VIEWING INSTALLED PROGRAMS

Forensic Workstation:
 username: Administrator
 password: ...
 
REGISTRY-EXPLORER> File > Load hive
 Select Hive: C:\Users\Administrator\Desktop\Registry Hives\SOFTWARE
  * Hold the "SHIFT" key when opening the file
  
REGISTRY-EXPLORER>
 Query: Uninstall
  ROOT\Microsoft\Windows\CurrentVersion\Uninstall
  Sort: By Timestamp
  
  Timestamp            Key Name                                      Display Name                   Display Version Publisher          Install Date
  2025-10-21 20:52:37  {3F2A8B47-9D5E-4C1A-B893-7E4F6D2A1C9B}_is 1   DroneManager Updater (64-bit)  1.2.0           TBFC Drone Systems 20251021
  
 * the "uninstall" key stores information regarding installed programs