|work| — Unidumptoreg V1.1b5

reg load HKLM\TempHive C:\forensics\reconstructed.hiv reg query HKLM\TempHive\ControlSet001\Services reg unload HKLM\TempHive

Ensure you have the raw memory dump generated from the security dongle. Launch the Tool: Open unidumptoreg_v1.1b5.exe . unidumptoreg v1.1b5