Count time for windows 8

* v1.1.3.570 (15-08-2012) F IdentifyKey for Windows 8 is now fixed * v1.1.3.568 (15-08-2012) F Batch checking for system profile fixes F Batch checking report fixes - Removed XP x64 Pidgen files which caused problems on x86 systems + PidGenX from Windows 8 RTM F XP /Server 2003 profile is now "NT 5.x" * v1.1.3.560 (07-08-2012) F Fixed Edition Type bugs for Volume keys F Improved Volume Count function + Added full Windows 8 support (including long CryptoID) F Decreased application size + Added Office 15 placeholders * v1.1.3.545 (15-07-2012) F Fixed bugs in MAK Count checking and improved stability * v1.1.3.540 (13-07-2012) + Added ability to check MAK Volume Activation Count (beta) * v1.1.2.512 (08-07-2012) F Fixed graphics glitch on startup (finally) F Improved current system pkeyconfig checking F Improved automatic dashes putting (now it's working like Microsoft's one) F Rebuilt "About..." window * v1.1.1.315 (08-03-2012) + Extended Drag'n'Drop support + Added current system pkeyconfig checking (6.x) (beta) F Improved Description finding function to support Windows 8 Consumer Preview F Some disabling function fixes * v1.1.0.200 (05-11-2011) [New Milestone] + Ability to check one key for multiple profiles at time + Windows Vista SP0, SP1, SP2 and Windows 7 SP0, SP1 configs + PidgenX.dll from Windows 8 build 7989 - increases speed by 5% + IdentifyKey tab + Window can now be resized both vertically and horizontally + RAR compression of needed files (decreases application size) + Log function is back in standard mode + Try SP0 option (check key for SP0 if SP1/2 failed) + Windows XP support (beta) + Drag'n'Drop support F Several minor fixes * v1.0.4.1 (09-05-2011) - Vista SP2 and 7 SP1's pkeyconfigs * v1.0.4.0 (22-04-2011) + New Interface F Fixed Aero Glass bug on Vista * v1.0.3.33 (23-10-2010) + Increased speed * v1.0.3.32 (23-10-2010)

Highest execution time (µs): 0.0CPU 3 ISR total execution time (s): 0.0CPU 3 ISR count: 0CPU 3 DPC highest execution time (µs): 13.815450CPU 3 DPC total execution time (s): 0.000176CPU 3 DPC count: 79_CPU 4 Interrupt cycle time (s): 0.129739CPU 4 ISR highest execution time (µs): 0.0CPU 4 ISR total execution time (s): 0.0CPU 4 ISR count: 0CPU 4 DPC highest execution time (µs): 85.317163CPU 4 DPC total execution time (s): 0.003207CPU 4 DPC count: 999_CPU 5 Interrupt cycle time (s): 0.145226CPU 5 ISR highest execution time (µs): 0.0CPU 5 ISR total execution time (s): 0.0CPU 5 ISR count: 0CPU 5 DPC highest execution time (µs): 7.193251CPU 5 DPC total execution time (s): 0.000010CPU 5 DPC count: 5_CPU 6 Interrupt cycle time (s): 0.186712CPU 6 ISR highest execution time (µs): 0.0CPU 6 ISR total execution time (s): 0.0CPU 6 ISR count: 0CPU 6 DPC highest execution time (µs): 28.983390CPU 6 DPC total execution time (s): 0.000644CPU 6 DPC count: 184_CPU 7 Interrupt cycle time (s): 0.160430CPU 7 ISR highest execution time (µs): 0.0CPU 7 ISR total execution time (s): 0.0CPU 7 ISR count: 0CPU 7 DPC highest execution time (µs): 12.462958CPU 7 DPC total execution time (s): 0.000024CPU 7 DPC count: 3_CPU 8 Interrupt cycle time (s): 0.135660CPU 8 ISR highest execution time (µs): 0.0CPU 8 ISR total execution time (s): 0.0CPU 8 ISR count: 0CPU 8 DPC highest execution time (µs): 9.958344CPU 8 DPC total execution time (s): 0.000056CPU 8 DPC count: 20_CPU 9 Interrupt cycle time (s): 0.136264CPU 9 ISR highest execution time (µs): 0.0CPU 9 ISR total execution time (s): 0.0CPU 9 ISR count: 0CPU 9 DPC highest execution time (µs): 1.011864CPU 9 DPC total execution time (s): 0.000001CPU 9 DPC count: 1_CPU 10 Interrupt cycle time (s): 0.136794CPU 10 ISR highest execution time (µs): 0.0CPU 10 ISR total execution time (s): 0.0CPU 10 ISR count: 0CPU 10 DPC highest execution time (µs): 5.490113CPU 10 DPC total execution time (s): 0.000020CPU 10 DPC count: 9_CPU 11 Interrupt cycle time (s): 0.138879CPU 11 ISR highest execution time (µs): 0.0CPU 11 ISR total execution time (s): 0.0CPU 11 ISR

ISR highest execution time (µs): 149,760CPU 1 ISR total execution time (s): 0,026323CPU 1 ISR count: 9314CPU 1 DPC highest execution time (µs): 658,50CPU 1 DPC total execution time (s): 3,900503CPU 1 DPC count: 196298_________________________________________________________________________________________________________CPU 2 Interrupt cycle time (s): 18,623096CPU 2 ISR highest execution time (µs): 0,0CPU 2 ISR total execution time (s): 0,0CPU 2 ISR count: 0CPU 2 DPC highest execution time (µs): 685,330CPU 2 DPC total execution time (s): 3,583368CPU 2 DPC count: 194177_________________________________________________________________________________________________________CPU 3 Interrupt cycle time (s): 16,076653CPU 3 ISR highest execution time (µs): 0,0CPU 3 ISR total execution time (s): 0,0CPU 3 ISR count: 0CPU 3 DPC highest execution time (µs): 1284,490CPU 3 DPC total execution time (s): 2,505107CPU 3 DPC count: 112295_________________________________________________________________________________________________________CPU 4 Interrupt cycle time (s): 8,993893CPU 4 ISR highest execution time (µs): 0,0CPU 4 ISR total execution time (s): 0,0CPU 4 ISR count: 0CPU 4 DPC highest execution time (µs): 671,70CPU 4 DPC total execution time (s): 1,351669CPU 4 DPC count: 51863_________________________________________________________________________________________________________CPU 5 Interrupt cycle time (s): 8,956495CPU 5 ISR highest execution time (µs): 0,0CPU 5 ISR total execution time (s): 0,0CPU 5 ISR count: 0CPU 5 DPC highest execution time (µs): 688,440CPU 5 DPC total execution time (s): 0,995412CPU 5 DPC count: 37194_________________________________________________________________________________________________________CPU 6 Interrupt cycle time (s): 2,761732CPU 6 ISR highest execution time (µs): 0,0CPU 6 ISR total execution time (s): 0,0CPU 6 ISR count: 0CPU 6 DPC highest execution time (µs): 658,480CPU 6 DPC total execution time (s): 0,129247CPU 6 DPC count: 6395_________________________________________________________________________________________________________CPU 7 Interrupt cycle time (s): 2,865107CPU 7 ISR highest execution time (µs): 0,0CPU 7 ISR total execution time (s): 0,0CPU 7 ISR count: 0CPU 7 DPC highest execution time (µs): 648,330CPU 7 DPC total execution time (s): 0,144747CPU 7 DPC count: 6749_________________________________________________________________________________________________________CPU 8 Interrupt cycle time (s): 4,736440CPU 8 ISR highest execution time (µs): 0,0CPU 8 ISR total execution time (s): 0,0CPU 8 ISR count: 0CPU 8 DPC highest execution time (µs): 653,940CPU 8 DPC total execution time (s): 0,337154CPU 8 DPC count: 14685_________________________________________________________________________________________________________CPU 9 Interrupt cycle time (s): 4,868990CPU 9 ISR highest execution time (µs): 0,0CPU 9 ISR total execution time (s): 0,0CPU 9

Audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.Process with highest pagefault count: systemTotal number of hard pagefaults 88280Hard pagefault count of hardest hit process: 77007Number of processes hit: 47_________________________________________________________________________________________________________PER CPU DATA_________________________________________________________________________________________________________CPU 0 Interrupt cycle time (s): 728.095407CPU 0 ISR highest execution time (µs): 0.0CPU 0 ISR total execution time (s): 0.0CPU 0 ISR count: 0CPU 0 DPC highest execution time (µs): 6193.172676CPU 0 DPC total execution time (s): 263.453881CPU 0 DPC count: 21086201_________________________________________________________________________________________________________CPU 1 Interrupt cycle time (s): 170.513715CPU 1 ISR highest execution time (µs): 46.330529CPU 1 ISR total execution time (s): 0.310289CPU 1 ISR count: 124498CPU 1 DPC highest execution time (µs): 3536.126202CPU 1 DPC total execution time (s): 6.610519CPU 1 DPC count: 183527_________________________________________________________________________________________________________CPU 2 Interrupt cycle time (s): 150.490173CPU 2 ISR highest execution time (µs): 107.321715CPU 2 ISR total execution time (s): 0.055757CPU 2 ISR count: 30215CPU 2 DPC highest execution time (µs): 1132.481170CPU 2 DPC total execution time (s): 1.677818CPU 2 DPC count: 100583_________________________________________________________________________________________________________CPU 3 Interrupt cycle time (s): 133.158651CPU 3 ISR highest execution time (µs): 0.0CPU 3 ISR total execution time (s): 0.0CPU 3 ISR count: 0CPU 3 DPC highest execution time (µs): 3238.216747CPU 3 DPC total execution time (s): 5.743359CPU 3 DPC count: 479658_________________________________________________________________________________________________________CPU 4 Interrupt cycle time (s): 132.273115CPU 4 ISR highest execution time (µs): 0.0CPU 4 ISR total execution time (s): 0.0CPU 4 ISR count: 0CPU 4 DPC highest execution time (µs): 5430.643029CPU 4 DPC total execution time (s): 9.354585CPU 4 DPC count: 895777_________________________________________________________________________________________________________CPU 5 Interrupt cycle time (s): 76.032483CPU 5 ISR highest execution time (µs): 8.849760CPU 5 ISR total execution time (s): 0.001642CPU 5 ISR count: 910CPU 5 DPC highest execution time (µs): 3254.129808CPU 5 DPC total execution time (s): 0.307233CPU 5 DPC count: 38610_________________________________________________________________________________________________________CPU 6 Interrupt cycle time (s): 111.866329CPU 6 ISR highest execution time (µs): 32.376603CPU 6 ISR total execution time (s): 0.016622CPU 6 ISR count: 8578CPU 6 DPC highest execution time (µs): 4103.753205CPU 6 DPC total execution time (s): 0.854372CPU 6 DPC count: 86796_________________________________________________________________________________________________________CPU 7 Interrupt cycle time (s): 72.147503CPU 7 ISR highest execution time (µs): 0.0CPU 7 ISR total execution time (s): 0.0CPU 7 ISR count: 0CPU 7 DPC highest execution time (µs): 894.610176CPU 7 DPC total execution time (s): 0.330594CPU 7 DPC count: 43738_________________________________________________________________________________________________________CPU 8 Interrupt cycle time (s): 135.238182CPU 8 ISR highest execution time (µs): 0.0CPU 8 ISR total execution time (s): 0.0CPU 8 ISR count: 0CPU 8 DPC highest execution time (µs): 4182.576522CPU 8 DPC total execution time (s): 3.315693CPU 8 DPC count: 347122_________________________________________________________________________________________________________CPU 9 Interrupt cycle time (s): 76.461602CPU 9 ISR highest execution time (µs): 4.461538CPU 9 ISR total execution time (s): 0.000523CPU 9 ISR count: 275CPU 9 DPC highest execution time (µs): 423.243990CPU 9 DPC total execution time (s): 0.233191CPU 9 DPC count: 31756_________________________________________________________________________________________________________CPU 10 Interrupt cycle time (s): 121.576447CPU 10 ISR highest execution time (µs): 29.155048CPU 10 ISR total execution time (s): 0.005072CPU 10 ISR count: 2810CPU 10 DPC highest execution time (µs): 3550.459135CPU 10

By •January 10, 2019•Daily Blogforensic lunchtest kitchenuserassistwindows 10•Hello Reader, Tonight I changed the course of our testing in a slight detour, ok maybe a hard right, over to Windows 10 because I remembered an artifact that has been bugging me. The UserAssist artifact that has been a friend of mine since 2002 (I wrote about it in 2004 in the first hacking exposed computer forensics) seems to have had a change in behavior starting in Windows 8. Suddenly we had values showing up in the UserAssist with a run count of 0 and no last execution time. So to remedy this I decided to start some testing and here is what we learned:Running a Modern app will update the run count and the execution timeRunning a desktop app will update the run count and the execution timeThe focus count is still unreliableThe focus time is still unreliableRebooting does not zero out the values in the UserAssist keysSome entries in the UserAssist CEBFF guid specifically appear to not get updated as other versions of the same program do (process hacker in this example)Some things don't get updated run counts or execution times, so far Microsoft Edge and Cortana appear to behave that wayMore testing is needed so we can determine what is effecting the expected behavior.You can watch the video here:Also Read: Daily Blog #592

Execution time (s): 0.032226CPU 1 ISR count: 37908CPU 1 DPC highest execution time (µs): 222.348371CPU 1 DPC total execution time (s): 0.458691CPU 1 DPC count: 50947_________________________________________________________________________________________________________CPU 2 Interrupt cycle time (s): 19.304641CPU 2 ISR highest execution time (µs): 7.869987CPU 2 ISR total execution time (s): 0.000259CPU 2 ISR count: 56CPU 2 DPC highest execution time (µs): 862.345238CPU 2 DPC total execution time (s): 0.265859CPU 2 DPC count: 106007_________________________________________________________________________________________________________CPU 3 Interrupt cycle time (s): 18.677186CPU 3 ISR highest execution time (µs): 0.0CPU 3 ISR total execution time (s): 0.0CPU 3 ISR count: 0CPU 3 DPC highest execution time (µs): 122.466792CPU 3 DPC total execution time (s): 0.039309CPU 3 DPC count: 12470_________________________________________________________________________________________________________CPU 4 Interrupt cycle time (s): 20.906391CPU 4 ISR highest execution time (µs): 0.0CPU 4 ISR total execution time (s): 0.0CPU 4 ISR count: 0CPU 4 DPC highest execution time (µs): 113.392544CPU 4 DPC total execution time (s): 0.125545CPU 4 DPC count: 42754_________________________________________________________________________________________________________CPU 5 Interrupt cycle time (s): 19.890844CPU 5 ISR highest execution time (µs): 0.0CPU 5 ISR total execution time (s): 0.0CPU 5 ISR count: 0CPU 5 DPC highest execution time (µs): 135.539787CPU 5 DPC total execution time (s): 0.018233CPU 5 DPC count: 6557_________________________________________________________________________________________________________CPU 6 Interrupt cycle time (s): 18.547730CPU 6 ISR highest execution time (µs): 0.0CPU 6 ISR total execution time (s): 0.0CPU 6 ISR count: 0CPU 6 DPC highest execution time (µs): 121.812343CPU 6 DPC total execution time (s): 0.095702CPU 6 DPC count: 30614_________________________________________________________________________________________________________CPU 7 Interrupt cycle time (s): 17.734717CPU 7 ISR highest execution time (µs): 0.0CPU 7 ISR total execution time (s): 0.0CPU 7 ISR count: 0CPU 7 DPC highest execution time (µs): 71.576754CPU 7 DPC total execution time (s): 0.014786CPU 7 DPC count: 5182_________________________________________________________________________________________________________CPU 8 Interrupt cycle time (s): 19.268858CPU 8 ISR highest execution time (µs): 28.417293CPU 8 ISR total execution time (s): 0.009052CPU 8 ISR