DFIRHub

Windows registry artifact4K Video Downloader

Displays the run count for 4K Video Downloader

  • Third Party Applications
  • 5 keys
  • NTUSER

Registry keys

5 keys that RECmd reads for this artifact

  • NTUSERrunCount
    SOFTWARE\4kdownload.com\4K Video Downloader\Notification

    Displays the run count for 4K Video Downloader

  • NTUSERlastVersion
    SOFTWARE\4kdownload.com\4K Video Downloader\Notification

    Displays the last version of 4K Video Downloader installed on this system

  • NTUSERdayDownloadDate
    SOFTWARE\4kdownload.com\4K Video Downloader\Limits

    Displays the date that 4K Video Downloader was installed

  • NTUSERdayDownloadCount
    SOFTWARE\4kdownload.com\4K Video Downloader\Limits

    Displays the amount of times 4K Video Downloaded was downloaded

  • NTUSERdownloadedItemsDb
    SOFTWARE\4kdownload.com\4K Video Downloader\Download

    Displays the location of the SQLite database associated with 4K Video Downloader

References

1 link

Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)