HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

2024-01-02: Site is back on track, self-hosted on a rpi because you get the Internet you fund. 2025-02-06: Oh well, some power grid issues caused the rpi to reboot, I really should configure uwsgi to restart automatically --'

88c6c381-2e85-11d0-94de-444553540000
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

88c6c381-2e85-11d0-94de-444553540000 1996-10-25 16:33:45⋮ 1· 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

CLSID

Version	1
Variant	specified in RFC 4122
urn	urn:uuid:88c6c381-2e85-11d0-94de-444553540000
Hexdump	88c6c3812e8511d094de444553540000
Bytes	ê╞├ü.à␑╨ö▐DEST␀␀
Clock ID	5342
Clock ID (hex)	0x14de
Timestamp, RFC	1996-10-25 16:33:45
Timestamp, MS	2015-01-12 16:33:45
Timestamp, UNIX	2384-01-12 16:33:45
Raw hex timestamp	0x1d02e8588c6c381
Raw timestamp	130655540254000001
Sub-millisecond timestamp	1
MAC Address	444553540000
is_local bit	False
is_multicast bit	False
MAC Manufacturer	Microsoft
UUIDv1	timestamp + clock_id + version (1) + node ID (MAC)
MAC Date	1998-09-25, wireshark.org, 444553/24

UUID registration form :

shell::ActiveX Cache Folder

shell:::{88C6C381-2E85-11D0-94DE-444553540000} from https://winaero.com/blog/clsid-guid-shell-list-windows-10/

0 automated push

ActiveX Cache Folder

w10.clsid

0 w10 clsid push

ActiveX Cache Folder

w71ux64o2010 vault7wiki InProcServer32:C:\Windows\System32\occache.dll

0 w10 clsid push

ActiveX Cache Folder

w81x64o2013 vault7wiki InProcServer32:C:\Windows\System32\occache.dll

0 cia vault7 pushes

ActiveX Cache Folder

w8ex86o2013 vault7wiki InProcServer32:C:\Windows\System32\occache.dll

0 cia vault7 pushes

ActiveX Cache Folder

w7px86o2010 vault7wiki InProcServer32:C:\Windows\System32\occache.dll

0 cia vault7 pushes

ActiveX Cache Folder_occache.dll

CLSID,
DefaultIcon.: C:\Windows\System32\occache.dll
InProcServer32.: C:\Windows\System32\occache.dll
InProcServer32.ThreadingModel: Apartment
ShellFolder.Attributes: System.Byte[]

0 c.ps1v001 Microsoft Windows 7 Ultimate N v6.1.7601.65536 2018-01-27

CLSID ActiveX Cache Folder

from https://montcs.bloomu.edu/~bobmon/DigFor/2012.HTCIA-conference/HTCIA-HBGary/HTCIA/Responder/Responder%202/Program%20Files/COMdata.txt

0 website author

ActiveX Cache Folder

RFCTIM
from https://misc.daniel-marschall.de/projects/guid_analysis/guid.txt

0 autopush - dmde

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

Windows 98 Registry
object: reg-value
name: None
key: HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml

0 autopush - reg-win98

Folder pamięci podręcznej ActiveX

Windows 98 Registry
object: reg-clsid
name: Folder pamięci podręcznej ActiveX
key: None
inproc-server : {
  "file": "C:\\WINDOWS\\SYSTEM\\OCCACHE.DLL"
}

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml

0 autopush - reg-win98

ActiveX Cache Folder

Windows Vista Registry
object: reg-clsid
name: ActiveX Cache Folder
key: None
inproc-server : {
  "file": "C:\\Windows\\system32\\occache.dll",
  "product-version": "7.00.6000.16386",
  "product": "Windows\u00ae Internet Explorer"
}

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml

0 autopush - reg-vista

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

Windows Vista Registry
object: reg-value
name: None
key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml

0 autopush - reg-vista

88c6c381-2e85-11d0-94de-444553540000HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

88c6c381-2e85-11d0-94de-444553540000
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved