In Figure 2, we see that the key has the decimal value: 132286223503288727 From here, we can use CyberChef to convert this value back to a legible date and time format. Figure 3. Windows Filetime conversion of KeyCreationTime registry key Subkey Overview The FeatureUsage registry key has fi...
i) The application is using AES Encryption, So Go to https://gchq.github.io/CyberChef/ for decrypting the data, you can use any other decoder as well. ii)When the application is using AES, first we have to decode the data with either base64 or hex. Then decrypt it with AES. So ...