Adds composite type parsing for settings.dat hives

williballenthin / python-registry

Pure Python parser for Windows Registry hives.

Apache License 2.0

426 stars 101 forks source link

Adds composite type parsing for settings.dat hives #88

Closed ydkhatri closed 5 years ago

ydkhatri commented 5 years ago

AppContainers used in Windows Apps use a registry hive called settings.dat which utilizes composite value types (instead of Reg_SZ, Reg_DWORD, etc..), and serialized streams to store data. This adds support for that.

Also attaching a sample settings.dat file here.

settings.zip