Hello everyone,
Have you ever wondered why microsoft does not documented Operation types with Unicode + meaning?
You don´t need to anymore.
I have made the needed research (anyone can do) and here are the results:
%%2458 = Read
%%2459 = Write
%%2457 = Delete
have found it 😄 it is non-sense string stored in system32/msobjs.dll and some snapshot can be seen there
https://gist.github.com/brianreitz/d5b9397a2e8b3d52ceb9359897e07c3f
%%2456 : Open key file.
%%2457 : Delete key file.
%%2458 : Read persisted key from file.
%%2459 : Write persisted key to file.
have found it 😄 it is non-sense string stored in system32/msobjs.dll and some snapshot can be seen there
https://gist.github.com/brianreitz/d5b9397a2e8b3d52ceb9359897e07c3f
%%2456 : Open key file.
%%2457 : Delete key file.
%%2458 : Read persisted key from file.
%%2459 : Write persisted key to file.
Thanks @mrthom.
Your version is absolutely precise 😉