DFIRHub

Windows registry artifactSoulseek

Displays the name of the user who installed Soulseek

  • Third Party Applications
  • 2 keys
  • SOFTWARE

Registry keys

2 keys that RECmd reads for this artifact

  • SOFTWAREInno Setup: Userrecursive
    WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8A4E1646-488C-4E5B-AC31-F784400E8D2D}_is1

    Displays the name of the user who installed Soulseek

  • SOFTWAREInno Setup: Languagerecursive
    WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8A4E1646-488C-4E5B-AC31-F784400E8D2D}_is1

    Displays the language for which Soulseek was installed

References

1 link

Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)