Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

USBStore3 showing identical dates for Created and Last Accessed. #14

Open
GoogleCodeExporter opened this issue Oct 6, 2015 · 1 comment

Comments

@GoogleCodeExporter
Copy link
Contributor

USBStore3 sometimes will give identical dates for Created and Last Accessed for 
all USB storage devices.

What version of the product are you using?

RegRipper v2.8

On what operating system?

Windows 7 Home Premium 32-bit
Windows 7 Home Premium 64-bit
Windows 8 64-bit

The dates I saw from people who sent them to me where identical.  The Created 
and Last Accessed dates for all USB Storage devices where the same.  I was told 
that these devices were not plugged in the same day nor last access on the same 
days.  So, it was presumed these dates would be different for all except for 
any that had been used on the same day and even then, they should have had 
different created dates.





Original issue reported on code.google.com by [email protected] on 9 Oct 2014 at 5:16

@GoogleCodeExporter
Copy link
Contributor Author

I used the rip command line directly when I ran the usbsstore3 plugin option on 
the "system" registry hive that was stored on an external storage location.

The command used was:

rip.exe -r "[PATH TO FILE]\system" -p usbstor3

I replaced the [PATH TO FILE] with the actual path that "system" was located in.

Original comment by [email protected] on 9 Oct 2014 at 5:22

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant