HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users
new registry key created
%APPDATA%\CamStudio.cfg
new file created
%APPDATA%\CamShapes.ini
new file created
%APPDATA%\CamLayout.ini
new file created
%APPDATA%\Camdata.ini
new file created
%APPDATA%\version2.xml
new file created
%USERPROFILE%\Documents\My CamStudio Temp Files
new catalogue created
%USERPROFILE%\Documents\My CamStudio Videos
new catalogue created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\1364\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\ColInfo
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\1364\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\Sort
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\1364\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupView
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\1364\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByKey:FMTID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\1364\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByKey:PID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\1364\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByDirection
new registry key parameter created
%USERPROFILE%\Videos\inoc.avi
new file created
%USERPROFILE%\Videos\inoc.avi
file moved
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\julia_000
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\julia_000\AppData
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\julia_000\AppData\Roaming
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\julia_000\AppData\Roaming\CamStudio.cfg
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\julia_000\AppData\Roaming\CamStudio.cfg\Recent File List
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\julia_000\AppData\Roaming\CamStudio.cfg\Settings
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\48\547C283B\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\48\547C283B\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
%USERPROFILE%\Documents\My CamStudio Temp Files\~temp-20210117_0149_40.avi
new file created
%USERPROFILE%\Documents\My CamStudio Temp Files\~temp-20210117_0149_40.wav
new file created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\2\\5
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\2\5
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\2\5\\NodeSlot
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\2\5\\MRUListEx
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\Shell
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\Shell\\SniffedFolderType
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\48\547C283B\\@C:\Program Files (x86)\Common Files\system\wab32res.dll,-10100
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\Mode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\LogicalViewMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\FFlags
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\IconSize
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\Sort
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\ColInfo
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupView
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByKey:FMTID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByKey:PID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\366\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByDirection
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\48\547C283B\\@C:\Windows\System32\SettingSyncCore.dll,-1024
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\Mode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\LogicalViewMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\FFlags
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\IconSize
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\Sort
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\ColInfo
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\GroupView
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\GroupByKey:FMTID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\GroupByKey:PID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\359\ComDlg\{5FA96407-7E77-483C-AC93-691D05850DE8}\\GroupByDirection
new registry key parameter created
%USERPROFILE%\Downloads\ds.avi
new file created
%USERPROFILE%\Downloads\ds.avi
file moved
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\Bushra Kasmani
new registry key created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\CamStudioOpenSource for Nick\C:\Users\Dell WM
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\Bushra Kasmani\AppData
new registry key created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\CamStudioOpenSource for Nick\C:\Users\Dell WM\AppData
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\Bushra Kasmani\AppData\Roaming
new registry key created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\CamStudioOpenSource for Nick\C:\Users\Dell WM\AppData\Roaming
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\Bushra Kasmani\AppData\Roaming\CamStudio.cfg
new registry key created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\CamStudioOpenSource for Nick\C:\Users\Dell WM\AppData\Roaming\CamStudio.cfg
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\Bushra Kasmani\AppData\Roaming\CamStudio.cfg\Recent File List
new registry key created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\CamStudioOpenSource for Nick\C:\Users\Dell WM\AppData\Roaming\CamStudio.cfg\Recent File List
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\Bushra Kasmani\AppData\Roaming\CamStudio.cfg\Settings
new registry key created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\CamStudioOpenSource for Nick\C:\Users\Dell WM\AppData\Roaming\CamStudio.cfg\Settings
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\16f\52C64B7E\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\23\96383CDB\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\16f\52C64B7E\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\23\96383CDB\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\\4
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\4
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\4\\NodeSlot
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\4\\MRUListEx
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\Shell
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\Shell\\SniffedFolderType
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\Mode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\LogicalViewMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\FFlags
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\IconSize
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\Sort
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\ColInfo
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\GroupView
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\GroupByKey:FMTID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\GroupByKey:PID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\311\ComDlg\{4F01EBC5-2385-41F2-A28E-2C5C91FB56E0}\\GroupByDirection
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\win 7
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\CamStudioOpenSource for Nick\C:\Users\win 7\AppData
new registry key created