Import from old repository
This commit is contained in:
Stefan
@@ -0,0 +1,16 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
# Copyright 2013 The Plaso Project Authors.
|
||||
# Please see the AUTHORS file for details on individual authors.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
@@ -0,0 +1,52 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# Copyright 2013 The Plaso Project Authors.
|
||||
# Please see the AUTHORS file for details on individual authors.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
"""This file contains a method to expand Windows environment variables."""
|
||||
|
||||
import re
|
||||
|
||||
|
||||
# TODO: Remove this file once we have a better replacement for it, either
|
||||
# to use the artifact library or dfVFS, since this is part of both of these
|
||||
# libraries.
|
||||
|
||||
# Taken from: https://code.google.com/p/grr/source/browse/lib/artifact_lib.py
|
||||
def ExpandWindowsEnvironmentVariables(data_string, pre_obj):
|
||||
"""Take a string and expand any windows environment variables.
|
||||
|
||||
Args:
|
||||
data_string: A string, e.g. "%SystemRoot%\\LogFiles"
|
||||
pre_obj: A pre-process object.
|
||||
|
||||
Returns:
|
||||
A string with available environment variables expanded.
|
||||
"""
|
||||
win_environ_regex = re.compile(r'%([^%]+?)%')
|
||||
components = []
|
||||
offset = 0
|
||||
for match in win_environ_regex.finditer(data_string):
|
||||
components.append(data_string[offset:match.start()])
|
||||
|
||||
kb_value = getattr(
|
||||
pre_obj, match.group(1).lower(), None)
|
||||
if isinstance(kb_value, basestring) and kb_value:
|
||||
components.append(kb_value)
|
||||
else:
|
||||
components.append(u'%%{0:s}%%'.format(match.group(1)))
|
||||
offset = match.end()
|
||||
components.append(data_string[offset:]) # Append the final chunk.
|
||||
return u''.join(components)
|
||||
@@ -0,0 +1,44 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# Copyright 2014 The Plaso Project Authors.
|
||||
# Please see the AUTHORS file for details on individual authors.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
"""This file contains constants for making service keys more readable."""
|
||||
|
||||
SERVICE_ENUMS = {
|
||||
# Human readable strings for the service type.
|
||||
'Type': {
|
||||
1: 'Kernel Device Driver (0x1)',
|
||||
2: 'File System Driver (0x2)',
|
||||
4: 'Adapter (0x4)',
|
||||
16: 'Service - Own Process (0x10)',
|
||||
32: 'Service - Share Process (0x20)'
|
||||
},
|
||||
# Human readable strings for the service start type.
|
||||
'Start': {
|
||||
0: 'Boot (0)',
|
||||
1: 'System (1)',
|
||||
2: 'Auto Start (2)',
|
||||
3: 'Manual (3)',
|
||||
4: 'Disabled (4)'
|
||||
},
|
||||
# Human readable strings for the error handling.
|
||||
'ErrorControl': {
|
||||
0: 'Ignore (0)',
|
||||
1: 'Normal (1)',
|
||||
2: 'Severe (2)',
|
||||
3: 'Critical (3)'
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,270 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# Copyright 2013 The Plaso Project Authors.
|
||||
# Please see the AUTHORS file for details on individual authors.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
"""This file contains the Windows NT Known Folder identifier definitions."""
|
||||
|
||||
# For now ignore the line too long errors.
|
||||
# pylint: disable=line-too-long
|
||||
|
||||
# For now copied from:
|
||||
# https://code.google.com/p/libfwsi/wiki/KnownFolderIdentifiers
|
||||
|
||||
# TODO: store these in a database or equiv.
|
||||
|
||||
DESCRIPTIONS = {
|
||||
u'008ca0b1-55b4-4c56-b8a8-4de4b299d3be': u'Account Pictures',
|
||||
u'00bcfc5a-ed94-4e48-96a1-3f6217f21990': u'Roaming Tiles',
|
||||
u'0139d44e-6afe-49f2-8690-3dafcae6ffb8': u'(Common) Programs',
|
||||
u'0482af6c-08f1-4c34-8c90-e17ec98b1e17': u'Public Account Pictures',
|
||||
u'054fae61-4dd8-4787-80b6-090220c4b700': u'Game Explorer (Game Tasks)',
|
||||
u'0762d272-c50a-4bb0-a382-697dcd729b80': u'Users (User Profiles)',
|
||||
u'0ac0837c-bbf8-452a-850d-79d08e667ca7': u'Computer (My Computer)',
|
||||
u'0d4c3db6-03a3-462f-a0e6-08924c41b5d4': u'History',
|
||||
u'0f214138-b1d3-4a90-bba9-27cbc0c5389a': u'Sync Setup',
|
||||
u'15ca69b3-30ee-49c1-ace1-6b5ec372afb5': u'Sample Playlists',
|
||||
u'1777f761-68ad-4d8a-87bd-30b759fa33dd': u'Favorites',
|
||||
u'18989b1d-99b5-455b-841c-ab7c74e4ddfc': u'Videos (My Video)',
|
||||
u'190337d1-b8ca-4121-a639-6d472d16972a': u'Search Results (Search Home)',
|
||||
u'1a6fdba2-f42d-4358-a798-b74d745926c5': u'Recorded TV',
|
||||
u'1ac14e77-02e7-4e5d-b744-2eb1ae5198b7': u'System32 (System)',
|
||||
u'1b3ea5dc-b587-4786-b4ef-bd1dc332aeae': u'Libraries',
|
||||
u'1e87508d-89c2-42f0-8a7e-645a0f50ca58': u'Applications',
|
||||
u'2112ab0a-c86a-4ffe-a368-0de96e47012e': u'Music',
|
||||
u'2400183a-6185-49fb-a2d8-4a392a602ba3': u'Public Videos (Common Video)',
|
||||
u'24d89e24-2f19-4534-9dde-6a6671fbb8fe': u'One Drive Documents',
|
||||
u'289a9a43-be44-4057-a41b-587a76d7e7f9': u'Sync Results',
|
||||
u'2a00375e-224c-49de-b8d1-440df7ef3ddc': u'Localized Resources (Directory)',
|
||||
u'2b0f765d-c0e9-4171-908e-08a611b84ff6': u'Cookies',
|
||||
u'2c36c0aa-5812-4b87-bfd0-4cd0dfb19b39': u'Original Images',
|
||||
u'3214fab5-9757-4298-bb61-92a9deaa44ff': u'Public Music (Common Music)',
|
||||
u'339719b5-8c47-4894-94c2-d8f77add44a6': u'One Drive Pictures',
|
||||
u'33e28130-4e1e-4676-835a-98395c3bc3bb': u'Pictures (My Pictures)',
|
||||
u'352481e8-33be-4251-ba85-6007caedcf9d': u'Internet Cache (Temporary Internet Files)',
|
||||
u'374de290-123f-4565-9164-39c4925e467b': u'Downloads',
|
||||
u'3d644c9b-1fb8-4f30-9b45-f670235f79c0': u'Public Downloads (Common Downloads)',
|
||||
u'3eb685db-65f9-4cf6-a03a-e3ef65729f3d': u'Roaming Application Data (Roaming)',
|
||||
u'43668bf8-c14e-49b2-97c9-747784d784b7': u'Sync Center (Sync Manager)',
|
||||
u'48daf80b-e6cf-4f4e-b800-0e69d84ee384': u'Libraries',
|
||||
u'491e922f-5643-4af4-a7eb-4e7a138d8174': u'Videos',
|
||||
u'4bd8d571-6d19-48d3-be97-422220080e43': u'Music (My Music)',
|
||||
u'4bfefb45-347d-4006-a5be-ac0cb0567192': u'Conflicts',
|
||||
u'4c5c32ff-bb9d-43b0-b5b4-2d72e54eaaa4': u'Saved Games',
|
||||
u'4d9f7874-4e0c-4904-967b-40b0d20c3e4b': u'Internet (The Internet)',
|
||||
u'52528a6b-b9e3-4add-b60d-588c2dba842d': u'Homegroup',
|
||||
u'52a4f021-7b75-48a9-9f6b-4b87a210bc8f': u'Quick Launch',
|
||||
u'56784854-c6cb-462b-8169-88e350acb882': u'Contacts',
|
||||
u'5b3749ad-b49f-49c1-83eb-15370fbd4882': u'Tree Properties',
|
||||
u'5cd7aee2-2219-4a67-b85d-6c9ce15660cb': u'Programs',
|
||||
u'5ce4a5e9-e4eb-479d-b89f-130c02886155': u'Device Metadata Store',
|
||||
u'5e6c858f-0e22-4760-9afe-ea3317b67173': u'Profile (User\'s name)',
|
||||
u'625b53c3-ab48-4ec1-ba1f-a1ef4146fc19': u'Start Menu',
|
||||
u'62ab5d82-fdc1-4dc3-a9dd-070d1d495d97': u'Program Data',
|
||||
u'6365d5a7-0f0d-45e5-87f6-0da56b6a4f7d': u'Common Files (x64)',
|
||||
u'69d2cf90-fc33-4fb7-9a0c-ebb0f0fcb43c': u'Slide Shows (Photo Albums)',
|
||||
u'6d809377-6af0-444b-8957-a3773f02200e': u'Program Files (x64)',
|
||||
u'6f0cd92b-2e97-45d1-88ff-b0d186b8dedd': u'Network Connections',
|
||||
u'724ef170-a42d-4fef-9f26-b60e846fba4f': u'Administrative Tools',
|
||||
u'767e6811-49cb-4273-87c2-20f355e1085b': u'One Drive Camera Roll',
|
||||
u'76fc4e2d-d6ad-4519-a663-37bd56068185': u'Printers',
|
||||
u'7b0db17d-9cd2-4a93-9733-46cc89022e7c': u'Documents',
|
||||
u'7b396e54-9ec5-4300-be0a-2482ebae1a26': u'Default Gadgets (Sidebar Default Parts)',
|
||||
u'7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e': u'Program Files (x86)',
|
||||
u'7d1d3a04-debb-4115-95cf-2f29da2920da': u'Saved Searches (Searches)',
|
||||
u'7e636bfe-dfa9-4d5e-b456-d7b39851d8a9': u'Templates',
|
||||
u'82a5ea35-d9cd-47c5-9629-e15d2f714e6e': u'(Common) Startup',
|
||||
u'82a74aeb-aeb4-465c-a014-d097ee346d63': u'Control Panel',
|
||||
u'859ead94-2e85-48ad-a71a-0969cb56a6cd': u'Sample Videos',
|
||||
u'8983036c-27c0-404b-8f08-102d10dcfd74': u'Send To',
|
||||
u'8ad10c31-2adb-4296-a8f7-e4701232c972': u'Resources (Resources Directory)',
|
||||
u'905e63b6-c1bf-494e-b29c-65b732d3d21a': u'Program Files',
|
||||
u'9274bd8d-cfd1-41c3-b35e-b13f55a758f4': u'Printer Shortcuts (PrintHood)',
|
||||
u'98ec0e18-2098-4d44-8644-66979315a281': u'Microsoft Office Outlook (MAPI)',
|
||||
u'9b74b6a3-0dfd-4f11-9e78-5f7800f2e772': u'User\'s name',
|
||||
u'9e3995ab-1f9c-4f13-b827-48b24b6c7174': u'User Pinned',
|
||||
u'9e52ab10-f80d-49df-acb8-4330f5687855': u'Temporary Burn Folder (CD Burning)',
|
||||
u'a302545d-deff-464b-abe8-61c8648d939b': u'Libraries',
|
||||
u'a305ce99-f527-492b-8b1a-7e76fa98d6e4': u'Installed Updates (Application Updates)',
|
||||
u'a3918781-e5f2-4890-b3d9-a7e54332328c': u'Application Shortcuts',
|
||||
u'a4115719-d62e-491d-aa7c-e74b8be3b067': u'(Common) Start Menu',
|
||||
u'a520a1a4-1780-4ff6-bd18-167343c5af16': u'Local Application Data Low (Local Low)',
|
||||
u'a52bba46-e9e1-435f-b3d9-28daa648c0f6': u'One Drive',
|
||||
u'a63293e8-664e-48db-a079-df759e0509f7': u'Templates',
|
||||
u'a75d362e-50fc-4fb7-ac2c-a8beaa314493': u'Gadgets (Sidebar Parts)',
|
||||
u'a77f5d77-2e2b-44c3-a6a2-aba601054a51': u'Programs',
|
||||
u'a990ae9f-a03b-4e80-94bc-9912d7504104': u'Pictures',
|
||||
u'aaa8d5a5-f1d6-4259-baa8-78e7ef60835e': u'Roamed Tile Images',
|
||||
u'ab5fb87b-7ce2-4f83-915d-550846c9537b': u'Camera Roll',
|
||||
u'ae50c081-ebd2-438a-8655-8a092e34987a': u'Recent (Recent Items)',
|
||||
u'b250c668-f57d-4ee1-a63c-290ee7d1aa1f': u'Sample Music',
|
||||
u'b4bfcc3a-db2c-424c-b029-7fe99a87c641': u'Desktop',
|
||||
u'b6ebfb86-6907-413c-9af7-4fc2abf07cc5': u'Public Pictures (Common Pictures)',
|
||||
u'b7534046-3ecb-4c18-be4e-64cd4cb7d6ac': u'Recycle Bin (Bit Bucket)',
|
||||
u'b7bede81-df94-4682-a7d8-57a52620b86f': u'Screenshots',
|
||||
u'b94237e7-57ac-4347-9151-b08c6c32d1f7': u'(Common) Templates',
|
||||
u'b97d20bb-f46a-4c97-ba10-5e3608430854': u'Startup',
|
||||
u'bcb5256f-79f6-4cee-b725-dc34e402fd46': u'Implicit Application Shortcuts',
|
||||
u'bcbd3057-ca5c-4622-b42d-bc56db0ae516': u'Programs',
|
||||
u'bd85e001-112e-431e-983b-7b15ac09fff1': u'Recorded TV',
|
||||
u'bfb9d5e0-c6a9-404c-b2b2-ae6db6af4968': u'Links',
|
||||
u'c1bae2d0-10df-4334-bedd-7aa20b227a9d': u'(Common) OEM Links',
|
||||
u'c4900540-2379-4c75-844b-64e6faf8716b': u'Sample Pictures',
|
||||
u'c4aa340d-f20f-4863-afef-f87ef2e6ba25': u'Public Desktop (Common Desktop)',
|
||||
u'c5abbf53-e17f-4121-8900-86626fc2c973': u'Network Shortcuts (NetHood)',
|
||||
u'c870044b-f49e-4126-a9c3-b52a1ff411e8': u'Ringtones',
|
||||
u'cac52c1a-b53d-4edc-92d7-6b2e8ac19434': u'Games',
|
||||
u'd0384e7d-bac3-4797-8f14-cba229b392b5': u'(Common) Administrative Tools',
|
||||
u'd20beec4-5ca8-4905-ae3b-bf251ea09b53': u'Network (Places)',
|
||||
u'd65231b0-b2f1-4857-a4ce-a8e7c6ea7d27': u'System32 (x86)',
|
||||
u'd9dc8a3b-b784-432e-a781-5a1130a75963': u'History',
|
||||
u'de61d971-5ebc-4f02-a3a9-6c82895e5c04': u'Add New Programs (Get Programs)',
|
||||
u'de92c1c7-837f-4f69-a3bb-86e631204a23': u'Playlists',
|
||||
u'de974d24-d9c6-4d3e-bf91-f4455120b917': u'Common Files (x86)',
|
||||
u'debf2536-e1a8-4c59-b6a2-414586476aea': u'Game Explorer (Public Game Tasks)',
|
||||
u'df7266ac-9274-4867-8d55-3bd661de872d': u'Programs and Features (Change and Remove Programs)',
|
||||
u'dfdf76a2-c82a-4d63-906a-5644ac457385': u'Public',
|
||||
u'e555ab60-153b-4d17-9f04-a5fe99fc15ec': u'Ringtones',
|
||||
u'ed4824af-dce4-45a8-81e2-fc7965083634': u'Public Documents (Common Documents)',
|
||||
u'ee32e446-31ca-4aba-814f-a5ebd2fd6d5e': u'Offline Files (CSC)',
|
||||
u'f1b32785-6fba-4fcf-9d55-7b8e7f157091': u'Local Application Data',
|
||||
u'f38bf404-1d43-42f2-9305-67de0b28fc23': u'Windows',
|
||||
u'f3ce0f7c-4901-4acc-8648-d5d44b04ef8f': u'User\'s Files',
|
||||
u'f7f1ed05-9f6d-47a2-aaae-29d317c6f066': u'Common Files',
|
||||
u'fd228cb7-ae11-4ae3-864c-16f3910ab8fe': u'Fonts',
|
||||
u'fdd39ad0-238f-46af-adb4-6c85480369c7': u'Documents (Personal)',
|
||||
}
|
||||
|
||||
PATHS = {
|
||||
u'008ca0b1-55b4-4c56-b8a8-4de4b299d3be': u'%APPDATA%\\Microsoft\\Windows\\AccountPictures',
|
||||
u'00bcfc5a-ed94-4e48-96a1-3f6217f21990': u'%LOCALAPPDATA%\\Microsoft\\Windows\\RoamingTiles',
|
||||
u'0139d44e-6afe-49f2-8690-3dafcae6ffb8': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs',
|
||||
u'0482af6c-08f1-4c34-8c90-e17ec98b1e17': u'%PUBLIC%\\AccountPictures',
|
||||
u'054fae61-4dd8-4787-80b6-090220c4b700': u'%LOCALAPPDATA%\\Microsoft\\Windows\\GameExplorer',
|
||||
u'0762d272-c50a-4bb0-a382-697dcd729b80': u'%SYSTEMDRIVE%\\Users',
|
||||
u'0ac0837c-bbf8-452a-850d-79d08e667ca7': u'',
|
||||
u'0d4c3db6-03a3-462f-a0e6-08924c41b5d4': u'%LOCALAPPDATA%\\Microsoft\\Windows\\ConnectedSearch\\History',
|
||||
u'0f214138-b1d3-4a90-bba9-27cbc0c5389a': u'',
|
||||
u'15ca69b3-30ee-49c1-ace1-6b5ec372afb5': u'%PUBLIC%\\Music\\Sample Playlists',
|
||||
u'1777f761-68ad-4d8a-87bd-30b759fa33dd': u'%USERPROFILE%\\Favorites',
|
||||
u'18989b1d-99b5-455b-841c-ab7c74e4ddfc': u'%USERPROFILE%\\Videos',
|
||||
u'190337d1-b8ca-4121-a639-6d472d16972a': u'',
|
||||
u'1a6fdba2-f42d-4358-a798-b74d745926c5': u'%PUBLIC%\\RecordedTV.library-ms',
|
||||
u'1ac14e77-02e7-4e5d-b744-2eb1ae5198b7': u'%WINDIR%\\System32',
|
||||
u'1b3ea5dc-b587-4786-b4ef-bd1dc332aeae': u'%APPDATA%\\Microsoft\\Windows\\Libraries',
|
||||
u'1e87508d-89c2-42f0-8a7e-645a0f50ca58': u'',
|
||||
u'2112ab0a-c86a-4ffe-a368-0de96e47012e': u'%APPDATA%\\Microsoft\\Windows\\Libraries\\Music.library-ms',
|
||||
u'2400183a-6185-49fb-a2d8-4a392a602ba3': u'%PUBLIC%\\Videos',
|
||||
u'24d89e24-2f19-4534-9dde-6a6671fbb8fe': u'%USERPROFILE%\\OneDrive\\Documents',
|
||||
u'289a9a43-be44-4057-a41b-587a76d7e7f9': u'',
|
||||
u'2a00375e-224c-49de-b8d1-440df7ef3ddc': u'%WINDIR%\\resources\\%CODEPAGE%',
|
||||
u'2b0f765d-c0e9-4171-908e-08a611b84ff6': u'%APPDATA%\\Microsoft\\Windows\\Cookies',
|
||||
u'2c36c0aa-5812-4b87-bfd0-4cd0dfb19b39': u'%LOCALAPPDATA%\\Microsoft\\Windows Photo Gallery\\Original Images',
|
||||
u'3214fab5-9757-4298-bb61-92a9deaa44ff': u'%PUBLIC%\\Music',
|
||||
u'339719b5-8c47-4894-94c2-d8f77add44a6': u'%USERPROFILE%\\OneDrive\\Pictures',
|
||||
u'33e28130-4e1e-4676-835a-98395c3bc3bb': u'%USERPROFILE%\\Pictures',
|
||||
u'352481e8-33be-4251-ba85-6007caedcf9d': u'%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files',
|
||||
u'374de290-123f-4565-9164-39c4925e467b': u'%USERPROFILE%\\Downloads',
|
||||
u'3d644c9b-1fb8-4f30-9b45-f670235f79c0': u'%PUBLIC%\\Downloads',
|
||||
u'3eb685db-65f9-4cf6-a03a-e3ef65729f3d': u'%USERPROFILE%\\AppData\\Roaming',
|
||||
u'43668bf8-c14e-49b2-97c9-747784d784b7': u'',
|
||||
u'48daf80b-e6cf-4f4e-b800-0e69d84ee384': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\Libraries',
|
||||
u'491e922f-5643-4af4-a7eb-4e7a138d8174': u'%APPDATA%\\Microsoft\\Windows\\Libraries\\Videos.library-ms',
|
||||
u'4bd8d571-6d19-48d3-be97-422220080e43': u'%USERPROFILE%\\Music',
|
||||
u'4bfefb45-347d-4006-a5be-ac0cb0567192': u'',
|
||||
u'4c5c32ff-bb9d-43b0-b5b4-2d72e54eaaa4': u'%USERPROFILE%\\Saved Games',
|
||||
u'4d9f7874-4e0c-4904-967b-40b0d20c3e4b': u'',
|
||||
u'52528a6b-b9e3-4add-b60d-588c2dba842d': u'',
|
||||
u'52a4f021-7b75-48a9-9f6b-4b87a210bc8f': u'%APPDATA%\\Microsoft\\Internet Explorer\\Quick Launch',
|
||||
u'56784854-c6cb-462b-8169-88e350acb882': u'',
|
||||
u'5b3749ad-b49f-49c1-83eb-15370fbd4882': u'',
|
||||
u'5cd7aee2-2219-4a67-b85d-6c9ce15660cb': u'%LOCALAPPDATA%\\Programs',
|
||||
u'5ce4a5e9-e4eb-479d-b89f-130c02886155': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\DeviceMetadataStore',
|
||||
u'5e6c858f-0e22-4760-9afe-ea3317b67173': u'%SYSTEMDRIVE%\\Users\\%USERNAME%',
|
||||
u'625b53c3-ab48-4ec1-ba1f-a1ef4146fc19': u'%APPDATA%\\Microsoft\\Windows\\Start Menu',
|
||||
u'62ab5d82-fdc1-4dc3-a9dd-070d1d495d97': u'%SYSTEMDRIVE%\\ProgramData',
|
||||
u'6365d5a7-0f0d-45e5-87f6-0da56b6a4f7d': u'%PROGRAMFILES%\\Common Files',
|
||||
u'69d2cf90-fc33-4fb7-9a0c-ebb0f0fcb43c': u'%USERPROFILE%\\Pictures\\Slide Shows',
|
||||
u'6d809377-6af0-444b-8957-a3773f02200e': u'%SYSTEMDRIVE%\\Program Files',
|
||||
u'6f0cd92b-2e97-45d1-88ff-b0d186b8dedd': u'',
|
||||
u'724ef170-a42d-4fef-9f26-b60e846fba4f': u'%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools',
|
||||
u'767e6811-49cb-4273-87c2-20f355e1085b': u'%USERPROFILE%\\OneDrive\\Pictures\\Camera Roll',
|
||||
u'76fc4e2d-d6ad-4519-a663-37bd56068185': u'',
|
||||
u'7b0db17d-9cd2-4a93-9733-46cc89022e7c': u'%APPDATA%\\Microsoft\\Windows\\Libraries\\Documents.library-ms',
|
||||
u'7b396e54-9ec5-4300-be0a-2482ebae1a26': u'%PROGRAMFILES%\\Windows Sidebar\\Gadgets',
|
||||
u'7c5a40ef-a0fb-4bfc-874a-c0f2e0b9fa8e': u'%PROGRAMFILES% (%SYSTEMDRIVE%\\Program Files)',
|
||||
u'7d1d3a04-debb-4115-95cf-2f29da2920da': u'%USERPROFILE%\\Searches',
|
||||
u'7e636bfe-dfa9-4d5e-b456-d7b39851d8a9': u'%LOCALAPPDATA%\\Microsoft\\Windows\\ConnectedSearch\\Templates',
|
||||
u'82a5ea35-d9cd-47c5-9629-e15d2f714e6e': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp',
|
||||
u'82a74aeb-aeb4-465c-a014-d097ee346d63': u'',
|
||||
u'859ead94-2e85-48ad-a71a-0969cb56a6cd': u'%PUBLIC%\\Videos\\Sample Videos',
|
||||
u'8983036c-27c0-404b-8f08-102d10dcfd74': u'%APPDATA%\\Microsoft\\Windows\\SendTo',
|
||||
u'8ad10c31-2adb-4296-a8f7-e4701232c972': u'%WINDIR%\\Resources',
|
||||
u'905e63b6-c1bf-494e-b29c-65b732d3d21a': u'%SYSTEMDRIVE%\\Program Files',
|
||||
u'9274bd8d-cfd1-41c3-b35e-b13f55a758f4': u'%APPDATA%\\Microsoft\\Windows\\Printer Shortcuts',
|
||||
u'98ec0e18-2098-4d44-8644-66979315a281': u'',
|
||||
u'9b74b6a3-0dfd-4f11-9e78-5f7800f2e772': u'',
|
||||
u'9e3995ab-1f9c-4f13-b827-48b24b6c7174': u'%APPDATA%\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned',
|
||||
u'9e52ab10-f80d-49df-acb8-4330f5687855': u'%LOCALAPPDATA%\\Microsoft\\Windows\\Burn\\Burn',
|
||||
u'a302545d-deff-464b-abe8-61c8648d939b': u'',
|
||||
u'a305ce99-f527-492b-8b1a-7e76fa98d6e4': u'',
|
||||
u'a3918781-e5f2-4890-b3d9-a7e54332328c': u'%LOCALAPPDATA%\\Microsoft\\Windows\\Application Shortcuts',
|
||||
u'a4115719-d62e-491d-aa7c-e74b8be3b067': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu',
|
||||
u'a520a1a4-1780-4ff6-bd18-167343c5af16': u'%USERPROFILE%\\AppData\\LocalLow',
|
||||
u'a52bba46-e9e1-435f-b3d9-28daa648c0f6': u'%USERPROFILE%\\OneDrive',
|
||||
u'a63293e8-664e-48db-a079-df759e0509f7': u'%APPDATA%\\Microsoft\\Windows\\Templates',
|
||||
u'a75d362e-50fc-4fb7-ac2c-a8beaa314493': u'%LOCALAPPDATA%\\Microsoft\\Windows Sidebar\\Gadgets',
|
||||
u'a77f5d77-2e2b-44c3-a6a2-aba601054a51': u'%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs',
|
||||
u'a990ae9f-a03b-4e80-94bc-9912d7504104': u'%APPDATA%\\Microsoft\\Windows\\Libraries\\Pictures.library-ms',
|
||||
u'aaa8d5a5-f1d6-4259-baa8-78e7ef60835e': u'%LOCALAPPDATA%\\Microsoft\\Windows\\RoamedTileImages',
|
||||
u'ab5fb87b-7ce2-4f83-915d-550846c9537b': u'%USERPROFILE%\\Pictures\\Camera Roll',
|
||||
u'ae50c081-ebd2-438a-8655-8a092e34987a': u'%APPDATA%\\Microsoft\\Windows\\Recent',
|
||||
u'b250c668-f57d-4ee1-a63c-290ee7d1aa1f': u'%PUBLIC%\\Music\\Sample Music',
|
||||
u'b4bfcc3a-db2c-424c-b029-7fe99a87c641': u'%USERPROFILE%\\Desktop',
|
||||
u'b6ebfb86-6907-413c-9af7-4fc2abf07cc5': u'%PUBLIC%\\Pictures',
|
||||
u'b7534046-3ecb-4c18-be4e-64cd4cb7d6ac': u'',
|
||||
u'b7bede81-df94-4682-a7d8-57a52620b86f': u'%USERPROFILE%\\Pictures\\Screenshots',
|
||||
u'b94237e7-57ac-4347-9151-b08c6c32d1f7': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\Templates',
|
||||
u'b97d20bb-f46a-4c97-ba10-5e3608430854': u'%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp',
|
||||
u'bcb5256f-79f6-4cee-b725-dc34e402fd46': u'%APPDATA%\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts',
|
||||
u'bcbd3057-ca5c-4622-b42d-bc56db0ae516': u'%LOCALAPPDATA%\\Programs\\Common',
|
||||
u'bd85e001-112e-431e-983b-7b15ac09fff1': u'',
|
||||
u'bfb9d5e0-c6a9-404c-b2b2-ae6db6af4968': u'%USERPROFILE%\\Links',
|
||||
u'c1bae2d0-10df-4334-bedd-7aa20b227a9d': u'%ALLUSERSPROFILE%\\OEM Links',
|
||||
u'c4900540-2379-4c75-844b-64e6faf8716b': u'%PUBLIC%\\Pictures\\Sample Pictures',
|
||||
u'c4aa340d-f20f-4863-afef-f87ef2e6ba25': u'%PUBLIC%\\Desktop',
|
||||
u'c5abbf53-e17f-4121-8900-86626fc2c973': u'%APPDATA%\\Microsoft\\Windows\\Network Shortcuts',
|
||||
u'c870044b-f49e-4126-a9c3-b52a1ff411e8': u'%LOCALAPPDATA%\\Microsoft\\Windows\\Ringtones',
|
||||
u'cac52c1a-b53d-4edc-92d7-6b2e8ac19434': u'',
|
||||
u'd0384e7d-bac3-4797-8f14-cba229b392b5': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools',
|
||||
u'd20beec4-5ca8-4905-ae3b-bf251ea09b53': u'',
|
||||
u'd65231b0-b2f1-4857-a4ce-a8e7c6ea7d27': u'%WINDIR%\\system32',
|
||||
u'd9dc8a3b-b784-432e-a781-5a1130a75963': u'%LOCALAPPDATA%\\Microsoft\\Windows\\History',
|
||||
u'de61d971-5ebc-4f02-a3a9-6c82895e5c04': u'',
|
||||
u'de92c1c7-837f-4f69-a3bb-86e631204a23': u'%USERPROFILE%\\Music\\Playlists',
|
||||
u'de974d24-d9c6-4d3e-bf91-f4455120b917': u'%PROGRAMFILES%\\Common Files',
|
||||
u'debf2536-e1a8-4c59-b6a2-414586476aea': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\GameExplorer',
|
||||
u'df7266ac-9274-4867-8d55-3bd661de872d': u'',
|
||||
u'dfdf76a2-c82a-4d63-906a-5644ac457385': u'%SYSTEMDRIVE%\\Users\\Public',
|
||||
u'e555ab60-153b-4d17-9f04-a5fe99fc15ec': u'%ALLUSERSPROFILE%\\Microsoft\\Windows\\Ringtones',
|
||||
u'ed4824af-dce4-45a8-81e2-fc7965083634': u'%PUBLIC%\\Documents',
|
||||
u'ee32e446-31ca-4aba-814f-a5ebd2fd6d5e': u'',
|
||||
u'f1b32785-6fba-4fcf-9d55-7b8e7f157091': u'%USERPROFILE%\\AppData\\Local',
|
||||
u'f38bf404-1d43-42f2-9305-67de0b28fc23': u'%WINDIR%',
|
||||
u'f3ce0f7c-4901-4acc-8648-d5d44b04ef8f': u'',
|
||||
u'f7f1ed05-9f6d-47a2-aaae-29d317c6f066': u'%PROGRAMFILES%\\Common Files',
|
||||
u'fd228cb7-ae11-4ae3-864c-16f3910ab8fe': u'%WINDIR%\\Fonts',
|
||||
u'fdd39ad0-238f-46af-adb4-6c85480369c7': u'%USERPROFILE%\\Documents',
|
||||
}
|
||||
@@ -0,0 +1,204 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# Copyright 2014 The Plaso Project Authors.
|
||||
# Please see the AUTHORS file for details on individual authors.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
"""This file contains the Windows NT shell folder identifier definitions."""
|
||||
|
||||
# For now ignore the line too long errors.
|
||||
# pylint: disable=line-too-long
|
||||
|
||||
# For now copied from:
|
||||
# https://code.google.com/p/libfwsi/wiki/ShellFolderIdentifiers
|
||||
|
||||
# TODO: store these in a database or equiv.
|
||||
|
||||
DESCRIPTIONS = {
|
||||
u'00020d75-0000-0000-c000-000000000046': u'Inbox',
|
||||
u'00020d76-0000-0000-c000-000000000046': u'Inbox',
|
||||
u'00c6d95f-329c-409a-81d7-c46c66ea7f33': u'Default Location',
|
||||
u'0142e4d0-fb7a-11dc-ba4a-000ffe7ab428': u'Biometric Devices (Biometrics)',
|
||||
u'025a5937-a6be-4686-a844-36fe4bec8b6d': u'Power Options',
|
||||
u'031e4825-7b94-4dc3-b131-e946b44c8dd5': u'Users Libraries',
|
||||
u'04731b67-d933-450a-90e6-4acd2e9408fe': u'Search Folder',
|
||||
u'05d7b0f4-2121-4eff-bf6b-ed3f69b894d9': u'Taskbar (Notification Area Icons)',
|
||||
u'0afaced1-e828-11d1-9187-b532f1e9575d': u'Folder Shortcut',
|
||||
u'0cd7a5c0-9f37-11ce-ae65-08002b2e1262': u'Cabinet File',
|
||||
u'0df44eaa-ff21-4412-828e-260a8728e7f1': u'Taskbar and Start Menu',
|
||||
u'11016101-e366-4d22-bc06-4ada335c892b': u'Internet Explorer History and Feeds Shell Data Source for Windows Search',
|
||||
u'1206f5f1-0569-412c-8fec-3204630dfb70': u'Credential Manager',
|
||||
u'13e7f612-f261-4391-bea2-39df4f3fa311': u'Windows Desktop Search',
|
||||
u'15eae92e-f17a-4431-9f28-805e482dafd4': u'Install New Programs (Get Programs)',
|
||||
u'1723d66a-7a12-443e-88c7-05e1bfe79983': u'Previous Versions Delegate Folder',
|
||||
u'17cd9488-1228-4b2f-88ce-4298e93e0966': u'Default Programs (Set User Defaults)',
|
||||
u'1a9ba3a0-143a-11cf-8350-444553540000': u'Shell Favorite Folder',
|
||||
u'1d2680c9-0e2a-469d-b787-065558bc7d43': u'Fusion Cache',
|
||||
u'1f3427c8-5c10-4210-aa03-2ee45287d668': u'User Pinned',
|
||||
u'1f43a58c-ea28-43e6-9ec4-34574a16ebb7': u'Windows Desktop Search MAPI Namespace Extension Class',
|
||||
u'1f4de370-d627-11d1-ba4f-00a0c91eedba': u'Search Results - Computers (Computer Search Results Folder, Network Computers)',
|
||||
u'1fa9085f-25a2-489b-85d4-86326eedcd87': u'Manage Wireless Networks',
|
||||
u'208d2c60-3aea-1069-a2d7-08002b30309d': u'My Network Places',
|
||||
u'20d04fe0-3aea-1069-a2d8-08002b30309d': u'My Computer',
|
||||
u'21ec2020-3aea-1069-a2dd-08002b30309d': u'Control Panel',
|
||||
u'2227a280-3aea-1069-a2de-08002b30309d': u'Printers and Faxes',
|
||||
u'241d7c96-f8bf-4f85-b01f-e2b043341a4b': u'Workspaces Center (Remote Application and Desktop Connections)',
|
||||
u'2559a1f0-21d7-11d4-bdaf-00c04f60b9f0': u'Search',
|
||||
u'2559a1f1-21d7-11d4-bdaf-00c04f60b9f0': u'Help and Support',
|
||||
u'2559a1f2-21d7-11d4-bdaf-00c04f60b9f0': u'Windows Security',
|
||||
u'2559a1f3-21d7-11d4-bdaf-00c04f60b9f0': u'Run...',
|
||||
u'2559a1f4-21d7-11d4-bdaf-00c04f60b9f0': u'Internet',
|
||||
u'2559a1f5-21d7-11d4-bdaf-00c04f60b9f0': u'E-mail',
|
||||
u'2559a1f7-21d7-11d4-bdaf-00c04f60b9f0': u'Set Program Access and Defaults',
|
||||
u'267cf8a9-f4e3-41e6-95b1-af881be130ff': u'Location Folder',
|
||||
u'26ee0668-a00a-44d7-9371-beb064c98683': u'Control Panel',
|
||||
u'2728520d-1ec8-4c68-a551-316b684c4ea7': u'Network Setup Wizard',
|
||||
u'28803f59-3a75-4058-995f-4ee5503b023c': u'Bluetooth Devices',
|
||||
u'289978ac-a101-4341-a817-21eba7fd046d': u'Sync Center Conflict Folder',
|
||||
u'289af617-1cc3-42a6-926c-e6a863f0e3ba': u'DLNA Media Servers Data Source',
|
||||
u'2965e715-eb66-4719-b53f-1672673bbefa': u'Results Folder',
|
||||
u'2e9e59c0-b437-4981-a647-9c34b9b90891': u'Sync Setup Folder',
|
||||
u'2f6ce85c-f9ee-43ca-90c7-8a9bd53a2467': u'File History Data Source',
|
||||
u'3080f90d-d7ad-11d9-bd98-0000947b0257': u'Show Desktop',
|
||||
u'3080f90e-d7ad-11d9-bd98-0000947b0257': u'Window Switcher',
|
||||
u'323ca680-c24d-4099-b94d-446dd2d7249e': u'Common Places',
|
||||
u'328b0346-7eaf-4bbe-a479-7cb88a095f5b': u'Layout Folder',
|
||||
u'335a31dd-f04b-4d76-a925-d6b47cf360df': u'Backup and Restore Center',
|
||||
u'35786d3c-b075-49b9-88dd-029876e11c01': u'Portable Devices',
|
||||
u'36eef7db-88ad-4e81-ad49-0e313f0c35f8': u'Windows Update',
|
||||
u'3c5c43a3-9ce9-4a9b-9699-2ac0cf6cc4bf': u'Configure Wireless Network',
|
||||
u'3f6bc534-dfa1-4ab4-ae54-ef25a74e0107': u'System Restore',
|
||||
u'4026492f-2f69-46b8-b9bf-5654fc07e423': u'Windows Firewall',
|
||||
u'418c8b64-5463-461d-88e0-75e2afa3c6fa': u'Explorer Browser Results Folder',
|
||||
u'4234d49b-0245-4df3-b780-3893943456e1': u'Applications',
|
||||
u'437ff9c0-a07f-4fa0-af80-84b6c6440a16': u'Command Folder',
|
||||
u'450d8fba-ad25-11d0-98a8-0800361b1103': u'My Documents',
|
||||
u'48e7caab-b918-4e58-a94d-505519c795dc': u'Start Menu Folder',
|
||||
u'5399e694-6ce5-4d6c-8fce-1d8870fdcba0': u'Control Panel command object for Start menu and desktop',
|
||||
u'58e3c745-d971-4081-9034-86e34b30836a': u'Speech Recognition Options',
|
||||
u'59031a47-3f72-44a7-89c5-5595fe6b30ee': u'Shared Documents Folder (Users Files)',
|
||||
u'5ea4f148-308c-46d7-98a9-49041b1dd468': u'Mobility Center Control Panel',
|
||||
u'60632754-c523-4b62-b45c-4172da012619': u'User Accounts',
|
||||
u'63da6ec0-2e98-11cf-8d82-444553540000': u'Microsoft FTP Folder',
|
||||
u'640167b4-59b0-47a6-b335-a6b3c0695aea': u'Portable Media Devices',
|
||||
u'645ff040-5081-101b-9f08-00aa002f954e': u'Recycle Bin',
|
||||
u'64693913-1c21-4f30-a98f-4e52906d3b56': u'CLSID_AppInstanceFolder',
|
||||
u'67718415-c450-4f3c-bf8a-b487642dc39b': u'Windows Features',
|
||||
u'6785bfac-9d2d-4be5-b7e2-59937e8fb80a': u'Other Users Folder',
|
||||
u'67ca7650-96e6-4fdd-bb43-a8e774f73a57': u'Home Group Control Panel (Home Group)',
|
||||
u'692f0339-cbaa-47e6-b5b5-3b84db604e87': u'Extensions Manager Folder',
|
||||
u'6dfd7c5c-2451-11d3-a299-00c04f8ef6af': u'Folder Options',
|
||||
u'7007acc7-3202-11d1-aad2-00805fc1270e': u'Network Connections (Network and Dial-up Connections)',
|
||||
u'708e1662-b832-42a8-bbe1-0a77121e3908': u'Tree property value folder',
|
||||
u'71d99464-3b6b-475c-b241-e15883207529': u'Sync Results Folder',
|
||||
u'72b36e70-8700-42d6-a7f7-c9ab3323ee51': u'Search Connector Folder',
|
||||
u'78f3955e-3b90-4184-bd14-5397c15f1efc': u'Performance Information and Tools',
|
||||
u'7a9d77bd-5403-11d2-8785-2e0420524153': u'User Accounts (Users and Passwords)',
|
||||
u'7b81be6a-ce2b-4676-a29e-eb907a5126c5': u'Programs and Features',
|
||||
u'7bd29e00-76c1-11cf-9dd0-00a0c9034933': u'Temporary Internet Files',
|
||||
u'7bd29e01-76c1-11cf-9dd0-00a0c9034933': u'Temporary Internet Files',
|
||||
u'7be9d83c-a729-4d97-b5a7-1b7313c39e0a': u'Programs Folder',
|
||||
u'8060b2e3-c9d7-4a5d-8c6b-ce8eba111328': u'Proximity CPL',
|
||||
u'8343457c-8703-410f-ba8b-8b026e431743': u'Feedback Tool',
|
||||
u'85bbd920-42a0-1069-a2e4-08002b30309d': u'Briefcase',
|
||||
u'863aa9fd-42df-457b-8e4d-0de1b8015c60': u'Remote Printers',
|
||||
u'865e5e76-ad83-4dca-a109-50dc2113ce9a': u'Programs Folder and Fast Items',
|
||||
u'871c5380-42a0-1069-a2ea-08002b30309d': u'Internet Explorer (Homepage)',
|
||||
u'87630419-6216-4ff8-a1f0-143562d16d5c': u'Mobile Broadband Profile Settings Editor',
|
||||
u'877ca5ac-cb41-4842-9c69-9136e42d47e2': u'File Backup Index',
|
||||
u'88c6c381-2e85-11d0-94de-444553540000': u'ActiveX Cache Folder',
|
||||
u'896664f7-12e1-490f-8782-c0835afd98fc': u'Libraries delegate folder that appears in Users Files Folder',
|
||||
u'8e908fc9-becc-40f6-915b-f4ca0e70d03d': u'Network and Sharing Center',
|
||||
u'8fd8b88d-30e1-4f25-ac2b-553d3d65f0ea': u'DXP',
|
||||
u'9113a02d-00a3-46b9-bc5f-9c04daddd5d7': u'Enhanced Storage Data Source',
|
||||
u'93412589-74d4-4e4e-ad0e-e0cb621440fd': u'Font Settings',
|
||||
u'9343812e-1c37-4a49-a12e-4b2d810d956b': u'Search Home',
|
||||
u'96437431-5a90-4658-a77c-25478734f03e': u'Server Manager',
|
||||
u'96ae8d84-a250-4520-95a5-a47a7e3c548b': u'Parental Controls',
|
||||
u'98d99750-0b8a-4c59-9151-589053683d73': u'Windows Search Service Media Center Namespace Extension Handler',
|
||||
u'98f275b4-4fff-11e0-89e2-7b86dfd72085': u'CLSID_StartMenuLauncherProviderFolder',
|
||||
u'992cffa0-f557-101a-88ec-00dd010ccc48': u'Network Connections (Network and Dial-up Connections)',
|
||||
u'9a096bb5-9dc3-4d1c-8526-c3cbf991ea4e': u'Internet Explorer RSS Feeds Folder',
|
||||
u'9c60de1e-e5fc-40f4-a487-460851a8d915': u'AutoPlay',
|
||||
u'9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf': u'Sync Center Folder',
|
||||
u'9db7a13c-f208-4981-8353-73cc61ae2783': u'Previous Versions',
|
||||
u'9f433b7c-5f96-4ce1-ac28-aeaa1cc04d7c': u'Security Center',
|
||||
u'9fe63afd-59cf-4419-9775-abcc3849f861': u'System Recovery (Recovery)',
|
||||
u'a00ee528-ebd9-48b8-944a-8942113d46ac': u'CLSID_StartMenuCommandingProviderFolder',
|
||||
u'a3c3d402-e56c-4033-95f7-4885e80b0111': u'Previous Versions Results Delegate Folder',
|
||||
u'a5a3563a-5755-4a6f-854e-afa3230b199f': u'Library Folder',
|
||||
u'a5e46e3a-8849-11d1-9d8c-00c04fc99d61': u'Microsoft Browser Architecture',
|
||||
u'a6482830-08eb-41e2-84c1-73920c2badb9': u'Removable Storage Devices',
|
||||
u'a8a91a66-3a7d-4424-8d24-04e180695c7a': u'Device Center (Devices and Printers)',
|
||||
u'aee2420f-d50e-405c-8784-363c582bf45a': u'Device Pairing Folder',
|
||||
u'afdb1f70-2a4c-11d2-9039-00c04f8eeb3e': u'Offline Files Folder',
|
||||
u'b155bdf8-02f0-451e-9a26-ae317cfd7779': u'Delegate folder that appears in Computer',
|
||||
u'b2952b16-0e07-4e5a-b993-58c52cb94cae': u'DB Folder',
|
||||
u'b4fb3f98-c1ea-428d-a78a-d1f5659cba93': u'Other Users Folder',
|
||||
u'b98a2bea-7d42-4558-8bd1-832f41bac6fd': u'Backup And Restore (Backup and Restore Center)',
|
||||
u'bb06c0e4-d293-4f75-8a90-cb05b6477eee': u'System',
|
||||
u'bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6': u'Action Center Control Panel',
|
||||
u'bc476f4c-d9d7-4100-8d4e-e043f6dec409': u'Microsoft Browser Architecture',
|
||||
u'bc48b32f-5910-47f5-8570-5074a8a5636a': u'Sync Results Delegate Folder',
|
||||
u'bd84b380-8ca2-1069-ab1d-08000948f534': u'Microsoft Windows Font Folder',
|
||||
u'bdeadf00-c265-11d0-bced-00a0c90ab50f': u'Web Folders',
|
||||
u'be122a0e-4503-11da-8bde-f66bad1e3f3a': u'Windows Anytime Upgrade',
|
||||
u'bf782cc9-5a52-4a17-806c-2a894ffeeac5': u'Language Settings',
|
||||
u'c291a080-b400-4e34-ae3f-3d2b9637d56c': u'UNCFATShellFolder Class',
|
||||
u'c2b136e2-d50e-405c-8784-363c582bf43e': u'Device Center Initialization',
|
||||
u'c555438b-3c23-4769-a71f-b6d3d9b6053a': u'Display',
|
||||
u'c57a6066-66a3-4d91-9eb9-41532179f0a5': u'Application Suggested Locations',
|
||||
u'c58c4893-3be0-4b45-abb5-a63e4b8c8651': u'Troubleshooting',
|
||||
u'cb1b7f8c-c50a-4176-b604-9e24dee8d4d1': u'Welcome Center (Getting Started)',
|
||||
u'd2035edf-75cb-4ef1-95a7-410d9ee17170': u'DLNA Content Directory Data Source',
|
||||
u'd20ea4e1-3957-11d2-a40b-0c5020524152': u'Fonts',
|
||||
u'd20ea4e1-3957-11d2-a40b-0c5020524153': u'Administrative Tools',
|
||||
u'd34a6ca6-62c2-4c34-8a7c-14709c1ad938': u'Common Places FS Folder',
|
||||
u'd426cfd0-87fc-4906-98d9-a23f5d515d61': u'Windows Search Service Outlook Express Protocol Handler',
|
||||
u'd4480a50-ba28-11d1-8e75-00c04fa31a86': u'Add Network Place',
|
||||
u'd450a8a1-9568-45c7-9c0e-b4f9fb4537bd': u'Installed Updates',
|
||||
u'd555645e-d4f8-4c29-a827-d93c859c4f2a': u'Ease of Access (Ease of Access Center)',
|
||||
u'd5b1944e-db4e-482e-b3f1-db05827f0978': u'Softex OmniPass Encrypted Folder',
|
||||
u'd6277990-4c6a-11cf-8d87-00aa0060f5bf': u'Scheduled Tasks',
|
||||
u'd8559eb9-20c0-410e-beda-7ed416aecc2a': u'Windows Defender',
|
||||
u'd9ef8727-cac2-4e60-809e-86f80a666c91': u'Secure Startup (BitLocker Drive Encryption)',
|
||||
u'daf95313-e44d-46af-be1b-cbacea2c3065': u'CLSID_StartMenuProviderFolder',
|
||||
u'dffacdc5-679f-4156-8947-c5c76bc0b67f': u'Delegate folder that appears in Users Files Folder',
|
||||
u'e17d4fc0-5564-11d1-83f2-00a0c90dc849': u'Search Results Folder',
|
||||
u'e211b736-43fd-11d1-9efb-0000f8757fcd': u'Scanners and Cameras',
|
||||
u'e345f35f-9397-435c-8f95-4e922c26259e': u'CLSID_StartMenuPathCompleteProviderFolder',
|
||||
u'e413d040-6788-4c22-957e-175d1c513a34': u'Sync Center Conflict Delegate Folder',
|
||||
u'e773f1af-3a65-4866-857d-846fc9c4598a': u'Shell Storage Folder Viewer',
|
||||
u'e7de9b1a-7533-4556-9484-b26fb486475e': u'Network Map',
|
||||
u'e7e4bc40-e76a-11ce-a9bb-00aa004ae837': u'Shell DocObject Viewer',
|
||||
u'e88dcce0-b7b3-11d1-a9f0-00aa0060fa31': u'Compressed Folder',
|
||||
u'e95a4861-d57a-4be1-ad0f-35267e261739': u'Windows SideShow',
|
||||
u'e9950154-c418-419e-a90a-20c5287ae24b': u'Sensors (Location and Other Sensors)',
|
||||
u'ed50fc29-b964-48a9-afb3-15ebb9b97f36': u'PrintHood delegate folder',
|
||||
u'ed7ba470-8e54-465e-825c-99712043e01c': u'All Tasks',
|
||||
u'ed834ed6-4b5a-4bfe-8f11-a626dcb6a921': u'Personalization Control Panel',
|
||||
u'edc978d6-4d53-4b2f-a265-5805674be568': u'Stream Backed Folder',
|
||||
u'f02c1a0d-be21-4350-88b0-7367fc96ef3c': u'Computers and Devices',
|
||||
u'f1390a9a-a3f4-4e5d-9c5f-98f3bd8d935c': u'Sync Setup Delegate Folder',
|
||||
u'f3f5824c-ad58-4728-af59-a1ebe3392799': u'Sticky Notes Namespace Extension for Windows Desktop Search',
|
||||
u'f5175861-2688-11d0-9c5e-00aa00a45957': u'Subscription Folder',
|
||||
u'f6b6e965-e9b2-444b-9286-10c9152edbc5': u'History Vault',
|
||||
u'f8c2ab3b-17bc-41da-9758-339d7dbf2d88': u'Previous Versions Results Folder',
|
||||
u'f90c627b-7280-45db-bc26-cce7bdd620a4': u'All Tasks',
|
||||
u'f942c606-0914-47ab-be56-1321b8035096': u'Storage Spaces',
|
||||
u'fb0c9c8a-6c50-11d1-9f1d-0000f8757fcd': u'Scanners & Cameras',
|
||||
u'fbf23b42-e3f0-101b-8488-00aa003e56f8': u'Internet Explorer',
|
||||
u'fe1290f0-cfbd-11cf-a330-00aa00c16e65': u'Directory',
|
||||
u'ff393560-c2a7-11cf-bff4-444553540000': u'History',
|
||||
}
|
||||
Reference in New Issue
Block a user