6D 00 00 .D......$L..|m..
00000060: AC 6D 00 00 C8 6E 00 00 C8 6E 00 00 FF FF FF FF .m...n...n......
00000070: FF FF FF FF FF FF FF FF FF FF FF FF C0 41 01 00 .............A..
Extension .inc, Count 12
C:\Program Files\Common Files\System\ado\adojavas.inc
00000000: 3C 25 0D 0A 2F 2F 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D <%..//----------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 0D 0A 2F 2F 20 4D ----------..// M
00000050: 69 63 72 6F 73 6F 66 74 20 41 44 4F 0D 0A 2F 2F icrosoft ADO..//
00000060: 0D 0A 2F 2F 20 43 6F 70 79 72 69 67 68 74 20 28 ..// Copyright (
00000070: 63 29 20 31 39 39 36 2D 31 39 39 38 20 4D 69 63 c) 1996-1998 Mic
Extension .am, Count 12
C:\Windows\Speech\Engines\SR\en-GB\AF032057.am
00000000: 4A A5 14 1C 05 99 CC 44 8B D1 51 06 D0 20 E9 52 J......D..Q.. .R
00000010: 9E BD 1B 61 92 C7 81 3E CE 17 19 9F 69 09 A8 0F ...a...>....i...
00000020: 01 00 00 00 09 08 00 00 01 00 00 00 02 00 00 00 ................
00000030: 01 00 00 00 00 00 00 00 00 00 00 00 32 00 00 00 ............2...
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: BC 30 73 D4 1C 5E EE 4B BA C7 0C 5A 06 51 11 F1 .0s..^.K...Z.Q..
00000060: 0C 00 00 00 48 00 00 00 72 B4 00 00 96 10 00 00 ....H...r.......
00000070: 21 00 00 00 91 00 00 00 10 00 00 00 30 00 00 00 !...........0...
Extension .wdf, Count 13
C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
00000000: 61 0D 0A a..
Extension .tsp, Count 13
C:\Windows\System32\hidphone.tsp
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 E8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .json, Count 13
C:\Windows\AppCompat\UA\Appraiser_RS1.JSON
00000000: 7B 0D 0A 20 20 20 20 22 4A 73 6F 6E 53 75 63 63 {.. "JsonSucc
00000010: 65 73 73 66 75 6C 6C 79 57 72 69 74 74 65 6E 22 essfullyWritten"
00000020: 20 3A 20 74 72 75 65 2C 0D 0A 20 20 20 20 22 4A : true,.. "J
00000030: 73 6F 6E 56 65 72 73 69 6F 6E 22 20 3A 20 34 2C sonVersion" : 4,
00000040: 0D 0A 20 20 20 20 22 4A 73 6F 6E 43 72 65 61 74 .. "JsonCreat
00000050: 69 6F 6E 54 69 6D 65 22 20 3A 20 22 31 33 33 33 ionTime" : "1333
00000060: 32 30 32 34 36 33 34 34 32 32 34 34 39 38 22 2C 20246344224498",
00000070: 0D 0A 20 20 20 20 22 43 6F 6D 70 61 74 53 65 63 .. "CompatSec
Extension .lnk, Count 13
C:\Program Files\OpenSSH\home\IEUser\Desktop\eula.lnk
00000000: 4C 00 00 00 01 14 02 00 00 00 00 00 C0 00 00 00 L...............
00000010: 00 00 00 46 8B 00 00 00 20 00 00 00 B0 77 A9 34 ...F.... ....w.4
00000020: 31 84 D3 01 B0 77 A9 34 31 84 D3 01 00 4C 1B 82 1....w.41....L..
00000030: 30 84 D3 01 55 70 00 00 00 00 00 00 01 00 00 00 0...Up..........
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 2D 01 14 00 ............-...
00000050: 1F 50 E0 4F D0 20 EA 3A 69 10 A2 D8 08 00 2B 30 .P.O. .:i.....+0
00000060: 30 9D 19 00 2F 43 3A 5C 00 00 00 00 00 00 00 00 0.../C:\........
00000070: 00 00 00 00 00 00 00 00 00 00 00 52 00 31 00 00 ...........R.1..
Extension .reg, Count 14
C:\Program Files\Common Files\System\msadc\handler.reg
00000000: 52 45 47 45 44 49 54 34 0D 0A 0D 0A 5B 48 4B 45 REGEDIT4....[HKE
00000010: 59 5F 4C 4F 43 41 4C 5F 4D 41 43 48 49 4E 45 5C Y_LOCAL_MACHINE\
00000020: 53 4F 46 54 57 41 52 45 5C 4D 69 63 72 6F 73 6F SOFTWARE\Microso
00000030: 66 74 5C 44 61 74 61 46 61 63 74 6F 72 79 5D 0D ft\DataFactory].
00000040: 0A 0D 0A 5B 48 4B 45 59 5F 4C 4F 43 41 4C 5F 4D ...[HKEY_LOCAL_M
00000050: 41 43 48 49 4E 45 5C 53 4F 46 54 57 41 52 45 5C ACHINE\SOFTWARE\
00000060: 4D 69 63 72 6F 73 6F 66 74 5C 44 61 74 61 46 61 Microsoft\DataFa
00000070: 63 74 6F 72 79 5C 48 61 6E 64 6C 65 72 49 6E 66 ctory\HandlerInf
Extension .rat, Count 14
C:\Windows\System32\icrav03.rat
00000000: 28 28 50 49 43 53 2D 76 65 72 73 69 6F 6E 20 31 ((PICS-version 1
00000010: 2E 31 29 0D 0A 20 28 72 61 74 69 6E 67 2D 73 79 .1).. (rating-sy
00000020: 73 74 65 6D 20 22 68 74 74 70 3A 2F 2F 77 77 77 stem "http://www
00000030: 2E 69 63 72 61 2E 6F 72 67 2F 22 29 0D 0A 20 28 .icra.org/").. (
00000040: 72 61 74 69 6E 67 2D 73 65 72 76 69 63 65 20 22 rating-service "
00000050: 68 74 74 70 3A 2F 2F 77 77 77 2E 69 63 72 61 2E http://www.icra.
00000060: 6F 72 67 2F 70 69 63 73 2F 76 6F 63 61 62 75 6C org/pics/vocabul
00000070: 61 72 79 76 30 33 2F 22 29 0D 0A 20 28 6E 61 6D aryv03/").. (nam
Extension .dic, Count 14
C:\Windows\IME\IMEJP10\DICTS\IMJPCH.DIC
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B0 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .stl, Count 14
C:\Windows\System32\CodeIntegrity\driver.stl
00000000: 30 82 12 DB 06 09 2A 86 48 86 F7 0D 01 07 02 A0 0.....*.H.......
00000010: 82 12 CC 30 82 12 C8 02 01 01 31 0F 30 0D 06 09 ...0......1.0...
00000020: 60 86 48 01 65 03 04 02 01 05 00 30 82 03 1E 06 `.H.e......0....
00000030: 09 2B 06 01 04 01 82 37 0A 01 A0 82 03 0F 30 82 .+.....7......0.
00000040: 03 0B 30 0C 06 0A 2B 06 01 04 01 82 37 3D 03 01 ..0...+.....7=..
00000050: 17 0D 31 37 31 32 31 32 31 37 34 32 35 37 5A 30 ..171212174257Z0
00000060: 0E 06 0A 2B 06 01 04 01 82 37 3D 03 01 05 00 A0 ...+.....7=.....
00000070: 82 02 DA 30 82 02 D6 30 37 06 0B 2B 06 01 04 01 ...0...07..+....
Extension .amx, Count 15
C:\Windows\System32\manifeststore\advapi32.amx
00000000: 41 4D 58 31 DA 07 0B 00 06 00 14 00 0B 00 04 00 AMX1............
00000010: 20 00 DF 00 9F 04 32 3F 0C 55 B0 42 9C F1 14 A1 .....2?.U.B....
00000020: FB 8A 97 E9 05 00 00 00 04 00 00 00 01 00 00 00 ................
00000030: 00 00 00 00 01 00 00 00 01 01 00 00 01 00 00 00 ................
00000040: 07 00 00 00 00 00 00 00 01 00 0F 00 01 00 00 00 ................
00000050: 01 00 00 00 02 00 00 00 02 00 0F 00 38 00 00 00 ............8...
00000060: 58 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 X...............
00000070: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .dlm, Count 16
C:\Windows\Speech\Engines\SR\en-GB\l2057.dlm
00000000: 53 0B CE FE 10 47 84 9B 37 81 3B 59 88 39 13 00 S....G..7.;Y.9..
00000010: 58 02 00 00 04 04 1E 00 4C 5F 2E 00 FF FF FF FF X.......L_......
00000020: 00 00 00 00 B3 5F 0A 00 00 00 00 00 03 00 00 00 ....._..........
00000030: 03 00 00 00 00 00 00 00 FF FF FF FF F9 D2 01 00 ................
00000040: 9F B2 02 00 9F B2 02 00 9F B2 02 00 00 00 00 00 ................
00000050: 00 00 00 00 80 00 00 00 00 00 00 00 E5 FE FF FF ................
00000060: AA FD FF FF 67 FC FF FF 1A FB FF FF C5 F9 FF FF ....g...........
00000070: 66 F8 FF FF FF F6 FF FF 8F F5 FF FF 19 F4 FF FF f...............
Extension .ngr, Count 16
C:\Windows\Speech\Engines\SR\en-GB\l2057.ngr
00000000: 53 0B CE FE 6B DD 31 7F 10 47 84 9B F9 D2 01 00 S...k.1..G......
00000010: C7 EB 71 00 84 54 08 00 53 84 54 00 FF FF FF FF ..q..T..S.T.....
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 E7 06 01 00 ................
00000030: 00 26 2D 00 BE BB 01 00 00 84 80 00 82 82 02 00 .&-.............
00000040: 00 23 A8 00 ED 3B 03 00 02 8B D0 00 F9 D5 03 00 .#...;..........
00000050: 00 8D F2 00 4C 80 04 00 03 5F 43 01 36 25 05 00 ....L...._C.6%..
00000060: 02 A7 59 01 19 B2 05 00 02 4B 80 01 22 03 06 00 ..Y......K.."...
00000070: 04 BC 8F 01 4F 5C 06 00 02 CD 9E 01 91 B2 06 00 ....O\..........
Extension .compositefont, Count 16
C:\Windows\Fonts\GlobalMonospace.CompositeFont
00000000: EF BB BF 3C 46 6F 6E 74 46 61 6D 69 6C 79 0D 0A ...<FontFamily..
00000010: 20 20 20 20 78 6D 6C 6E 73 3D 22 68 74 74 70 3A xmlns="http:
00000020: 2F 2F 73 63 68 65 6D 61 73 2E 6D 69 63 72 6F 73 //schemas.micros
00000030: 6F 66 74 2E 63 6F 6D 2F 77 69 6E 66 78 2F 32 30 oft.com/winfx/20
00000040: 30 36 2F 78 61 6D 6C 2F 63 6F 6D 70 6F 73 69 74 06/xaml/composit
00000050: 65 2D 66 6F 6E 74 22 0D 0A 20 20 20 20 78 6D 6C e-font".. xml
00000060: 6E 73 3A 78 3D 22 68 74 74 70 3A 2F 2F 73 63 68 ns:x="http://sch
00000070: 65 6D 61 73 2E 6D 69 63 72 6F 73 6F 66 74 2E 63 emas.microsoft.c
Extension .url, Count 16
C:\Program Files\OpenSSH\openssh.url
00000000: 5B 49 6E 74 65 72 6E 65 74 53 68 6F 72 74 63 75 [InternetShortcu
00000010: 74 5D 0D 0A 55 52 4C 3D 68 74 74 70 3A 2F 2F 77 t]..URL=http://w
00000020: 77 77 2E 6D 6C 73 2D 73 6F 66 74 77 61 72 65 2E ww.mls-software.
00000030: 63 6F 6D 2F 6F 70 65 6E 73 73 68 64 2E 68 74 6D com/opensshd.htm
00000040: 6C 0D 0A l..
Extension .h1k, Count 16
C:\Windows\Help\Help\en-US\Help_AssetId.H1K
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 3F 3E 0D 0A 3C 21 44 4F 43 54 59 50 45 .0"?>..<!DOCTYPE
00000020: 20 48 65 6C 70 49 6E 64 65 78 3E 0D 0A 3C 48 65 HelpIndex>..<He
00000030: 6C 70 49 6E 64 65 78 20 44 54 44 56 65 72 73 69 lpIndex DTDVersi
00000040: 6F 6E 3D 22 31 2E 30 22 20 4E 61 6D 65 3D 22 41 on="1.0" Name="A
00000050: 73 73 65 74 49 64 22 3E 0D 0A 3C 2F 48 65 6C 70 ssetId">..</Help
00000060: 49 6E 64 65 78 3E 0D 0A 0D 0A Index>....
Extension .dtd, Count 16
C:\Windows\System32\xwizard.dtd
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 55 54 .0" encoding="UT
00000020: 46 2D 38 22 3F 3E 0D 0A 0D 0A 3C 21 45 4E 54 49 F-8"?>....<!ENTI
00000030: 54 59 20 25 20 6F 6E 65 72 72 6F 72 74 79 70 65 TY % onerrortype
00000040: 73 20 22 28 69 67 6E 6F 72 65 20 7C 20 61 62 6F s "(ignore | abo
00000050: 72 74 29 22 20 3E 0D 0A 0D 0A 3C 21 45 4E 54 49 rt)" >....<!ENTI
00000060: 54 59 20 25 20 72 65 67 69 73 74 72 79 61 63 74 TY % registryact
00000070: 69 6F 6E 74 79 70 65 73 20 22 28 69 6D 61 67 65 iontypes "(image
Extension .etl, Count 17
C:\Windows\Panther\setup.etl
00000000: 00 10 00 00 00 00 00 00 E8 01 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 08 09 00 03 00 00 00 ................
00000030: E8 01 00 00 01 00 04 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 02 00 01 C0 9A 01 00 00 ................
00000050: 90 00 00 00 04 00 00 00 F0 67 41 F4 30 84 D3 01 .........gA.0...
00000060: 00 00 00 00 00 00 00 00 00 10 00 00 06 01 01 05 ................
00000070: B0 1D 00 00 01 00 00 00 80 82 0F 2C 31 84 D3 01 ...........,1...
Extension .scr, Count 17
C:\Windows\System32\Bubbles.scr
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 E8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .mib, Count 17
C:\Windows\winsxs\x86_microsoft-windows-snmp-mib-files_31bf3856ad364e35_6.1.7600.16385_none_0efe01a545379abc\accserv.mib
00000000: 52 41 44 49 55 53 2D 41 43 43 2D 53 45 52 56 45 RADIUS-ACC-SERVE
00000010: 52 2D 4D 49 42 20 44 45 46 49 4E 49 54 49 4F 4E R-MIB DEFINITION
00000020: 53 20 3A 3A 3D 20 42 45 47 49 4E 0D 0A 0D 0A 49 S ::= BEGIN....I
00000030: 4D 50 4F 52 54 53 0D 0A 20 20 20 20 20 20 20 4D MPORTS.. M
00000040: 4F 44 55 4C 45 2D 49 44 45 4E 54 49 54 59 2C 20 ODULE-IDENTITY,
00000050: 4F 42 4A 45 43 54 2D 54 59 50 45 2C 20 4F 42 4A OBJECT-TYPE, OBJ
00000060: 45 43 54 2D 49 44 45 4E 54 49 54 59 2C 0D 0A 20 ECT-IDENTITY,..
00000070: 20 20 20 20 20 20 43 6F 75 6E 74 65 72 33 32 2C Counter32,
Extension .uninstall, Count 18
C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet.mof.uninstall
00000000: 2F 2F 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A //**************
00000010: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000020: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000030: 2A 2A 2A 2A 0D 0A 2F 2F 20 2A 2A 2A 20 41 53 50 ****..// *** ASP
00000040: 2E 4E 45 54 20 54 72 61 63 65 20 44 61 74 61 20 .NET Trace Data
00000050: 4C 61 79 6F 75 74 0D 0A 2F 2F 2A 2A 2A 2A 2A 2A Layout..//******
00000060: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000070: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
Extension .master, Count 18
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\webAdmin.master
00000000: 3C 25 40 20 4D 61 73 74 65 72 20 63 6C 61 73 73 <%@ Master class
00000010: 4E 61 6D 65 3D 22 57 65 62 41 64 6D 69 6E 4D 61 Name="WebAdminMa
00000020: 73 74 65 72 50 61 67 65 22 20 25 3E 0D 0A 3C 25 sterPage" %>..<%
00000030: 40 20 52 65 67 69 73 74 65 72 20 54 61 67 50 72 @ Register TagPr
00000040: 65 66 69 78 3D 22 75 63 31 22 20 54 61 67 4E 61 efix="uc1" TagNa
00000050: 6D 65 3D 22 6E 61 76 69 67 61 74 69 6F 6E 42 61 me="navigationBa
00000060: 72 22 20 53 72 63 3D 22 7E 2F 6E 61 76 69 67 61 r" Src="~/naviga
00000070: 74 69 6F 6E 42 61 72 2E 61 73 63 78 22 20 25 3E tionBar.ascx" %>
Extension .hlp, Count 18
C:\Windows\System32\EDIT.HLP
00000000: 40 40 21 31 21 40 0D 0A 45 64 69 74 20 43 6F 6D @@!1!@..Edit Com
00000010: 6D 61 6E 64 73 0D 0A 0D 0A 43 75 72 73 6F 72 20 mands....Cursor
00000020: 4D 6F 76 65 6D 65 6E 74 20 43 6F 6D 6D 61 6E 64 Movement Command
00000030: 73 0D 0A C4 C4 C4 C4 C4 C4 C4 C4 C4 C4 C4 C4 C4 s...............
00000040: C4 C4 C4 C4 C4 C4 C4 C4 C4 C4 C4 C4 0D 0A 48 6F ..............Ho
00000050: 6D 65 20 20 20 20 20 20 20 2D 20 4D 6F 76 65 20 me - Move
00000060: 74 6F 20 74 68 65 20 73 74 61 72 74 20 6F 66 20 to the start of
00000070: 74 68 65 20 63 75 72 72 65 6E 74 20 6C 69 6E 65 the current line
Extension .cs, Count 21
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\ApplicationConfigurationPage.cs
00000000: 2F 2F 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D //--------------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000050: 0D 0A 2F 2F 20 3C 63 6F 70 79 72 69 67 68 74 20 ..// <copyright
00000060: 66 69 6C 65 3D 22 41 70 70 6C 69 63 61 74 69 6F file="Applicatio
00000070: 6E 43 6F 6E 66 69 67 75 72 61 74 69 6F 6E 50 61 nConfigurationPa
Extension .default, Count 23
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config.default
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 55 54 .0" encoding="UT
00000020: 46 2D 38 22 20 3F 3E 0D 0A 3C 21 2D 2D 0D 0A 20 F-8" ?>..<!--..
00000030: 20 20 20 50 6C 65 61 73 65 20 72 65 66 65 72 20 Please refer
00000040: 74 6F 20 6D 61 63 68 69 6E 65 2E 63 6F 6E 66 69 to machine.confi
00000050: 67 2E 63 6F 6D 6D 65 6E 74 73 20 66 6F 72 20 61 g.comments for a
00000060: 20 64 65 73 63 72 69 70 74 69 6F 6E 20 61 6E 64 description and
00000070: 0D 0A 20 20 20 20 74 68 65 20 64 65 66 61 75 6C .. the defaul
Extension .vbs, Count 24
C:\Windows\System32\gatherNetworkInfo.vbs
00000000: 44 69 6D 20 46 53 4F 2C 20 73 68 65 6C 6C 2C 20 Dim FSO, shell,
00000010: 78 73 6C 50 72 6F 63 65 73 73 6F 72 0D 0A 0D 0A xslProcessor....
00000020: 53 75 62 20 52 75 6E 43 6D 64 28 43 6F 6D 6D 61 Sub RunCmd(Comma
00000030: 6E 64 53 74 72 69 6E 67 2C 20 4F 75 74 70 75 74 ndString, Output
00000040: 46 69 6C 65 29 0D 0A 09 63 6D 64 20 3D 20 22 63 File)...cmd = "c
00000050: 6D 64 20 2F 63 20 22 20 2B 20 43 6F 6D 6D 61 6E md /c " + Comman
00000060: 64 53 74 72 69 6E 67 20 2B 20 22 20 3E 3E 20 22 dString + " >> "
00000070: 20 2B 20 4F 75 74 70 75 74 46 69 6C 65 0D 0A 09 + OutputFile...
Extension .rsp, Count 24
C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.rsp
00000000: 23 20 54 68 69 73 20 66 69 6C 65 20 63 6F 6E 74 # This file cont
00000010: 61 69 6E 73 20 63 6F 6D 6D 61 6E 64 2D 6C 69 6E ains command-lin
00000020: 65 20 6F 70 74 69 6F 6E 73 20 74 68 61 74 20 74 e options that t
00000030: 68 65 20 43 23 0D 0A 23 20 63 6F 6D 6D 61 6E 64 he C#..# command
00000040: 20 6C 69 6E 65 20 63 6F 6D 70 69 6C 65 72 20 28 line compiler (
00000050: 43 53 43 29 20 77 69 6C 6C 20 70 72 6F 63 65 73 CSC) will proces
00000060: 73 20 61 73 20 70 61 72 74 0D 0A 23 20 6F 66 20 s as part..# of
00000070: 65 76 65 72 79 20 63 6F 6D 70 69 6C 61 74 69 6F every compilatio
Extension .vp, Count 25
C:\Windows\System32\DriverStore\FileRepository\atiilhag.inf_x86_neutral_1d882551ede2c65b\ativcaxx.vp
00000000: 5B 1A 01 00 04 00 00 00 60 03 00 00 02 00 9D 06 [.......`.......
00000010: 00 00 6B 01 00 00 92 BA 01 00 04 00 01 00 B8 1C ..k.............
00000020: 78 63 5F 63 6F 70 70 5F 61 67 65 6E 74 00 07 01 xc_copp_agent...
00000030: 01 28 C8 C8 FD A9 C6 24 F5 89 5E 5A 26 96 2E 21 .(.....$..^Z&..!
00000040: 66 A8 A3 7B D8 73 04 00 60 06 42 53 00 08 E2 01 f..{.s..`.BS....
00000050: 05 00 20 58 43 5F 43 4F 50 50 5F 41 47 45 4E 54 .. XC_COPP_AGENT
00000060: 5F 31 00 08 00 00 00 00 04 53 00 08 B6 BF 47 00 _1.......S....G.
00000070: 06 4C 56 00 08 00 00 01 00 00 00 01 9C 01 28 56 .LV...........(V
Extension .ocx, Count 27
C:\Windows\System32\dmview.ocx
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 F0 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .xsl, Count 28
C:\Windows\System32\EventViewer_EventDetails.xsl
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 74 .0" encoding="ut
00000020: 66 2D 38 22 3F 3E 0D 0A 0D 0A 3C 78 73 6C 3A 73 f-8"?>....<xsl:s
00000030: 74 79 6C 65 73 68 65 65 74 20 76 65 72 73 69 6F tylesheet versio
00000040: 6E 3D 22 31 2E 30 22 20 78 6D 6C 6E 73 3A 78 73 n="1.0" xmlns:xs
00000050: 6C 3D 22 68 74 74 70 3A 2F 2F 77 77 77 2E 77 33 l="http://www.w3
00000060: 2E 6F 72 67 2F 31 39 39 39 2F 58 53 4C 2F 54 72 .org/1999/XSL/Tr
00000070: 61 6E 73 66 6F 72 6D 22 3E 0D 0A 0D 0A 3C 21 2D ansform">....<!-
Extension .theme, Count 29
C:\Windows\Resources\Ease of Access Themes\basic.theme
00000000: 3B 20 43 6F 70 79 72 69 67 68 74 20 A9 20 4D 69 ; Copyright . Mi
00000010: 63 72 6F 73 6F 66 74 20 43 6F 72 70 2E 0D 0A 0D crosoft Corp....
00000020: 0A 5B 54 68 65 6D 65 5D 0D 0A 3B 20 57 69 6E 64 .[Theme]..; Wind
00000030: 6F 77 73 20 37 20 2D 20 49 44 53 5F 54 48 45 4D ows 7 - IDS_THEM
00000040: 45 5F 44 49 53 50 4C 41 59 4E 41 4D 45 5F 42 41 E_DISPLAYNAME_BA
00000050: 53 49 43 0D 0A 44 69 73 70 6C 61 79 4E 61 6D 65 SIC..DisplayName
00000060: 3D 40 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 53 =@%SystemRoot%\S
00000070: 79 73 74 65 6D 33 32 5C 74 68 65 6D 65 75 69 2E ystem32\themeui.
Extension .ttc, Count 29
C:\Windows\ehome\WTVGOTHIC-R.ttc
00000000: 74 74 63 66 00 01 00 00 00 00 00 02 00 00 00 20 ttcf...........
00000010: 00 00 01 4C 44 53 49 47 00 00 24 28 00 7F 6C 48 ...LDSIG..$(..lH
00000020: 00 01 00 00 00 12 01 00 00 04 00 20 47 53 55 42 ........... GSUB
00000030: CD 08 EE 79 00 00 02 78 00 00 16 DC 4C 54 53 48 ...y...x....LTSH
00000040: 98 8D E2 05 00 00 19 54 00 00 42 91 4F 53 2F 32 .......T..B.OS/2
00000050: 95 3F 52 A8 00 00 5B E8 00 00 00 60 63 6D 61 70 .?R...[....`cmap
00000060: 67 83 C1 37 00 00 5C 48 00 01 70 BE 63 76 74 20 g..7..\H..p.cvt
00000070: 53 8C 55 72 00 01 CD 08 00 00 07 58 66 70 67 6D S.Ur.......Xfpgm
Extension .uce, Count 32
C:\Windows\System32\bopomofo.uce
00000000: 55 43 45 58 18 59 00 00 B6 03 2C 00 04 00 0B 00 UCEX.Y....,.....
00000010: 26 59 00 00 D0 02 00 00 E7 01 00 00 00 00 00 00 &Y..............
00000020: 2A 59 00 00 9E 06 00 00 08 02 00 00 00 00 00 00 *Y..............
00000030: 2E 59 00 00 AE 0A 00 00 F2 01 00 00 00 00 00 00 .Y..............
00000040: 32 59 00 00 92 0E 00 00 CB 02 00 00 00 00 00 00 2Y..............
00000050: 36 59 00 00 28 14 00 00 57 02 00 00 00 00 00 00 6Y..(...W.......
00000060: 3A 59 00 00 D6 18 00 00 47 01 00 00 00 00 00 00 :Y......G.......
00000070: 3E 59 00 00 64 1B 00 00 1E 02 00 00 00 00 00 00 >Y..d...........
Extension .cab, Count 33
C:\Program Files\OpenSSH\tmp\IEC52.tmp\Windows6.1-KB2670838-x86.cab
00000000: 4D 53 43 46 00 00 00 00 C2 19 59 00 00 00 00 00 MSCF......Y.....
00000010: 44 00 00 00 00 00 00 00 03 01 01 00 17 05 04 00 D...............
00000020: 00 00 00 00 14 00 00 00 00 00 10 00 C2 19 59 00 ..............Y.
00000030: 50 3C 00 00 00 00 00 00 00 00 00 00 54 2C 02 00 P<..........T,..
00000040: 8E 01 03 15 20 39 0A 00 00 00 00 00 00 00 3F 42 .... 9........?B
00000050: 16 90 20 00 5F 6D 61 6E 69 66 65 73 74 5F 2E 63 .. ._manifest_.c
00000060: 69 78 2E 78 6D 6C 00 75 18 0B 00 20 39 0A 00 00 ix.xml.u... 9...
00000070: 00 3F 42 17 90 20 00 30 00 9D 12 07 00 95 51 15 .?B.. .0......Q.
Extension .ascx, Count 33
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\navigationBar.ascx
00000000: 3C 25 40 20 43 6F 6E 74 72 6F 6C 20 49 6E 68 65 <%@ Control Inhe
00000010: 72 69 74 73 3D 22 53 79 73 74 65 6D 2E 57 65 62 rits="System.Web
00000020: 2E 41 64 6D 69 6E 69 73 74 72 61 74 69 6F 6E 2E .Administration.
00000030: 4E 61 76 69 67 61 74 69 6F 6E 42 61 72 22 20 25 NavigationBar" %
00000040: 3E 0D 0A 3C 25 40 20 49 6D 70 6F 72 74 20 4E 61 >..<%@ Import Na
00000050: 6D 65 73 70 61 63 65 3D 22 53 79 73 74 65 6D 2E mespace="System.
00000060: 57 65 62 2E 43 6F 6E 66 69 67 75 72 61 74 69 6F Web.Configuratio
00000070: 6E 22 20 25 3E 0D 0A 3C 25 40 20 52 65 67 69 73 n" %>..<%@ Regis
Extension .sdb, Count 34
C:\Windows\AppPatch\drvmain.sdb
00000000: 02 00 00 00 01 00 00 00 73 64 62 66 02 78 3A 12 ........sdbf.x:.
00000010: 00 00 03 78 90 08 00 00 02 38 07 70 03 38 01 60 ...x.....8.p.8.`
00000020: 16 40 01 00 00 00 01 98 7C 08 00 00 2E 54 41 44 .@......|....TAD
00000030: 4D 4D 34 30 84 12 00 00 43 49 51 48 43 52 41 30 MM40....CIQHCRA0
00000040: 00 13 00 00 45 50 41 54 54 4C 44 30 7C 13 00 00 ....EPATTLD0|...
00000050: 49 51 4D 42 41 58 45 30 F8 13 00 00 45 54 59 42 IQMBAXE0....ETYB
00000060: 41 58 45 30 74 14 00 00 49 51 4D 44 4E 41 54 30 AXE0t...IQMDNAT0
00000070: 6C 15 00 00 43 49 51 44 4E 41 54 30 E8 15 00 00 l...CIQDNAT0....
Extension .com, Count 37
C:\Windows\Boot\DVD\PCAT\etfsboot.com
00000000: FA 33 C0 8E D0 BC 00 7C FB 8C C8 8E D8 52 B4 0F .3.....|.....R..
00000010: CD 10 24 7F 3C 03 74 06 B4 00 B0 03 CD 10 E8 00 ..$.<.t.........
00000020: 00 5E 81 EE 21 00 74 16 81 FE 00 7C 0F 85 7D 00 .^..!.t....|..}.
00000030: 8C C8 3D 00 00 0F 85 84 00 EA 45 00 C0 07 8C C8 ..=.......E.....
00000040: 3D C0 07 75 1D 8C C8 8E D8 C6 06 B3 01 34 90 80 =..u.........4..
00000050: FA 80 72 79 C6 06 B3 01 35 90 BB FE 0F 8B 07 3D ..ry....5......=
00000060: 55 AA 75 69 5A 88 16 DA 07 E8 46 04 68 BF 07 6A U.uiZ.....F.h..j
00000070: 0B 68 00 20 E8 12 07 72 0F 60 1E 06 8A 16 DA 07 .h. ...r.`......
Extension .diagpkg, Count 38
C:\Windows\diagnostics\scheduled\Maintenance\DiagPackage.diagpkg
00000000: 3C 64 63 6D 50 53 3A 41 64 76 44 69 61 67 6E 6F <dcmPS:AdvDiagno
00000010: 73 74 69 63 50 61 63 6B 61 67 65 20 53 63 68 65 sticPackage Sche
00000020: 6D 61 56 65 72 73 69 6F 6E 3D 22 31 2E 30 22 20 maVersion="1.0"
00000030: 4C 6F 63 61 6C 69 7A 65 64 3D 22 74 72 75 65 22 Localized="true"
00000040: 20 78 6D 6C 6E 73 3A 64 63 6D 50 53 3D 22 68 74 xmlns:dcmPS="ht
00000050: 74 70 3A 2F 2F 77 77 77 2E 6D 69 63 72 6F 73 6F tp://www.microso
00000060: 66 74 2E 63 6F 6D 2F 73 63 68 65 6D 61 73 2F 64 ft.com/schemas/d
00000070: 63 6D 2F 70 61 63 6B 61 67 65 2F 32 30 30 37 22 cm/package/2007"
Extension .ime, Count 38
C:\Windows\System32\chajei.ime
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 E0 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .targets, Count 39
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
00000000: EF BB BF 3C 50 72 6F 6A 65 63 74 20 78 6D 6C 6E ...<Project xmln
00000010: 73 3D 22 68 74 74 70 3A 2F 2F 73 63 68 65 6D 61 s="http://schema
00000020: 73 2E 6D 69 63 72 6F 73 6F 66 74 2E 63 6F 6D 2F s.microsoft.com/
00000030: 64 65 76 65 6C 6F 70 65 72 2F 6D 73 62 75 69 6C developer/msbuil
00000040: 64 2F 32 30 30 33 22 3E 0D 0A 09 3C 55 73 69 6E d/2003">...<Usin
00000050: 67 54 61 73 6B 20 54 61 73 6B 4E 61 6D 65 3D 22 gTask TaskName="
00000060: 53 79 73 74 65 6D 2E 57 6F 72 6B 66 6C 6F 77 2E System.Workflow.
00000070: 43 6F 6D 70 6F 6E 65 6E 74 4D 6F 64 65 6C 2E 43 ComponentModel.C
Extension .ps1xml, Count 40
C:\Windows\System32\WindowsPowerShell\v1.0\Certificate.format.ps1xml
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D ="1.0" encoding=
00000020: 22 75 74 66 2D 38 22 20 3F 3E 0D 0A 3C 21 2D 2D "utf-8" ?>..<!--
00000030: 20 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ***************
00000040: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000050: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000060: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000070: 2A 2A 2A 2A 0D 0A 54 68 65 73 65 20 73 61 6D 70 ****..These samp
Extension .cmb, Count 40
C:\Windows\System32\DriverStore\FileRepository\prnep00a.inf_x86_neutral_d4494950448771ed\I386\EP0NCAUM.CMB
00000000: 00 06 00 00 28 20 00 00 10 00 00 00 00 00 00 00 ....( ..........
00000010: 00 06 00 00 32 00 00 00 0A 00 1E 00 00 00 00 00 ....2...........
00000020: 04 00 00 00 FF FF 00 00 01 00 00 00 01 00 03 00 ................
00000030: 00 00 04 00 02 00 B4 00 01 00 00 00 00 00 00 00 ................
00000040: 02 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 04 01 00 00 00 00 00 00 10 01 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................
Extension .vdf, Count 42
C:\Windows\System32\DriverStore\FileRepository\prnhp004.inf_x86_neutral_95288ae6f32f1fe7\I386\hpb8500t.vdf
00000000: 53 51 4C 69 74 65 20 66 6F 72 6D 61 74 20 33 00 SQLite format 3.
00000010: 04 00 01 01 00 40 20 20 00 00 08 39 00 00 00 00 .....@ ...9....
00000020: 00 00 00 00 00 00 00 00 00 00 07 F3 00 00 00 04 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 05 00 00 00 0B 03 B9 07 00 00 01 82 ................
00000070: 03 CB 03 DD 03 FA 03 D7 03 F1 03 C5 03 EB 03 E2 ................
Extension .rom, Count 43
C:\Windows\System32\bios1.rom
00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .ico, Count 46
C:\Program Files\Internet Explorer\images\bing.ico
00000000: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 ............ .h.
00000010: 00 00 26 00 00 00 20 20 00 00 01 00 20 00 A8 10 ..&... .... ...
00000020: 00 00 8E 04 00 00 28 00 00 00 10 00 00 00 20 00 ......(....... .
00000030: 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 .... ...........
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 A6 ................
00000050: FF 7F 15 A6 FF FF 15 A6 FF FF 15 A6 FF FF 15 A6 ................
00000060: FF FF 15 A6 FF FF 15 A6 FF FF 15 A6 FF FF 15 A6 ................
00000070: FF FF 15 A6 FF FF 15 A6 FF FF 15 A6 FF FF 15 A6 ................
Extension .css, Count 49
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\handbook\custom_doxygen.css
00000000: 2F 2A 20 54 68 65 20 63 75 73 74 6F 6D 69 7A 65 /* The customize
00000010: 64 20 43 53 53 20 66 6F 72 20 64 6F 78 79 67 65 d CSS for doxyge
00000020: 6E 20 2A 2F 0D 0A 0D 0A 62 6F 64 79 2C 20 74 61 n */....body, ta
00000030: 62 6C 65 2C 20 64 69 76 2C 20 70 2C 20 64 6C 20 ble, div, p, dl
00000040: 7B 0D 0A 09 66 6F 6E 74 2D 66 61 6D 69 6C 79 3A {...font-family:
00000050: 20 4C 75 63 69 64 61 20 47 72 61 6E 64 65 2C 20 Lucida Grande,
00000060: 56 65 72 64 61 6E 61 2C 20 47 65 6E 65 76 61 2C Verdana, Geneva,
00000070: 20 41 72 69 61 6C 2C 20 73 61 6E 73 2D 73 65 72 Arial, sans-ser
Extension .log, Count 57
C:\Program Files\OpenSSH\tmp\MpCmdRun.log
00000000: FF FE 0D 00 0A 00 0D 00 0A 00 2D 00 2D 00 2D 00 ..........-.-.-.
00000010: 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 -.-.-.-.-.-.-.-.
00000020: 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 -.-.-.-.-.-.-.-.
00000030: 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 -.-.-.-.-.-.-.-.
00000040: 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 -.-.-.-.-.-.-.-.
00000050: 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 -.-.-.-.-.-.-.-.
00000060: 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 -.-.-.-.-.-.-.-.
00000070: 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 2D 00 -.-.-.-.-.-.-.-.
Extension .avi, Count 58
C:\Program Files\Common Files\microsoft shared\ink\FlickAnimation.avi
00000000: 52 49 46 46 7C 6B 18 00 41 56 49 20 4C 49 53 54 RIFF|k..AVI LIST
00000010: C0 04 00 00 68 64 72 6C 61 76 69 68 38 00 00 00 ....hdrlavih8...
00000020: 6A 04 01 00 00 40 06 00 00 00 00 00 10 00 00 00 j....@..........
00000030: 3B 00 00 00 00 00 00 00 01 00 00 00 00 80 00 00 ;...............
00000040: 2C 01 00 00 FA 00 00 00 00 00 00 00 00 00 00 00 ,...............
00000050: 00 00 00 00 00 00 00 00 4C 49 53 54 74 04 00 00 ........LISTt...
00000060: 73 74 72 6C 73 74 72 68 38 00 00 00 76 69 64 73 strlstrh8...vids
00000070: 52 4C 45 20 00 00 00 00 00 00 00 00 00 00 00 00 RLE ............
Extension .cfg, Count 60
C:\BGinfo\build.cfg
00000000: FF FE 7B 00 0D 00 0A 00 20 00 20 00 20 00 20 00 ..{..... . . . .
00000010: 22 00 69 00 65 00 22 00 3A 00 20 00 20 00 22 00 ".i.e.".:. . .".
00000020: 49 00 45 00 31 00 31 00 22 00 2C 00 0D 00 0A 00 I.E.1.1.".,.....
00000030: 20 00 20 00 20 00 20 00 22 00 62 00 75 00 69 00 . . . .".b.u.i.
00000040: 6C 00 64 00 22 00 3A 00 20 00 20 00 22 00 32 00 l.d.".:. . .".2.
00000050: 30 00 31 00 38 00 30 00 31 00 30 00 32 00 22 00 0.1.8.0.1.0.2.".
00000060: 2C 00 0D 00 0A 00 20 00 20 00 20 00 20 00 22 00 ,..... . . . .".
00000070: 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 s.o.f.t.w.a.r.e.
Extension .emf, Count 60
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_1787de7505ebcb56\Dotted_Lines.emf
00000000: 01 00 00 00 74 00 00 00 2B 00 00 00 30 FC FF FF ....t...+...0...
00000010: 10 03 00 00 BC FF FF FF 40 05 00 00 DC 88 FF FF ........@.......
00000020: B4 5F 00 00 B3 F7 FF FF 20 45 4D 46 00 00 01 00 ._...... EMF....
00000030: D0 0E 00 00 85 00 00 00 04 00 00 00 0D 00 00 00 ................
00000040: 58 00 00 00 00 00 00 00 00 04 00 00 00 03 00 00 X...............
00000050: 40 01 00 00 F0 00 00 00 41 00 64 00 6F 00 62 00 @.......A.d.o.b.
00000060: 65 00 20 00 53 00 79 00 73 00 74 00 65 00 6D 00 e. .S.y.s.t.e.m.
00000070: 73 00 00 00 11 00 00 00 0C 00 00 00 08 00 00 00 s...............
Extension .drv, Count 61
C:\Windows\system\keyboard.drv
00000000: 4D 5A 7C 00 02 00 00 00 04 00 07 00 FF FF 00 00 MZ|.............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 72 65 71 75 69 is program requi
00000060: 72 65 73 20 4D 69 63 72 6F 73 6F 66 74 20 57 69 res Microsoft Wi
00000070: 6E 64 6F 77 73 2E 0D 0A 24 00 00 00 00 00 00 00 ndows...$.......
Extension .cpl, Count 61
C:\Windows\System32\appwiz.cpl
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 F0 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .js, Count 62
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\handbook\Credits.js
00000000: 76 61 72 20 43 72 65 64 69 74 73 20 3D 0A 5B 0A var Credits =.[.
00000010: 20 20 20 20 5B 20 22 47 4E 55 20 4C 69 62 72 61 [ "GNU Libra
00000020: 72 79 20 47 65 6E 65 72 61 6C 20 50 75 62 6C 69 ry General Publi
00000030: 63 20 4C 69 63 65 6E 73 65 22 2C 20 22 4C 47 50 c License", "LGP
00000040: 4C 5F 32 5F 30 2E 68 74 6D 6C 22 2C 20 6E 75 6C L_2_0.html", nul
00000050: 6C 20 5D 2C 0A 20 20 20 20 5B 20 22 47 4E 55 20 l ],. [ "GNU
00000060: 4C 65 73 73 65 72 20 47 65 6E 65 72 61 6C 20 50 Lesser General P
00000070: 75 62 6C 69 63 20 4C 69 63 65 6E 73 65 22 2C 20 ublic License",
Extension .browser, Count 62
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers\avantgo.browser
00000000: 3C 62 72 6F 77 73 65 72 73 3E 0D 0A 20 20 20 20 <browsers>..
00000010: 3C 21 2D 2D 20 73 61 6D 70 6C 65 20 75 61 20 22 <!-- sample ua "
00000020: 4D 6F 7A 69 6C 6C 61 2F 33 2E 30 20 28 63 6F 6D Mozilla/3.0 (com
00000030: 70 61 74 69 62 6C 65 3B 20 41 76 61 6E 74 47 6F patible; AvantGo
00000040: 20 33 2E 32 29 22 20 2D 2D 3E 0D 0A 20 20 20 20 3.2)" -->..
00000050: 3C 62 72 6F 77 73 65 72 20 69 64 3D 22 41 76 61 <browser id="Ava
00000060: 6E 74 47 6F 22 20 70 61 72 65 6E 74 49 44 3D 22 ntGo" parentID="
00000070: 4D 6F 7A 69 6C 6C 61 22 3E 0D 0A 20 20 20 20 20 Mozilla">..
Extension .bcm, Count 64
C:\Windows\System32\DriverStore\FileRepository\prnbr002.inf_x86_neutral_1d14699bf2d4d936\I386\brio06aa.bcm
00000000: 00 03 BF E8 00 00 00 00 02 00 00 00 00 00 00 00 ................
00000010: 00 00 00 00 00 00 00 00 07 D6 00 03 00 18 00 10 ................
00000020: 00 0E 00 27 00 00 00 00 00 00 00 00 00 00 00 00 ...'............
00000030: 42 52 4F 54 43 49 30 36 00 00 00 00 00 00 00 00 BROTCI06........
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .jtp, Count 66
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.1.7600.16385_none_1787de7505ebcb56\blank.jtp
00000000: 4E 42 2A 00 8C 02 00 00 50 01 00 10 3D 00 00 00 NB*.....P...=...
00000010: 01 00 00 00 6C 00 00 00 01 00 00 00 00 00 00 FF ....l...........
00000020: 00 00 00 FF 00 00 00 FF 02 00 00 00 1C 01 00 00 ................
00000030: 01 00 00 00 FF FF FF FF 00 00 00 00 78 01 75 8F ............x.u.
00000040: CB 0A C2 30 14 44 CF D6 7E 45 E9 07 18 8B DB 18 ...0.D..~E......
00000050: 41 DC B8 71 51 0A 5D 97 FA 40 88 11 EA 83 7E BE A..qQ.]..@....~.
00000060: 13 EB C2 12 24 8B 0B 77 CE 64 E6 5A D6 0C 5C F1 ....$..w.d.Z..\.
00000070: E4 BC 38 D2 73 E7 C2 8D C0 8A 82 92 39 0B 11 05 ..8.s.......9...
Extension .html, Count 71
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\handbook\Boot.html
00000000: 3C 21 2D 2D 20 48 54 4D 4C 20 68 65 61 64 65 72 <!-- HTML header
00000010: 20 66 6F 72 20 64 6F 78 79 67 65 6E 20 31 2E 38 for doxygen 1.8
00000020: 2E 33 2D 2D 3E 0A 3C 21 44 4F 43 54 59 50 45 20 .3-->.<!DOCTYPE
00000030: 68 74 6D 6C 20 50 55 42 4C 49 43 20 22 2D 2F 2F html PUBLIC "-//
00000040: 57 33 43 2F 2F 44 54 44 20 58 48 54 4D 4C 20 31 W3C//DTD XHTML 1
00000050: 2E 30 20 54 72 61 6E 73 69 74 69 6F 6E 61 6C 2F .0 Transitional/
00000060: 2F 45 4E 22 20 22 68 74 74 70 3A 2F 2F 77 77 77 /EN" "http://www
00000070: 2E 77 33 2E 6F 72 67 2F 54 52 2F 78 68 74 6D 6C .w3.org/TR/xhtml
Extension .rs, Count 82
C:\Windows\System32\cero.rs
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .sql, Count 84
C:\Windows\Microsoft.NET\Framework\v2.0.50727\InstallCommon.sql
00000000: 2F 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A /***************
00000010: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000020: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000030: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000040: 2A 2A 2A 2A 2A 2A 2A 2F 0D 0A 2F 2A 20 49 6E 73 *******/../* Ins
00000050: 74 61 6C 6C 43 6F 6D 6D 6F 6E 2E 53 51 4C 20 20 tallCommon.SQL
00000060: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
00000070: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
Extension .evtx, Count 85
C:\Windows\System32\winevt\Logs\Application.evtx
00000000: 45 6C 66 46 69 6C 65 00 00 00 00 00 00 00 00 00 ElfFile.........
00000010: 29 00 00 00 00 00 00 00 02 12 00 00 00 00 00 00 )...............
00000020: 80 00 00 00 01 00 03 00 00 10 2A 00 00 00 00 00 ..........*.....
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 01 00 00 00 D8 FC E6 DA ................
Extension .imd, Count 88
C:\Windows\IME\IMESC5\DICTS\PINTLGAB.IMD
00000000: 58 42 53 4D 00 00 00 60 30 DA 04 00 00 01 00 00 XBSM...`0.......
00000010: 00 01 00 00 00 03 00 00 00 00 00 00 00 00 01 00 ................
00000020: 30 DA 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0...............
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .gdl, Count 89
C:\Windows\System32\DriverStore\FileRepository\ntprint.inf_x86_neutral_88459cb66b0e2d44\I386\PS_SCHM.GDL
00000000: 2A 25 20 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D *% =============
00000010: 3D 3D 3D 3D 3D 0D 0A 2A 25 20 20 3D 3D 3D 20 58 =====..*% === X
00000020: 4D 4C 2F 58 53 44 20 74 79 70 65 73 20 3A 20 20 ML/XSD types :
00000030: 75 73 65 20 70 72 65 66 69 78 20 58 53 44 20 3D use prefix XSD =
00000040: 3D 3D 3D 0D 0A 2A 25 20 3D 3D 3D 3D 3D 3D 3D 3D ===..*% ========
00000050: 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 0D 0A 0D 0A 2A 54 ==========....*T
00000060: 65 6D 70 6C 61 74 65 3A 20 20 58 53 44 5F 53 54 emplate: XSD_ST
00000070: 52 49 4E 47 0D 0A 7B 0D 0A 20 20 20 20 2A 54 79 RING..{.. *Ty
Extension .tbl, Count 90
C:\Windows\System32\lcphrase.tbl
00000000: 2C 82 00 00 F4 76 00 00 9B 4E 00 00 42 66 00 00 ,....v...N..Bf..
00000010: 9A 5B 00 00 08 67 00 00 DE 9E 00 00 00 4E 00 00 .[...g.......N..
00000020: E6 65 00 00 07 52 00 00 23 6A 00 00 8D 51 00 00 .e...R..#j...Q..
00000030: 77 8D 00 00 F4 81 00 00 A6 5E 00 00 EF 8D 00 00 w........^......
00000040: 11 54 00 00 B9 65 62 97 00 00 55 86 00 00 36 5E .T...eb...U...6^
00000050: 00 00 62 97 00 00 75 4F 00 00 4A 58 00 00 8B 5F ..b...uO..JX..._
00000060: 00 00 23 90 32 4E 00 00 8A 90 00 00 09 82 00 00 ..#.2N..........
00000070: 1F 75 00 00 E3 53 23 6C 00 00 73 54 00 00 AB 8C .u...S#l..sT....
Extension .htm, Count 99
C:\Program Files\Common Files\microsoft shared\Stationery\Bears.htm
00000000: 3C 48 54 4D 4C 3E 3C 48 45 41 44 3E 3C 53 54 59 <HTML><HEAD><STY
00000010: 4C 45 3E 42 4F 44 59 20 7B 66 6F 6E 74 2D 66 61 LE>BODY {font-fa
00000020: 6D 69 6C 79 3A 20 54 61 68 6F 6D 61 3B 66 6F 6E mily: Tahoma;fon
00000030: 74 2D 73 69 7A 65 3A 20 31 31 70 74 3B 63 6F 6C t-size: 11pt;col
00000040: 6F 72 3A 20 34 62 33 30 30 38 3B 6D 61 72 67 69 or: 4b3008;margi
00000050: 6E 2D 6C 65 66 74 3A 20 32 35 20 70 78 3B 6D 61 n-left: 25 px;ma
00000060: 72 67 69 6E 2D 74 6F 70 3A 20 37 35 20 70 78 3B rgin-top: 75 px;
00000070: 62 61 63 6B 67 72 6F 75 6E 64 2D 70 6F 73 69 74 background-posit
Extension .aspx, Count 99
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\default.aspx
00000000: 3C 25 40 20 50 61 67 65 20 4D 61 73 74 65 72 50 <%@ Page MasterP
00000010: 61 67 65 46 69 6C 65 3D 22 57 65 62 41 64 6D 69 ageFile="WebAdmi
00000020: 6E 4E 6F 42 75 74 74 6F 6E 52 6F 77 2E 6D 61 73 nNoButtonRow.mas
00000030: 74 65 72 22 20 69 6E 68 65 72 69 74 73 3D 22 53 ter" inherits="S
00000040: 79 73 74 65 6D 2E 57 65 62 2E 41 64 6D 69 6E 69 ystem.Web.Admini
00000050: 73 74 72 61 74 69 6F 6E 2E 57 65 62 41 64 6D 69 stration.WebAdmi
00000060: 6E 50 61 67 65 22 25 3E 0D 0A 3C 25 40 20 4D 61 nPage"%>..<%@ Ma
00000070: 73 74 65 72 54 79 70 65 20 76 69 72 74 75 61 6C sterType virtual
Extension .msc, Count 102
C:\Windows\System32\azman.msc
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 3F 3E 0D 0A 3C 4D 4D 43 5F 43 6F 6E 73 .0"?>..<MMC_Cons
00000020: 6F 6C 65 46 69 6C 65 20 43 6F 6E 73 6F 6C 65 56 oleFile ConsoleV
00000030: 65 72 73 69 6F 6E 3D 22 32 2E 30 22 20 50 72 6F ersion="2.0" Pro
00000040: 67 72 61 6D 4D 6F 64 65 3D 22 55 73 65 72 22 3E gramMode="User">
00000050: 0D 0A 20 20 3C 43 6F 6E 73 6F 6C 65 46 69 6C 65 .. <ConsoleFile
00000060: 49 44 3E 7B 42 42 38 31 39 34 34 39 2D 45 43 45 ID>{BB819449-ECE
00000070: 41 2D 34 43 43 33 2D 38 44 37 33 2D 35 32 44 44 A-4CC3-8D73-52DD
Extension .xsd, Count 109
C:\Windows\L2Schemas\LAN_policy_v1.xsd
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 74 .0" encoding="ut
00000020: 66 2D 38 22 20 3F 3E 0D 0A 3C 78 73 3A 73 63 68 f-8" ?>..<xs:sch
00000030: 65 6D 61 20 74 61 72 67 65 74 4E 61 6D 65 73 70 ema targetNamesp
00000040: 61 63 65 3D 22 68 74 74 70 3A 2F 2F 77 77 77 2E ace="http://www.
00000050: 6D 69 63 72 6F 73 6F 66 74 2E 63 6F 6D 2F 6E 65 microsoft.com/ne
00000060: 74 77 6F 72 6B 69 6E 67 2F 4C 41 4E 2F 70 6F 6C tworking/LAN/pol
00000070: 69 63 79 2F 76 31 22 0D 0A 20 20 20 78 6D 6C 6E icy/v1".. xmln
Extension .bmp, Count 109
C:\Program Files\Common Files\Services\verisign.bmp
00000000: 42 4D 8E 0A 00 00 00 00 00 00 76 00 00 00 28 00 BM........v...(.
00000010: 00 00 86 00 00 00 26 00 00 00 01 00 04 00 00 00 ......&.........
00000020: 00 00 18 0A 00 00 CE 0E 00 00 C4 0E 00 00 00 00 ................
00000030: 00 00 00 00 00 00 FF FF FF 00 00 FF FF 00 FF 00 ................
00000040: FF 00 00 00 FF 00 BF BF BF 00 7F 7F 7F 00 00 7F ................
00000050: 7F 00 7F 00 7F 00 00 00 7F 00 FF FF 00 00 00 FF ................
00000060: 00 00 7F 7F 00 00 00 7F 00 00 FF 00 00 00 7F 00 ................
00000070: 00 00 00 00 00 00 55 55 55 55 55 55 55 55 55 55 ......UUUUUUUUUU
Extension .h, Count 110
C:\Windows\inf.NET CLR Data_DataPerfCounters.h
00000000: 2F 2F 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D //--------------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000050: 0D 0A 2F 2F 20 3C 63 6F 70 79 72 69 67 68 74 20 ..// <copyright
00000060: 66 69 6C 65 3D 22 5F 64 61 74 61 70 65 72 66 63 file="_dataperfc
00000070: 6F 75 6E 74 65 72 73 2E 68 22 20 63 6F 6D 70 61 ounters.h" compa
Extension .icm, Count 110
C:\Windows\System32\DriverStore\FileRepository\brmfcwia.inf_x86_neutral_2d38149df9cd17c4\brmsi01.icm
00000000: 00 03 68 7C 4B 43 4D 53 02 00 00 00 73 63 6E 72 ..h|KCMS....scnr
00000010: 52 47 42 20 4C 61 62 20 07 D0 00 0C 00 1A 00 13 RGB Lab ........
00000020: 00 28 00 07 61 63 73 70 4D 53 46 54 00 02 00 00 .(..acspMSFT....
00000030: 42 52 4F 54 69 30 31 20 00 00 00 00 00 00 00 00 BROTi01 ........
00000040: 00 00 00 00 00 00 F6 D6 00 01 00 00 00 00 D3 2D ...............-
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .psd1, Count 114
C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets\6.1.0.0__31bf3856ad364e35\AppLocker.psd1
00000000: FF FE 40 00 7B 00 0D 00 0A 00 47 00 55 00 49 00 ..@.{.....G.U.I.
00000010: 44 00 3D 00 22 00 7B 00 39 00 44 00 41 00 46 00 D.=.".{.9.D.A.F.
00000020: 44 00 34 00 30 00 39 00 2D 00 36 00 37 00 44 00 D.4.0.9.-.6.7.D.
00000030: 45 00 2D 00 34 00 31 00 30 00 38 00 2D 00 38 00 E.-.4.1.0.8.-.8.
00000040: 45 00 45 00 39 00 2D 00 37 00 33 00 43 00 44 00 E.E.9.-.7.3.C.D.
00000050: 36 00 31 00 46 00 35 00 42 00 37 00 42 00 46 00 6.1.F.5.B.7.B.F.
00000060: 7D 00 22 00 0D 00 0A 00 41 00 75 00 74 00 68 00 }.".....A.u.t.h.
00000070: 6F 00 72 00 3D 00 22 00 4D 00 69 00 63 00 72 00 o.r.=.".M.i.c.r.
Extension .bin, Count 123
C:\Windows\mib.bin
00000000: 64 A8 00 00 01 00 00 00 03 00 00 00 00 00 00 00 d...............
00000010: 01 00 00 00 69 73 6F 4D A8 00 00 01 00 00 00 03 ....isoM........
00000020: 00 00 00 00 00 00 00 03 00 00 00 6F 72 67 36 A8 ...........org6.
00000030: 00 00 01 00 00 00 03 00 00 00 00 00 00 00 06 00 ................
00000040: 00 00 64 6F 64 1A A8 00 00 04 00 00 00 08 00 00 ..dod...........
00000050: 00 00 00 00 00 01 00 00 00 69 6E 74 65 72 6E 65 .........interne
00000060: 74 12 5E 00 00 01 00 00 00 04 00 00 00 00 00 00 t.^.............
00000070: 00 02 00 00 00 6D 67 6D 74 F9 5D 00 00 0D 00 00 .....mgmt.].....
Extension .gif, Count 128
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\handbook\sflogo.gif
00000000: 47 49 46 38 39 61 50 00 0F 00 E6 00 00 00 00 00 GIF89aP.........
00000010: FF FF FF 21 A8 DD 25 AD E2 01 7D AD 04 82 B2 7F ...!..%...}.....
00000020: 7F 7F BF BF BF EF EF EF 3F 3F 3F 08 87 B7 6F 6F ........???...oo
00000030: 6F AF AF AF 0F 0F 0F 2F 2F 2F 4E AF D5 DF DF DF o......///N.....
00000040: 0F 90 C2 0C 8C BD F1 F9 FC 4B AC D1 1E A3 D8 13 .........K......
00000050: 95 C8 8F 8F 8F 4F 4F 4F 48 B4 DF 51 B3 DA 5F 5F .....OOOH..Q..__
00000060: 5F F0 F8 FB CF CF CF 49 A8 CD C2 E3 EF 9F 9F 9F _......I........
00000070: 92 CA DF 46 A5 C9 20 97 C6 17 9A CD 53 B7 DE 33 ...F.. .....S..3
Extension .wmv, Count 129
C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv
00000000: 30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6C 0&.u.f.......b.l
00000010: D0 13 00 00 00 00 00 00 09 00 00 00 01 02 A1 DC ................
00000020: AB 8C 47 A9 CF 11 8E E4 00 C0 0C 20 53 65 68 00 ..G........ Seh.
00000030: 00 00 00 00 00 00 F0 B6 2B 06 E0 8F 4D 43 9B 9C ........+...MC..
00000040: BE 0F 31 69 B4 40 4A 35 05 00 00 00 00 00 70 CE ..1i.@J5......p.
00000050: 0C 39 79 44 C6 01 2A 00 00 00 00 00 00 00 B0 6B .9yD..*........k
00000060: B8 0D 00 00 00 00 60 77 E0 0B 00 00 00 00 B8 0B ......`w........
00000070: 00 00 00 00 00 00 02 00 00 00 40 1F 00 00 40 1F ..........@...@.
Extension .dxt, Count 130
C:\Windows\System32\DriverStore\FileRepository\prnep00b.inf_x86_neutral_d0e9433101a2df79\I386\EP0NOA9A.DXT
00000000: FF FE 5B 00 43 00 6F 00 6D 00 6D 00 6F 00 6E 00 ..[.C.o.m.m.o.n.
00000010: 5D 00 0D 00 0A 00 4D 00 6F 00 64 00 65 00 6C 00 ].....M.o.d.e.l.
00000020: 4E 00 61 00 6D 00 65 00 3D 00 22 00 45 00 70 00 N.a.m.e.=.".E.p.
00000030: 73 00 6F 00 6E 00 20 00 53 00 74 00 79 00 6C 00 s.o.n. .S.t.y.l.
00000040: 75 00 73 00 20 00 43 00 58 00 34 00 36 00 30 00 u.s. .C.X.4.6.0.
00000050: 30 00 20 00 28 00 4D 00 29 00 22 00 0D 00 0A 00 0. .(.M.).".....
00000060: 53 00 45 00 4E 00 44 00 5F 00 54 00 49 00 3D 00 S.E.N.D._.T.I.=.
00000070: 53 00 55 00 50 00 50 00 4F 00 52 00 54 00 0D 00 S.U.P.P.O.R.T...
Extension .resx, Count 135
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppConfigHome.aspx.resx
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 74 .0" encoding="ut
00000020: 66 2D 38 22 3F 3E 0D 0A 3C 72 6F 6F 74 3E 0D 0A f-8"?>..<root>..
00000030: 20 20 20 20 3C 72 65 73 68 65 61 64 65 72 20 6E <resheader n
00000040: 61 6D 65 3D 22 72 65 73 6D 69 6D 65 74 79 70 65 ame="resmimetype
00000050: 22 3E 0D 0A 20 20 20 20 20 20 20 20 3C 76 61 6C ">.. <val
00000060: 75 65 3E 74 65 78 74 2F 6D 69 63 72 6F 73 6F 66 ue>text/microsof
00000070: 74 2D 72 65 73 78 3C 2F 76 61 6C 75 65 3E 0D 0A t-resx</value>..
Extension .tlb, Count 140
C:\Program Files\Common Files\System\ado\msado20.tlb
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .dat, Count 141
C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat
00000000: 48 57 52 53 01 00 00 00 4D 69 63 72 6F 73 6F 66 HWRS....Microsof
00000010: 74 20 43 6F 6D 6D 6F 6E 20 4C 4D 20 52 65 73 6F t Common LM Reso
00000020: 75 72 63 65 20 46 69 6C 65 00 00 00 00 00 00 00 urce File.......
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 01 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .lng, Count 144
C:\Program Files\OpenSSH\tmp\ultradefrag-portable-6.1.0.i386\i18n\Albanian.lng
00000000: EF BB BF 3B 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ...;------------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000050: 2D 2D 0D 0A 3B 20 55 6C 74 72 61 44 65 66 72 61 --..; UltraDefra
00000060: 67 20 47 55 49 20 41 6C 62 61 6E 69 61 6E 20 4C g GUI Albanian L
00000070: 61 6E 67 75 61 67 65 20 50 61 63 6B 2E 0D 0A 3B anguage Pack...;
Extension .ax, Count 145
C:\Program Files\DVD Maker\audiodepthconverter.ax
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 E8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .aux, Count 147
C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\e3c0ae9a32f7a39d7afc41a8aa847174\Accessibility.ni.dll.aux
00000000: 05 00 00 00 24 01 00 00 0B 00 00 00 A8 00 00 00 ....$...........
00000010: 0D 00 00 00 54 00 00 00 41 63 63 65 73 73 69 62 ....T...Accessib
00000020: 69 6C 69 74 79 2C 20 56 65 72 73 69 6F 6E 3D 34 ility, Version=4
00000030: 2E 30 2E 30 2E 30 2C 20 43 75 6C 74 75 72 65 3D .0.0.0, Culture=
00000040: 6E 65 75 74 72 61 6C 2C 20 50 75 62 6C 69 63 4B neutral, PublicK
00000050: 65 79 54 6F 6B 65 6E 3D 62 30 33 66 35 66 37 66 eyToken=b03f5f7f
00000060: 31 31 64 35 30 61 33 61 00 CC CC CC 07 00 00 00 11d50a3a........
00000070: 04 00 00 00 0A 11 00 00 02 00 00 00 08 00 00 00 ................
Extension .chm, Count 151
C:\Windows\Help\mui\0409\aclui.CHM
00000000: 49 54 53 46 03 00 00 00 60 00 00 00 01 00 00 00 ITSF....`.......
00000010: 22 19 CD BE 09 04 00 00 10 FD 01 7C AA 7B D0 11 "..........|.{..
00000020: 9E 0C 00 A0 C9 22 E6 EC 11 FD 01 7C AA 7B D0 11 .....".....|.{..
00000030: 9E 0C 00 A0 C9 22 E6 EC 60 00 00 00 00 00 00 00 ....."..`.......
00000040: 18 00 00 00 00 00 00 00 78 00 00 00 00 00 00 00 ........x.......
00000050: 54 10 00 00 00 00 00 00 CC 10 00 00 00 00 00 00 T...............
00000060: FE 01 00 00 00 00 00 00 68 4C 01 00 00 00 00 00 ........hL......
00000070: 00 00 00 00 00 00 00 00 49 54 53 50 01 00 00 00 ........ITSP....
Extension .icc, Count 154
C:\Windows\System32\DriverStore\FileRepository\prnhp002.inf_x86_neutral_e6daa9c39ac001a3\I386\hpf69000.icc
00000000: 00 01 BA D8 4C 69 6E 6F 02 00 00 00 70 72 74 72 ....Lino....prtr
00000010: 52 47 42 20 4C 61 62 20 07 D4 00 01 00 1B 00 10 RGB Lab ........
00000020: 00 22 00 12 61 63 73 70 4D 53 46 54 00 00 00 00 ."..acspMSFT....
00000030: 48 50 00 00 00 00 19 64 00 00 00 00 00 00 00 00 HP.....d........
00000040: 00 00 00 00 00 00 F6 D6 00 01 00 00 00 00 D3 2D ...............-
00000050: 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 HP ............
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .config, Count 165
C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\msbuild.exe.config
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 20 3D 22 <?xml version ="
00000010: 31 2E 30 22 3F 3E 0D 0A 3C 63 6F 6E 66 69 67 75 1.0"?>..<configu
00000020: 72 61 74 69 6F 6E 3E 0D 0A 20 20 20 20 3C 63 6F ration>.. <co
00000030: 6E 66 69 67 53 65 63 74 69 6F 6E 73 3E 0D 0A 20 nfigSections>..
00000040: 20 20 20 20 20 20 20 3C 73 65 63 74 69 6F 6E 20 <section
00000050: 6E 61 6D 65 3D 22 6D 73 62 75 69 6C 64 54 6F 6F name="msbuildToo
00000060: 6C 73 65 74 73 22 20 74 79 70 65 3D 22 4D 69 63 lsets" type="Mic
00000070: 72 6F 73 6F 66 74 2E 42 75 69 6C 64 2E 42 75 69 rosoft.Build.Bui
Extension .ptxml, Count 168
C:\Windows\System32\wdi\perftrack\AltTab.ptxml
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 27 31 <?xml version='1
00000010: 2E 30 27 20 65 6E 63 6F 64 69 6E 67 3D 27 75 74 .0' encoding='ut
00000020: 66 2D 38 27 20 73 74 61 6E 64 61 6C 6F 6E 65 3D f-8' standalone=
00000030: 27 79 65 73 27 3F 3E 0D 0A 3C 3F 43 6F 70 79 72 'yes'?>..<?Copyr
00000040: 69 67 68 74 20 28 63 29 20 4D 69 63 72 6F 73 6F ight (c) Microso
00000050: 66 74 20 43 6F 72 70 6F 72 61 74 69 6F 6E 2E 20 ft Corporation.
00000060: 41 6C 6C 20 72 69 67 68 74 73 20 72 65 73 65 72 All rights reser
00000070: 76 65 64 2E 3F 3E 0D 0A 3C 69 6E 73 74 72 75 6D ved.?>..<instrum
Extension .exp, Count 172
C:\Windows\System32\DriverStore\FileRepository\prnhp002.inf_x86_neutral_e6daa9c39ac001a3\I386\HPPH1500.EXP
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 3F 3E 0D 0A 3C 21 2D 2D 0D 0A 54 68 69 .0"?>..<!--..Thi
00000020: 73 20 66 69 6C 65 20 63 6F 6E 74 61 69 6E 73 20 s file contains
00000030: 69 6E 66 6F 72 6D 61 74 69 6F 6E 20 72 65 6C 61 information rela
00000040: 74 65 64 20 74 6F 20 70 72 69 6E 74 65 72 20 63 ted to printer c
00000050: 61 70 61 62 69 6C 69 74 69 65 73 20 61 6E 64 20 apabilities and
00000060: 66 65 61 74 75 72 65 73 2E 20 20 49 74 20 69 73 features. It is
00000070: 20 72 65 63 6F 6D 6D 65 6E 64 65 64 0D 0A 74 68 recommended..th
Extension .nlp, Count 181
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\big5.nlp
00000000: 28 41 00 00 02 00 00 00 00 4E 02 80 92 31 03 80 (A.......N...1..
00000010: 80 32 04 80 20 32 05 80 59 4E 06 80 9A 31 07 80 .2.. 2..YN...1..
00000020: 01 4E 08 80 9C 31 09 80 03 4E 0A 80 86 32 0B 80 .N...1...N...2..
00000030: 26 32 0C 80 43 4E 0D 80 5D 4E 0E 80 88 32 0F 80 &2..CN..]N...2..
00000040: 28 32 10 80 86 4E 11 80 BA F9 12 80 8C 4E 13 80 (2...N.......N..
00000050: 93 31 14 80 81 32 15 80 21 32 16 80 BA 4E 17 80 .1...2..!2...N..
00000060: 9F 31 18 80 3F 51 19 80 65 51 1A 80 6B 51 1B 80 .1..?Q..eQ..kQ..
00000070: 87 32 1C 80 27 32 1D 80 E0 51 1E 80 00 52 1F 80 .2..'2...Q...R..
Extension .rtf, Count 194
C:\Program Files\Internet Explorer\en-US\eula.rtf
00000000: 7B 5C 72 74 66 31 5C 61 64 65 66 6C 61 6E 67 31 {\rtf1\adeflang1
00000010: 30 32 35 5C 61 6E 73 69 5C 61 6E 73 69 63 70 67 025\ansi\ansicpg
00000020: 31 32 35 32 5C 75 63 31 5C 61 64 65 66 66 33 38 1252\uc1\adeff38
00000030: 5C 64 65 66 66 30 5C 73 74 73 68 66 64 62 63 68 \deff0\stshfdbch
00000040: 31 31 5C 73 74 73 68 66 6C 6F 63 68 30 5C 73 74 11\stshfloch0\st
00000050: 73 68 66 68 69 63 68 30 5C 73 74 73 68 66 62 69 shfhich0\stshfbi
00000060: 30 5C 64 65 66 6C 61 6E 67 31 30 33 33 5C 64 65 0\deflang1033\de
00000070: 66 6C 61 6E 67 66 65 32 30 35 32 5C 74 68 65 6D flangfe2052\them
Extension .mfl, Count 203
C:\Windows\System32\en-US\RestartManager.mfl
00000000: FF FE 23 00 70 00 72 00 61 00 67 00 6D 00 61 00 ..#.p.r.a.g.m.a.
00000010: 20 00 63 00 6C 00 61 00 73 00 73 00 66 00 6C 00 .c.l.a.s.s.f.l.
00000020: 61 00 67 00 73 00 28 00 36 00 34 00 29 00 0D 00 a.g.s.(.6.4.)...
00000030: 0A 00 23 00 70 00 72 00 61 00 67 00 6D 00 61 00 ..#.p.r.a.g.m.a.
00000040: 20 00 6E 00 61 00 6D 00 65 00 73 00 70 00 61 00 .n.a.m.e.s.p.a.
00000050: 63 00 65 00 28 00 22 00 5C 00 5C 00 5C 00 5C 00 c.e.(.".\.\.\.\.
00000060: 2E 00 5C 00 5C 00 72 00 6F 00 6F 00 74 00 5C 00 ..\.\.r.o.o.t.\.
00000070: 5C 00 57 00 4D 00 49 00 22 00 29 00 0D 00 0A 00 \.W.M.I.".).....
Extension .txt, Count 235
C:\Program Files\OpenSSH\docs\cygwin-GPL.txt
00000000: 09 09 20 20 20 20 47 4E 55 20 47 45 4E 45 52 41 .. GNU GENERA
00000010: 4C 20 50 55 42 4C 49 43 20 4C 49 43 45 4E 53 45 L PUBLIC LICENSE
00000020: 0D 0A 09 09 20 20 20 20 20 20 20 56 65 72 73 69 .... Versi
00000030: 6F 6E 20 32 2C 20 4A 75 6E 65 20 31 39 39 31 0D on 2, June 1991.
00000040: 0A 0D 0A 20 43 6F 70 79 72 69 67 68 74 20 28 43 ... Copyright (C
00000050: 29 20 31 39 38 39 2C 20 31 39 39 31 20 46 72 65 ) 1989, 1991 Fre
00000060: 65 20 53 6F 66 74 77 61 72 65 20 46 6F 75 6E 64 e Software Found
00000070: 61 74 69 6F 6E 2C 20 49 6E 63 2E 0D 0A 20 20 20 ation, Inc...
Extension .h1s, Count 243
C:\Windows\Help\Help\en-US\resources.H1S
00000000: 4D 5A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 MZ..............
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 ............@...
00000040: 50 45 00 00 4C 01 02 00 00 00 00 00 00 00 00 00 PE..L...........
00000050: 00 00 00 00 E0 00 03 21 0B 01 05 05 00 00 00 00 .......!........
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 ......@.........
Extension .jpg, Count 256
C:\BGinfo\background.jpg
00000000: FF D8 FF E0 00 10 4A 46 49 46 00 01 02 01 00 48 ......JFIF.....H
00000010: 00 48 00 00 FF ED 00 2C 50 68 6F 74 6F 73 68 6F .H.....,Photosho
00000020: 70 20 33 2E 30 00 38 42 49 4D 03 ED 00 00 00 00 p 3.0.8BIM......
00000030: 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 ...H.......H....
00000040: 00 01 FF E1 43 5D 68 74 74 70 3A 2F 2F 6E 73 2E ....C]http://ns.
00000050: 61 64 6F 62 65 2E 63 6F 6D 2F 78 61 70 2F 31 2E adobe.com/xap/1.
00000060: 30 2F 00 3C 3F 78 70 61 63 6B 65 74 20 62 65 67 0/.<?xpacket beg
00000070: 69 6E 3D 22 EF BB BF 22 20 69 64 3D 22 57 35 4D in="..." id="W5M
Extension .nls, Count 262
C:\Windows\Globalization\Sorting\SortDefault.nls
00000000: 10 00 00 00 10 BC 14 00 78 58 15 00 08 82 15 00 ........xX......
00000010: 00 00 00 00 03 06 02 02 04 06 02 02 05 06 02 02 ................
00000020: 06 06 02 02 07 06 02 02 08 06 02 02 09 06 02 02 ................
00000030: 0A 06 02 02 05 07 02 02 06 07 02 02 07 07 02 02 ................
00000040: 08 07 02 02 09 07 02 02 0B 06 02 02 0C 06 02 02 ................
00000050: 0D 06 02 02 0E 06 02 02 0F 06 02 02 10 06 02 02 ................
00000060: 11 06 02 02 12 06 02 02 13 06 02 02 14 06 02 02 ................
00000070: 15 06 02 02 16 06 02 02 17 06 02 02 18 06 02 02 ................
Extension .cur, Count 312
C:\Windows\Cursors\aero_arrow.cur
00000000: 00 00 02 00 02 00 30 30 00 00 01 00 00 00 A8 25 ......00.......%
00000010: 00 00 26 00 00 00 20 20 00 00 00 00 00 00 A8 10 ..&... ........
00000020: 00 00 CE 25 00 00 28 00 00 00 30 00 00 00 60 00 ...%..(...0...`.
00000030: 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 .... ...........
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Extension .adml, Count 320
C:\Windows\PolicyDefinitions\en-US\ActiveXInstallService.adml
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 <?xml version="1
00000010: 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D 22 75 74 .0" encoding="ut
00000020: 66 2D 38 22 3F 3E 0D 0A 3C 21 2D 2D 20 20 28 63 f-8"?>..<!-- (c
00000030: 29 20 32 30 30 36 20 4D 69 63 72 6F 73 6F 66 74 ) 2006 Microsoft
00000040: 20 43 6F 72 70 6F 72 61 74 69 6F 6E 20 20 2D 2D Corporation --
00000050: 3E 0D 0A 3C 70 6F 6C 69 63 79 44 65 66 69 6E 69 >..<policyDefini
00000060: 74 69 6F 6E 52 65 73 6F 75 72 63 65 73 20 78 6D tionResources xm
00000070: 6C 6E 73 3A 78 73 64 3D 22 68 74 74 70 3A 2F 2F lns:xsd="http://
Extension .admx, Count 322
C:\Windows\PolicyDefinitions\ActiveXInstallService.admx
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D ="1.0" encoding=
00000020: 22 75 74 66 2D 38 22 3F 3E 0D 0A 3C 21 2D 2D 20 "utf-8"?>..<!--
00000030: 20 28 63 29 20 32 30 30 36 20 4D 69 63 72 6F 73 (c) 2006 Micros
00000040: 6F 66 74 20 43 6F 72 70 6F 72 61 74 69 6F 6E 20 oft Corporation
00000050: 20 2D 2D 3E 0D 0A 3C 70 6F 6C 69 63 79 44 65 66 -->..<policyDef
00000060: 69 6E 69 74 69 6F 6E 73 20 78 6D 6C 6E 73 3A 78 initions xmlns:x
00000070: 73 64 3D 22 68 74 74 70 3A 2F 2F 77 77 77 2E 77 sd="http://www.w
Extension ``, Count 346
C:\Program Files\OpenSSH\bin\ssh-host-config
00000000: 23 21 2F 62 69 6E 2F 62 61 73 68 0A 23 0A 23 20 #!/bin/bash.#.#
00000010: 73 73 68 2D 68 6F 73 74 2D 63 6F 6E 66 69 67 2C ssh-host-config,
00000020: 20 43 6F 70 79 72 69 67 68 74 20 32 30 30 30 2D Copyright 2000-
00000030: 32 30 31 34 20 52 65 64 20 48 61 74 20 49 6E 63 2014 Red Hat Inc
00000040: 2E 0A 23 0A 23 20 54 68 69 73 20 66 69 6C 65 20 ..#.# This file
00000050: 69 73 20 70 61 72 74 20 6F 66 20 74 68 65 20 43 is part of the C
00000060: 79 67 77 69 6E 20 70 6F 72 74 20 6F 66 20 4F 70 ygwin port of Op
00000070: 65 6E 53 53 48 2E 0A 23 0A 23 20 50 65 72 6D 69 enSSH..#.# Permi
Extension .xrm-ms, Count 370
C:\Windows\System32\spp\plugin-manifests-signed\sppobjs-spp-plugin-manifest-signed.xrm-ms
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D ="1.0" encoding=
00000020: 22 75 74 66 2D 38 22 3F 3E 3C 72 67 3A 6C 69 63 "utf-8"?><rg:lic
00000030: 65 6E 73 65 47 72 6F 75 70 20 78 6D 6C 6E 73 3A enseGroup xmlns:
00000040: 72 67 3D 22 75 72 6E 3A 6D 70 65 67 3A 6D 70 65 rg="urn:mpeg:mpe
00000050: 67 32 31 3A 32 30 30 33 3A 30 31 2D 52 45 4C 2D g21:2003:01-REL-
00000060: 52 2D 4E 53 22 3E 3C 72 3A 6C 69 63 65 6E 73 65 R-NS"><r:license
00000070: 20 78 6D 6C 6E 73 3A 72 3D 22 75 72 6E 3A 6D 70 xmlns:r="urn:mp
Extension .fon, Count 384
C:\Windows\Fonts\8514fix.fon
00000000: 4D 5A FF 00 01 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0A 24 00 00 00 00 00 00 00 00 mode...$........
Extension .ps1, Count 442
C:\BGinfo\openssh.ps1
00000000: 23 20 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D # --------------
00000010: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000020: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000030: 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D ----------------
00000040: 0D 0A 23 0D 0A 23 20 20 64 65 76 2E 6D 69 63 72 ..#..# dev.micr
00000050: 6F 73 6F 66 74 65 64 67 65 2E 63 6F 6D 20 2D 56 osoftedge.com -V
00000060: 4D 73 0D 0A 23 20 20 43 6F 70 79 72 69 67 68 74 Ms..# Copyright
00000070: 28 63 29 20 4D 69 63 72 6F 73 6F 66 74 20 43 6F (c) Microsoft Co
Extension .wav, Count 631
C:\Windows\Media\chimes.wav
00000000: 52 49 46 46 24 4D 03 00 57 41 56 45 66 6D 74 20 RIFF$M..WAVEfmt
00000010: 10 00 00 00 01 00 02 00 44 AC 00 00 10 B1 02 00 ........D.......
00000020: 04 00 10 00 64 61 74 61 00 4D 03 00 00 00 FF FF ....data.M......
00000030: FF FF 00 00 00 00 FF FF 00 00 00 00 00 00 00 00 ................
00000040: FF FF 00 00 00 00 00 00 FF FF 00 00 00 00 00 00 ................
00000050: 00 00 FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060: 00 00 FF FF 00 00 FF FF FF FF FF FF FF FF FF FF ................
00000070: 00 00 00 00 FF FF 00 00 00 00 00 00 FF FF 00 00 ................
Extension .ini, Count 669
C:\Program Files\Windows Sidebar\settings.ini
00000000: FF FE 5B 00 52 00 6F 00 6F 00 74 00 5D 00 0D 00 ..[.R.o.o.t.]...
00000010: 0A 00 53 00 65 00 74 00 74 00 69 00 6E 00 67 00 ..S.e.t.t.i.n.g.
00000020: 73 00 56 00 65 00 72 00 73 00 69 00 6F 00 6E 00 s.V.e.r.s.i.o.n.
00000030: 3D 00 30 00 30 00 2E 00 30 00 30 00 2E 00 30 00 =.0.0...0.0...0.
00000040: 30 00 2E 00 30 00 32 00 0D 00 0A 00 0D 00 0A 00 0...0.2.........
Extension .ttf, Count 740
C:\Program Files\DVD Maker\bod_r.TTF
00000000: 00 01 00 00 00 13 01 00 00 04 00 30 44 53 49 47 ...........0DSIG
00000010: 09 27 FC 69 00 01 15 B8 00 00 1A 84 4C 54 53 48 .'.i........LTSH
00000020: 68 D2 92 87 00 00 05 FC 00 00 00 FF 4F 53 2F 32 h...........OS/2
00000030: 73 C7 8B D2 00 00 01 B8 00 00 00 56 56 44 4D 58 s..........VVDMX
00000040: 6B 21 72 A1 00 00 06 FC 00 00 05 E0 63 6D 61 70 k!r.........cmap
00000050: 38 C0 F5 AF 00 00 27 E4 00 00 03 44 63 76 74 20 8.....'....Dcvt
00000060: 2A 73 32 1F 00 00 36 8C 00 00 01 CC 66 70 67 6D *s2...6.....fpgm
00000070: 07 DB 31 8A 00 00 2B 28 00 00 07 BA 67 61 73 70 ..1...+(....gasp
Extension .cdf-ms, Count 746
C:\Windows\winsxs\FileMaps$$.cdf-ms
00000000: 50 63 6D 48 01 00 00 00 00 00 00 00 27 ED DC EA PcmH........'...
00000010: 87 6C C2 94 52 00 00 00 48 01 00 00 2E 00 00 00 .l..R...H.......
00000020: 54 00 00 00 00 00 00 00 00 00 00 00 0F 00 00 00 T...............
00000030: 0C 01 00 00 00 00 00 00 00 00 00 00 14 00 00 00 ................
00000040: FF FF FF FF FF 1B 35 28 25 D5 55 41 AC B0 6E 7C ......5(%.UA..n|
00000050: 64 C7 25 D8 2F 00 00 00 46 00 00 00 35 00 00 00 d.%./...F...5...
00000060: 2A 00 00 00 38 00 00 00 26 00 00 00 4E 00 00 00 *...8...&...N...
00000070: 40 00 00 00 3E 00 00 00 4C 00 00 00 27 00 00 00 @...>...L...'...
Extension .mof, Count 776
C:\Windows\Microsoft.NET\Framework\v2.0.50727\adonetdiag.mof
00000000: 23 70 72 61 67 6D 61 20 63 6C 61 73 73 66 6C 61 #pragma classfla
00000010: 67 73 28 22 66 6F 72 63 65 75 70 64 61 74 65 22 gs("forceupdate"
00000020: 29 0D 0A 23 70 72 61 67 6D 61 20 6E 61 6D 65 73 )..#pragma names
00000030: 70 61 63 65 20 28 22 5C 5C 5C 5C 2E 5C 5C 52 6F pace ("\\\\.\\Ro
00000040: 6F 74 5C 5C 57 4D 49 22 29 0D 0A 0D 0A 2F 2F 2F ot\\WMI")....///
00000050: 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F ////////////////
00000060: 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F ////////////////
00000070: 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F 2F ////////////////
Extension .ppd, Count 811
C:\Windows\System32\DriverStore\FileRepository\ntprint.inf_x86_neutral_88459cb66b0e2d44\I386\MSXPSINC.PPD
00000000: 2A 25 20 43 6F 70 79 72 69 67 68 74 20 28 63 29 *% Copyright (c)
00000010: 20 32 30 30 35 20 20 4D 69 63 72 6F 73 6F 66 74 2005 Microsoft
00000020: 20 43 6F 72 70 6F 72 61 74 69 6F 6E 0D 0A 0D 0A Corporation....
00000030: 2A 4D 53 49 73 58 50 53 44 72 69 76 65 72 3A 20 *MSIsXPSDriver:
00000040: 54 72 75 65 0D 0A 0D 0A True....
Extension .man, Count 935
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CLR-ETW.man
00000000: 3C 69 6E 73 74 72 75 6D 65 6E 74 61 74 69 6F 6E <instrumentation
00000010: 4D 61 6E 69 66 65 73 74 20 78 6D 6C 6E 73 3D 22 Manifest xmlns="
00000020: 68 74 74 70 3A 2F 2F 73 63 68 65 6D 61 73 2E 6D http://schemas.m
00000030: 69 63 72 6F 73 6F 66 74 2E 63 6F 6D 2F 77 69 6E icrosoft.com/win
00000040: 2F 32 30 30 34 2F 30 38 2F 65 76 65 6E 74 73 22 /2004/08/events"
00000050: 3E 0D 0A 20 20 20 20 3C 69 6E 73 74 72 75 6D 65 >.. <instrume
00000060: 6E 74 61 74 69 6F 6E 20 78 6D 6C 6E 73 3A 78 73 ntation xmlns:xs
00000070: 3D 22 68 74 74 70 3A 2F 2F 77 77 77 2E 77 33 2E ="http://www.w3.
Extension .pnf, Count 1139
C:\Windows\inf\1394.PNF
00000000: 01 03 02 00 83 00 00 03 00 00 00 00 00 00 05 00 ................
00000010: F0 00 00 00 D8 3B 00 00 77 0F DA C0 3E 04 CA 01 .....;..w...>...
00000020: 00 CF 19 84 27 04 CA 01 88 00 00 00 50 3B 00 00 ....'.......P;..
00000030: 1E 00 00 00 C8 3C 00 00 E0 01 00 00 A8 3E 00 00 .....<.......>..
00000040: 94 05 00 00 40 44 00 00 28 06 00 00 68 4A 00 00 ....@D..(...hJ..
00000050: 60 00 00 00 00 00 00 00 00 00 09 04 78 00 00 00 `...........x...
00000060: 44 00 3A 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 D.:.\.W.i.n.d.o.
00000070: 77 00 73 00 00 00 00 00 65 00 6E 00 2D 00 55 00 w.s.....e.n.-.U.
Extension .png, Count 1511
C:\Program Files\DVD Maker\Shared\DissolveAnother.png
00000000: 89 50 4E 47 0D 0A 1A 0A 00 00 00 0D 49 48 44 52 .PNG........IHDR
00000010: 00 00 00 AC 00 00 00 AC 08 02 00 00 00 69 53 D0 .............iS.
00000020: 8F 00 00 00 01 73 52 47 42 00 AE CE 1C E9 00 00 .....sRGB.......
00000030: 00 04 67 41 4D 41 00 00 B1 8F 0B FC 61 05 00 00 ..gAMA......a...
00000040: 00 20 63 48 52 4D 00 00 7A 26 00 00 80 84 00 00 . cHRM..z&......
00000050: FA 00 00 00 80 E8 00 00 75 30 00 00 EA 60 00 00 ........u0...`..
00000060: 3A 98 00 00 17 70 9C BA 51 3C 00 00 00 09 70 48 :....p..Q<....pH
00000070: 59 73 00 00 14 9B 00 00 14 9B 01 87 CF 10 84 00 Ys..............
Extension .inf, Count 1965
C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxGuest.inf
00000000: 3B 20 24 49 64 3A 20 56 42 6F 78 47 75 65 73 74 ; $Id: VBoxGuest
00000010: 2E 69 6E 66 20 31 33 35 39 37 36 20 32 30 32 30 .inf 135976 2020
00000020: 2D 30 32 2D 30 34 20 31 30 3A 33 35 3A 31 37 5A -02-04 10:35:17Z
00000030: 20 62 69 72 64 20 24 0D 0A 3B 3B 20 40 66 69 6C bird $..;; @fil
00000040: 65 0D 0A 3B 20 49 4E 46 20 66 69 6C 65 20 66 6F e..; INF file fo
00000050: 72 20 69 6E 73 74 61 6C 6C 69 6E 67 20 74 68 65 r installing the
00000060: 20 56 69 72 74 75 61 6C 42 6F 78 20 57 69 6E 64 VirtualBox Wind
00000070: 6F 77 73 20 67 75 65 73 74 20 64 72 69 76 65 72 ows guest driver
Extension .sys, Count 1981
C:\config.sys
00000000: 46 49 4C 45 53 3D 34 30 0D 0A FILES=40..
Extension .xml, Count 2361
C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D ="1.0" encoding=
00000020: 22 75 74 66 2D 38 22 3F 3E 0D 0A 3C 61 6C 70 68 "utf-8"?>..<alph
00000030: 61 62 65 74 46 69 6C 65 20 78 6D 6C 6E 73 3D 22 abetFile xmlns="
00000040: 75 72 6E 3A 73 63 68 65 6D 61 73 2D 6D 69 63 72 urn:schemas-micr
00000050: 6F 73 6F 66 74 2D 63 6F 6D 3A 74 61 62 6C 65 74 osoft-com:tablet
00000060: 70 63 3A 61 6C 70 68 61 62 65 74 2E 76 31 22 20 pc:alphabet.v1"
00000070: 78 6D 6C 6E 73 3A 78 73 69 3D 22 68 74 74 70 3A xmlns:xsi="http:
Extension .exe, Count 2381
C:\BGinfo\BGINFO.EXE
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 F0 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .mum, Count 2407
C:\Windows\servicing\Packages\Microsoft-Hyper-V-Common-Drivers-Package
31bf3856ad364e35x86~~6.1.7600.16385.mum
00000000: 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 27 31 <?xml version='1
00000010: 2E 30 27 20 65 6E 63 6F 64 69 6E 67 3D 27 75 74 .0' encoding='ut
00000020: 66 2D 38 27 20 73 74 61 6E 64 61 6C 6F 6E 65 3D f-8' standalone=
00000030: 27 79 65 73 27 3F 3E 0D 0A 3C 3F 43 6F 70 79 72 'yes'?>..<?Copyr
00000040: 69 67 68 74 20 28 63 29 20 4D 69 63 72 6F 73 6F ight (c) Microso
00000050: 66 74 20 43 6F 72 70 6F 72 61 74 69 6F 6E 2E 20 ft Corporation.
00000060: 41 6C 6C 20 72 69 67 68 74 73 20 72 65 73 65 72 All rights reser
00000070: 76 65 64 2E 3F 3E 0D 0A 3C 61 73 73 65 6D 62 6C ved.?>..<assembl
Extension .gpd, Count 2749
C:\Windows\System32\DriverStore\FileRepository\faxca003.inf_x86_neutral_fd10e857c1342eac\CNHF1CMN.GPD
00000000: 2A 25 20 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A *% *************
00000010: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000020: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A ****************
00000030: 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 2A 0D 0A **************..
00000040: 2A 25 20 20 20 43 61 6E 6F 6E 20 49 6E 6B 6A 65 *% Canon Inkje
00000050: 74 20 46 61 78 20 44 72 69 76 65 72 20 66 6F 72 t Fax Driver for
00000060: 20 4D 69 63 72 6F 73 6F 66 74 20 57 69 6E 64 6F Microsoft Windo
00000070: 77 73 0D 0A 2A 25 20 20 20 56 65 72 73 69 6F 6E ws..*% Version
Extension .mui, Count 5551
C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 B8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .cat, Count 6110
C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxGuest.cat
00000000: 30 82 4E 67 06 09 2A 86 48 86 F7 0D 01 07 02 A0 0.Ng..*.H.......
00000010: 82 4E 58 30 82 4E 54 02 01 01 31 0B 30 09 06 05 .NX0.NT...1.0...
00000020: 2B 0E 03 02 1A 05 00 30 82 07 4A 06 09 2B 06 01 +......0..J..+..
00000030: 04 01 82 37 0A 01 A0 82 07 3B 30 82 07 37 30 0C ...7.....;0..70.
00000040: 06 0A 2B 06 01 04 01 82 37 0C 01 01 04 10 9A 8F ..+.....7.......
00000050: 67 77 7B 65 D0 40 96 2B 6B B0 49 64 0B EF 17 0D gw{e.@.+k.Id....
00000060: 32 32 30 37 31 39 32 31 31 33 34 31 5A 30 0E 06 220719211341Z0..
00000070: 0A 2B 06 01 04 01 82 37 0C 01 02 05 00 30 82 06 .+.....7.....0..
Extension .dll, Count 13585
C:\Program Files\Common Files\microsoft shared\DAO\dao360.dll
00000000: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 MZ..............
00000010: B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030: 00 00 00 00 00 00 00 00 00 00 00 00 E8 00 00 00 ................
00000040: 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 ........!..L.!Th
00000050: 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F is program canno
00000060: 74 20 62 65 20 72 75 6E 20 69 6E 20 44 4F 53 20 t be run in DOS
00000070: 6D 6F 64 65 2E 0D 0D 0A 24 00 00 00 00 00 00 00 mode....$.......
Extension .manifest, Count 17504
C:\Windows\ehome\MediaCenterWebLauncher.exe.manifest
00000000: EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ...<?xml version
00000010: 3D 22 31 2E 30 22 20 65 6E 63 6F 64 69 6E 67 3D ="1.0" encoding=
00000020: 22 75 74 66 2D 38 22 3F 3E 0D 0A 3C 61 73 6D 76 "utf-8"?>..<asmv
00000030: 31 3A 61 73 73 65 6D 62 6C 79 20 6D 61 6E 69 66 1:assembly manif
00000040: 65 73 74 56 65 72 73 69 6F 6E 3D 22 31 2E 30 22 estVersion="1.0"
00000050: 20 78 6D 6C 6E 73 3D 22 75 72 6E 3A 73 63 68 65 xmlns="urn:sche
00000060: 6D 61 73 2D 6D 69 63 72 6F 73 6F 66 74 2D 63 6F mas-microsoft-co
00000070: 6D 3A 61 73 6D 2E 76 31 22 20 78 6D 6C 6E 73 3A m:asm.v1" xmlns: