Hi Richard,

Below is an export I did from the registry on a workstation. The "LastModified"=hex(b) Item is what appears as a REG_QWORD.

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{020bdcdf-b69c-4b3e-9e59-b1398714fdce}]

"LastModified"=hex(b):48,c6,fd,c1,a5,5c,c6,01

"Description"=""

"SaferFlags"=dword:00000000

"ItemData"="*.bat"