HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

2024-01-02: Site is back on track, self-hosted on a rpi because you get the Internet you fund. 2025-02-06: Oh well, some power grid issues caused the rpi to reboot, I really should configure uwsgi to restart automatically --'

e7e4bc40-e76a-11ce-a9bb-00aa004ae837
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

e7e4bc40-e76a-11ce-a9bb-00aa004ae837 1995-09-05 10:09:18⋮ 0· 0 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

CLSID

Version	1
Variant	specified in RFC 4122
urn	urn:uuid:e7e4bc40-e76a-11ce-a9bb-00aa004ae837
Hexdump	e7e4bc40e76a11cea9bb00aa004ae837
Bytes	τΣ╝@τj␑╬⌐╗␀¬␀JΦ7
Clock ID	10683
Clock ID (hex)	0x29bb
Timestamp, RFC	1995-09-05 10:09:18
Timestamp, MS	2013-11-22 10:09:18
Timestamp, UNIX	2382-11-22 10:09:18
Raw hex timestamp	0x1cee76ae7e4bc40
Raw timestamp	130295885583400000
Sub-millisecond timestamp	0
MAC Address	00aa004ae837
is_local bit	False
is_multicast bit	False
MAC Manufacturer	Intel
UUIDv1	timestamp + clock_id + version (1) + node ID (MAC)
MAC Date	1998-09-25, wireshark.org, 00aa00/24

UUID registration form :

shell::Shell DocObject Viewer

shell:::{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} from https://winaero.com/blog/clsid-guid-shell-list-windows-10/

0 automated push

Shell DocObject Viewer

w71ux64o2010 vault7wiki InProcServer32:C:\Windows\System32\ieframe.dll

0 w10 clsid push

Shell DocObject Viewer

w10.clsid

0 w10 clsid push

Shell DocObject Viewer

w81x64o2013 vault7wiki InProcServer32:C:\Windows\System32\ieframe.dll

0 cia vault7 pushes

Shell DocObject Viewer

w8ex86o2013 vault7wiki InProcServer32:C:\Windows\System32\ieframe.dll

0 cia vault7 pushes

Shell DocObject Viewer

w7px86o2010 vault7wiki InProcServer32:C:\Windows\System32\ieframe.dll

0 cia vault7 pushes

Shell DocObject Viewer_windows.storage.dll

CLSID,
InProcServer32.: C:\WINDOWS\system32\windows.storage.dll
InProcServer32.ThreadingModel: Apartment
ShellFolder.Attributes: -1610612656

0 c.ps1v001 Microsoft Windows 10 Pro v10.0.16299.0 2018-01-27

Shell DocObject Viewer_ieframe.dll

CLSID,
InProcServer32.: C:\Windows\System32\ieframe.dll
InProcServer32.ThreadingModel: Apartment
ShellFolder.Attributes: -1610612656

0 c.ps1v001 Microsoft Windows 7 Ultimate N v6.1.7601.65536 2018-01-27

Shell DocObject Viewer_windows.storage.dll

CLSID,
InProcServer32.: C:\Windows\system32\windows.storage.dll
InProcServer32.ThreadingModel: Apartment
ShellFolder.Attributes: -1610612656

0 c.ps1v001 Microsoft Windows 10 Enterprise Evaluation v10.0.16299.0 2018-01-31

CLSID Shell DocObject Viewer

from https://montcs.bloomu.edu/~bobmon/DigFor/2012.HTCIA-conference/HTCIA-HBGary/HTCIA/Responder/Responder%202/Program%20Files/COMdata.txt

0 website author

CLSID_CDocObjectFolder

from https://github.com/libyal/libfwsi/blob/master/documentation/Windows%20Shell%20Item%20format.asciidoc#8-notes

0 schema_nt4.txt microsoft search schema catalog config

Shell DocObject Viewer

RFCTIM
from https://misc.daniel-marschall.de/projects/guid_analysis/guid.txt

0 autopush - dmde

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

Windows 98 Registry
object: reg-value
name: None
key: HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml

0 autopush - reg-win98

Shell DocObject Viewer

Windows 98 Registry
object: reg-clsid
name: Shell DocObject Viewer
key: None
inproc-server : {
  "file": "C:\\WINDOWS\\SYSTEM\\SHDOCVW.DLL"
}

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml

0 autopush - reg-win98

Shell DocObject Viewer

Windows Vista Registry
object: reg-clsid
name: Shell DocObject Viewer
key: None
inproc-server : {
  "file": "C:\\Windows\\system32\\ieframe.dll",
  "product-version": "7.00.6000.16386",
  "product": "Windows\u00ae Internet Explorer"
}

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml

0 autopush - reg-vista

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

Windows Vista Registry
object: reg-value
name: None
key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml

0 autopush - reg-vista

CLSID_ShellDocObjView

DEFINE_GUID in wine/dlls/shell32/tests/shlfolder.c

-1 wine

CLSID_ShellDocObjView

DEFINE_GUID in reactos/modules/rostests/winetests/shell32/shlfolder.c

-1 reactos

WINDOWS/Reg Restore Log.txt:3576

ValueName = HKCR,CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837},
in ./WINDOWS/Reg Restore Log.txt:3576

-2

WINDOWS/Reg Restore Log.txt:3578

BckupSubKey = CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}, BckupValueName =
in ./WINDOWS/Reg Restore Log.txt:3578

-2

WINDOWS/Reg Restore Log.txt:3581

ValueName = HKCR,CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32,
in ./WINDOWS/Reg Restore Log.txt:3581

-2

WINDOWS/Reg Restore Log.txt:3583

BckupSubKey = CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32, BckupValueName =
in ./WINDOWS/Reg Restore Log.txt:3583

-2

WINDOWS/Reg Restore Log.txt:3586

ValueName = HKCR,CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32,ThreadingModel
in ./WINDOWS/Reg Restore Log.txt:3586

-2

WINDOWS/Reg Restore Log.txt:3588

BckupSubKey = CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32, BckupValueName = ThreadingModel
in ./WINDOWS/Reg Restore Log.txt:3588

-2

WINDOWS/Reg Restore Log.txt:3591

ValueName = HKCR,CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\ShellFolder,Attributes
in ./WINDOWS/Reg Restore Log.txt:3591

-2

WINDOWS/Reg Restore Log.txt:3593

BckupSubKey = CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\ShellFolder, BckupValueName = Attributes
in ./WINDOWS/Reg Restore Log.txt:3593

-2

WINDOWS/Reg Restore Log.txt:3596

ValueName = HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved,{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
in ./WINDOWS/Reg Restore Log.txt:3596

-2

WINDOWS/IE4 Uninstall Log.Txt:546

Quitando valor de clave del registro: clave = HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32; nombre de valor = ; Completado.
in ./WINDOWS/IE4 Uninstall Log.Txt:546

-2

WINDOWS/IE4 Uninstall Log.Txt:608

Quitando valor de clave del registro: clave = HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}; nombre de valor = ; Completado.
in ./WINDOWS/IE4 Uninstall Log.Txt:608

-2

WINDOWS/IE4 Uninstall Log.Txt:609

Quitando valor de clave del registro: clave = HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32; nombre de valor = ThreadingModel; Completado.
in ./WINDOWS/IE4 Uninstall Log.Txt:609

-2

WINDOWS/IE4 Uninstall Log.Txt:610

Quitando clave del registro: 'HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32'; Completado.
in ./WINDOWS/IE4 Uninstall Log.Txt:610

-2

WINDOWS/IE4 Setup Log.Txt:656

Escribiendo valor de clave del registro: clave = HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32; nombre de valor = ; valor = C:\WINDOWS\SYSTEM\shdocvw.dll; V.
in ./WINDOWS/IE4 Setup Log.Txt:656

-2

WINDOWS/IE4 Setup Log.Txt:699

Escribiendo valor de clave del registro: clave = HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}; nombre de valor = ; valor = Visor de DocObject de shell; V.
in ./WINDOWS/IE4 Setup Log.Txt:699

-2

WINDOWS/IE4 Setup Log.Txt:700

Escribiendo valor de clave del registro: clave = HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32; nombre de valor = ThreadingModel; valor = Apartment; V.
in ./WINDOWS/IE4 Setup Log.Txt:700

-2

WINDOWS/INF/OHARE.INF:1277

CLSID_CShellDocFolder = "E7E4BC40-E76A-11CE-A9BB-00AA004AE837"
in ./WINDOWS/INF/OHARE.INF:1277

-2

e7e4bc40-e76a-11ce-a9bb-00aa004ae837HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

e7e4bc40-e76a-11ce-a9bb-00aa004ae837
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved