This post has been indexed in our web forum and will be seen by search engines so other users can find it outside Discord
Your user profile is private by default and won't be visible to users outside Discord, if you want to be visible in the web forum you can add the "Public Forum Profile" role in <id:customize>
You can mark a message as the answer for your post with
Right click -> Apps -> Mark Solution
Right click -> Apps -> Mark Solution
(if you don't see the option, try refreshing Discord with Ctrl + R)
You will see RegRipper has not only found the files but also information such as the times when they were written.
Repeat the search, clicking Find Next each time to see the many reports about recent docs. After about ten searches you will find a timeline for when these recent documents were written: all between March 23 and March 25 and many late in the evening of those days.
Scroll back to the top of the file and click on the first line. This time use cntrlf to find the work burn
Can you tell the user used a CD burning program on March 25? Let's see if we can find some recently downloaded files.
Go to the top of the file, click on the first line, and search for Download. You will see that one of the files downloaded by the user is Eraser 6.2.0.2962.exe. Eraser is a secure data removal tool for Windows! It appears our users was trying to hide his tracks. (Though not well enough to evade our forensics tools.)
Close Notepad
Move the two ntuser_reg_rip.txt files to the Recycle Bin.