Product: RegAlyzer

Browse and search the registry.

  1.  Description

    1. RegAlyzer is a tool to browse and change the registry. It was created because of a few features we missed in the original regedit tool, from support for exotic value types over background and regular expression search to better bookmarks, displaying .reg files in the accustomed style and a history view.

      Supported OS: WinXP, Win Server 2003, WinXP64, Vista, Win Server 2008, WinPE, Windows 7, Windows 8, Windows 8.1, Windows 10, Win Server 2012, Win Server 2016, Win Server 2019, Windows 11

      Highslide JS  
      Search for substrings
      Highslide JS  
      Snapshot overview
      Highslide JS  
      Search for wildcards
      Highslide JS  
      Bookmarks overview
      Highslide JS  
      Snapshot comparing

      Supported languages: Albanian, Byelorussian, Catalan, Chinese, Czech, Danish, English, German, Greek, Hungarian, Indonesian, Italian, Polish, Portuguese, Russian, Serbian, Spanish, Swedish

Version History

  1.  Download  Release  Version  Size   Hash 

    1. Download

      Version 2 was rewritten from ground, with a focus a new multi-tabbed interface and functionality required in everyday forensics use.


      Features:
      • * Multi-tabbed interface to browse parallel.
      • * Background search supporting different search algorithms, from wildcards to regular expressions.
      • * Hive manager to mount external registry and create snapshots.
      • * Compare value data to previous data stored in snapshots.
      • * Integrated documentation showing interpretation of often used registry values.
      • * Direct display of referenced string resources.
      • * Bookmarks in hierarchical structure showing direct preview of each bookmarks' content.

      • 2023-01-23
      • 2.0.2.22 rc4
      8.2 MB 
      • CRC32: 973C421D
      • MD5: E14F828487C6A987C51D04A0AEFC4780
      • SHA1: 8625A7FC01C146B814B7C4193B98C543EE3653F0
    2. Download

      The first public release candidate of RegAlyzer 2, written from scratch. Enjoy live bookmarks, integrated documentation, snapshots (with diffs), value interpretations and more.

      • 2021-08-04
      • 2.0 rc1
      16.9 MB 
      • CRC32: C9204918
      • MD5: D0C2D03A098FB75F14246F281095B594
      • SHA1: A53CE4BB75737419BCC9CC7A8D44D1997465DE39
    3. Download

      Fixes for the 0x00 thing during search.

      • 2009-04-20
      • 1.6.2.16
      1.7 MB 
      • CRC32: C4FC597A
      • MD5: CCC654117573A0FB7A1EE7FBB267D1DD
      • SHA1: F06A116D79E95200F2C3FE072A232FACEEBD9E04
    4. Download

      Skipping 0x00 named keys now.

      • 2009-04-15
      • 1.6.2.15
      1.7 MB 
      • CRC32: 84899423
      • MD5: 4F2183683D98E903F2C9B039CDDF44D6
      • SHA1: CE273FC44BABBA29D14E70745BA70D17D986762D
    5. Download

      Implemented new registry hive manager, added some custom rootkit entry detection and browsing.

      • 2009-04-07
      • 1.6.1.14
      1.7 MB 
      • CRC32: 8585F5E0
      • MD5: A6187686745AD1B5AB2C4D274F5EED41
      • SHA1: 562C53E312B8D369908AB6A6CCFB8423E09ED70F
      • 2008-07-14
      • 1.6.0.12
      1.5 MB 
      • CRC32: 0287A6A6
      • MD5: 5C08333223675A05B83E9F077309754E
      • SHA1: 1EFA7D8CA1B3A75FA251B6654F1F251A3AB566A8
      • 2008-06-03
      • 1.6.0.11
      1.3 MB 
      • CRC32: 514815F0
      • MD5: 264EC53647BCFD4CA4C23E6A6982B4C7
      • SHA1: 1F93DADA503212F2B1DD5356296AAABEA0F21F1B
      • 2008-04-27
      • 1.5.8.10
      1.3 MB 
      • CRC32: B5494E84
      • MD5: 0CB507FBDD11121C09501E35C59CE918
      • SHA1: 76ED2A6E46E57A7C3A7DA3119F760BEDE6CF1A13
      • 2007-12-27
      • 1.5.6.8
      1.1 MB 
      • CRC32: CB9DB9EF
      • MD5: 0F0D6296E3106F6C556E4CCA28E9BA76
      • SHA1: 706E3A5261E8414353497C99586D07B52BEAB58F
      • 2007-06-08
      • 1.5.5
      1.1 MB 
      • CRC32: 9E0B2F8D
      • MD5: 63C80EBD3E047A4A60E4D7A13CF2FAEF
      • SHA1: 4EB989E3AE739D1082A4168CA797957CCDA8D8F4
      • 2005-12-13
      • 1.4.0
      877.8 kB 
      • CRC32: 45D82E9C
      • MD5: 408FD77C2A47346D242DED3C3FC855EC
      • SHA1: 6B1D96140ECB44767FABB2C5687DF32D23E2C53A
      • 2005-08-05
      • 1.1.4
      863.4 kB 
      • CRC32: 17E6D056
      • MD5: DD1D52A7D059D15A1E93175E9F82FDC5
      • SHA1: A413069B9BE306B922936EA586752752494A34A0
      • 2005-08-03
      • 1.1.3
      854.3 kB 
      • CRC32: 3758FFFE
      • MD5: 699F1E7D1857CD90A072037B8521CB0D
      • SHA1: 702626119F484F17FBB50DBFBB3404D170D7E288
      • 2005-07-08
      • 1.1.2
      856.8 kB 
      • CRC32: 6C820700
      • MD5: 0C01B84BA8CA33FE1462D20B0F70A1BE
      • SHA1: EEA95A09F9B74AB6BC76812FA987951CEAD4C6BC
      • 2005-06-02
      • 1.1.1
      833.1 kB 
      • CRC32: D0809048
      • MD5: 7B61ACF7CC089CE69A3F3D72D45E99E0
      • SHA1: 4098C4ED3C0FE90ACC086770C8C49A43C18F8AF1