Analysis
-
max time kernel
299s -
max time network
306s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
21-07-2021 22:56
Static task
static1
Behavioral task
behavioral1
Sample
OfficeSetup.exe
Resource
win10v20210410
General
-
Target
OfficeSetup.exe
-
Size
5.0MB
-
MD5
2cd6dc080a634beb490163f76199a013
-
SHA1
db4eb17b689ae7811c6e0b41bd73df83984682b3
-
SHA256
e6b5c8362f7ebcad6a5efef3772bfd4802ee6c34a617bbb8d2870b082fee3423
-
SHA512
fd94668806825515a1e90ebe8407791db4d45093e0f8bdb7d235d40f1056a729e7b6f0002fd01c842a97da4211d4b3acdfe280b59b1b4a5be68394826cfc39cf
Malware Config
Signatures
-
Executes dropped EXE 3 IoCs
Processes:
OfficeClickToRun.exeOfficeClickToRun.exeOfficeC2RClient.exepid process 3860 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 3292 OfficeC2RClient.exe -
Checks computer location settings 2 TTPs 3 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
OfficeSetup.exeOfficeClickToRun.exeOfficeC2RClient.exedescription ioc process Key value queried \REGISTRY\USER\S-1-5-21-3686645723-710336880-414668232-1000\Control Panel\International\Geo\Nation OfficeSetup.exe Key value queried \REGISTRY\USER\S-1-5-21-3686645723-710336880-414668232-1000\Control Panel\International\Geo\Nation OfficeClickToRun.exe Key value queried \REGISTRY\USER\S-1-5-21-3686645723-710336880-414668232-1000\Control Panel\International\Geo\Nation OfficeC2RClient.exe -
Loads dropped DLL 31 IoCs
Processes:
OfficeClickToRun.exeOfficeClickToRun.exeOfficeC2RClient.exepid process 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 3292 OfficeC2RClient.exe 3292 OfficeC2RClient.exe 3292 OfficeC2RClient.exe 3292 OfficeC2RClient.exe 3292 OfficeC2RClient.exe 3292 OfficeC2RClient.exe 3292 OfficeC2RClient.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory 5 IoCs
Processes:
OfficeClickToRun.exedescription ioc process File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db-wal OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db-shm OfficeClickToRun.exe File opened for modification C:\Windows\System32\CatRoot2\dberr.txt OfficeClickToRun.exe -
Drops file in Program Files directory 64 IoCs
Processes:
OfficeClickToRun.exeOfficeClickToRun.exedescription ioc process File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\PE00934_.WMF OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.14131.20332OfficeC2REEA4ACA3-D7D7-4496-9ECC-656CF5BBF7D7\msvcp140.dll OfficeClickToRun.exe File created C:\Program Files\Microsoft Office\root\vfs\programfilesx64\microsoft sql server\130\shared\PipelineWriteValidator OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\1033\PUBSPAPR\ZPDIR44B.GIF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.ReportingServices.DataExtensions.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0099203.GIF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\NA01361_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\CRANE.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\MondoR_SubTrial-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\ONMAINW32.DLL OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\BS00078_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0107512.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0227558.JPG OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\PH02470U.BMP OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\FORMS\1033\DISTLSTL.ICO OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Mso30win32client.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0186364.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0241041.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\OCIntlDate.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\OutlookAutoDiscover\SBCGLOBAL.NET.XML OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0099204.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0153087.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\Media\LYNC_untag.wav OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\TN00241_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\SY01006_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\vfs\Fonts\private\PARCHM.TTF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\ProjectProR_Trial-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\OFFICEJS_WORD.DLL OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\BD00116_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0239965.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\J0387882.JPG OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\1033\PUBSPAPR\PDIR10F.GIF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\Excel2021VL_KMS_Client_AE-ul.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\LivePersonaCardRollback\images\default\linkedin_ghost_school.png OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\Media\LYNC_howler.wav OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Templates\1033\Access\Part\Issues.accdt OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\HomeBusiness2021R_OEM_Perp2-pl.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\AG00092_.GIF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\CRANINST.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\SO00017_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\Media\LYNC_joinedconference.wav OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\O365HomePremR_SubTest1-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\1033\ClientSub_M365_eula.txt OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\1033\OUTLOOK.HOL OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\ONENOTEM.EXE OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\1033\PUBSPAPR\ZPDIR34F.GIF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\CONVERT\1033\OLJRNLR.FAE OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\Excel2021VL_MAK_AE-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\PUBWIZ\ENV98SP.POC OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll.bak OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\ProjectPro2021VL_MAK_AE2-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINCORE.DLL OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\AN04332_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\LogoImages\OneNoteLogo.contrast-white_scale-180.png OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\Publisher2021R_Retail1-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\vfs\System\msvcp140_atomic_wait.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\1033\ACCESS12.ACC OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\powerpnt.exe.manifest OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\vfs\Fonts\private\JOKERMAN.TTF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Office16\UCMAPI.EXE.MANIFEST OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\Licenses16\OneNoteR_Trial-pl.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\EC48F71B-F7B1-4A9F-B2C5-4CAEE8A3D18F\root\CLIPART\PUB60COR\AN03500_.WMF OfficeClickToRun.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Checks processor information in registry 2 TTPs 12 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes:
OfficeSetup.exeOfficeClickToRun.exeOfficeClickToRun.exeOfficeClickToRun.exedescription ioc process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeSetup.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeSetup.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeSetup.exe -
Enumerates system info in registry 2 TTPs 12 IoCs
Processes:
OfficeSetup.exeOfficeClickToRun.exeOfficeClickToRun.exeOfficeClickToRun.exedescription ioc process Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeSetup.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeSetup.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeSetup.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe -
Modifies data under HKEY_USERS 64 IoCs
Processes:
OfficeClickToRun.exedescription ioc process Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry\Volatile\MsaDevice = "t=GwAWAbuEBAAUPrSa9Xbh1D0J93uIPuLO4a+WXwAOZgAAENzEqjdgmQVleXMdnw6eTyXgAF3U109+JKjf6liU/mL28hK9Wesu9d9xPG/VYee+kD8hsSjY6fhkpblzkW1xPiHgvyD6Yu6MkyFGPGGZBJL2o8df7L8i2yEO9UyrVU88K7RnFOdTIWGFgNcP2PqK3k1+jqmvp7ExRlkWRoay5TnhKhnL1F97EpwfwjoIDNkgSfDguIjIYBkYWLtgfKCq5Cz3WSO5ja1tJtkDN5KjX8ibJdr6cTwpAABj9tvZMwgAkXjtuoyR4knSPg0dWk9vS+gBBYLKd9+TkbZ5cXjHKFraLW9vMj61NTM9bggXXE5aqrNHGwE=&p=" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\16\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|10" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1.13 = 2c205c22436d645361766546696c65436f7265325c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2246696c654f70656e5c22203a207b205c224576656e74735c22203a207b205c22446f634e6f7469667943616c6c6261636b5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22446f4e6f746966794d657267654469616c6f675c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22464e4d45696453657446726f6d5873747a46747970466e6d4469725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22436f417574686f72696e675c22203a207b205c224576656e74735c22203a207b205c2253686f77526573747269637465644d6163726f45646974696e674275734261725c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2246586c7255736572507265666572656e63655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f63735472616e736974696f6e5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22436f617574684d657267655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f6373446f776e6c6f6164526566557064617465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2244796e616d696353617665496e697469616c496e666f5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22466f726d735c22203a207b205c224576656e74735c22203a207b205c224c6561726e696e67546f6f6c73576b4f6e446f63756d656e744f70656e5c22203a207b205c224576656e74466c61675c22203a203439343038207d207d207d2c205c22446961676e6f737469635c22203a207b205c224576656e74735c22203a207b205c22566563416c6c6f634661696c7572655c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d2c205c224544505c22203a207b205c224576656e74735c22203a207b205c22446f63756d656e744964656e746974794368616e67655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2250726f6f66696e675c22203a207b205c224576656e74735c22203a207b205c2250726f6f66696e674e6f50726f6f66526567696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225453706c4c6f61644c6962726172795c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436c6f75645370656c6c6572436865636b5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224e6f50726f6f6652756e4469666665727346726f6d5061726150726f705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436c617373696669636174696f6e4372697469717565526573706f6e7365506572664d61704578636565645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224772616d6d6172436865636b657243616c6c5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22536176655c22203a207b205c224576656e74735c22203a207b205c22436d64446f53617665446f63436f7265436f6d6d616e64416374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436d64446f53617665446f63436f7265416374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22464d617953746172745472616e73616374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224669726553746174654f664175746f536176654f6e436c6f73655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22456964456e737572654f70656e466f72536176655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2242475361766546616c6c6261636b546f46475c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22576f72645c22203a207b205c225375624e616d657370616365735c22203a207b205c22426f6f745c22203a207b205c225375624e616d657370616365735c22203a207b205c2254696d696e675c22203a207b205c224576656e74735c22203a207b205c22446174615c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d2c205c22426f6f745c22203a207b205c224576656e74735c22203a207b205c22416464696e4d6f6e69746f7256616c6964617465426f6f745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22416464696e44697361626c65644469616c6f675c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22576f72644d61696c5c22203a207b205c224576656e74735c22203a207b205c2248724c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872536176655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22446f6354696c696e675c22203a207b205c224576656e74735c22203a207b205c2254696c696e6749646c6542756e646c654576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2254696c696e6749646c655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2254696c696e6749646c654865617274626561745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2254696c696e6749646c654669726542756e646c65644576656e74735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225465787454696c65446f63756d656e7456696577476574456e756d657261746f724576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225465787454696c65446f63756d656e7456696577446973636f6e6e6563745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225465787454696c65446f63756d656e745669657753696e6b52656769737465725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225465787454696c65446f63756d656e745669657753696e6b556e72656769737465725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2254687265655761794d657267655c22203a207b205c224576656e74735c22203a207b205c22435254435265766572745265706c61794b706f7353636f70654475726174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e456e61626c654c6f63616c697a6174696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e526573656172636865722e4e6f64654a5357656250616765457874726163746f72222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e536861726564536572706c6574466561747572654761746534222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e446f63756d656e74446973706c617953686f727450617468456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e48656c7050726f7669646572456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e4c6f63616c446f63756d656e74526573756c747350726f7669646572456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e506172616d657465725465726d50726564696374696f6e456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e536861726564446f63756d656e74456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e53686f756c6453686f7748656c70416374696f6e73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e34383831323634222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e41646a7573744469616c6f67506f736974696f6e456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4174626f78506172614f7074696f6e73456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e46697833383934383832222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e47616c6c6572794b6579626f6172644e6176557064617465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e47616c6c6572794e6f546162436f6d6d6974222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4c6f6767696e674f6e41646a7573744469616c6f67506f736974696f6e456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4d6f6465726e4d657373616765426f78222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e524e44697361626c65416e6e6f756e6365466f724163636573736962696c697479546167222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e526561637446696c746572506f696e7465724576656e7473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e557365416c7068614368616e6e656c466f72466f726567726f756e64222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e55736553757065727469704f6e54657874626f78222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e574c544246697848797065726c696e6b5768656e496d61676573222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e57686174734e65772e454353446174614c6f61646564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d3130304b42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d3130304d42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d31304d42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d314742416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d314d42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d3530304b42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d3530304d42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d35304d42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d354d42416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4275666665724f6f6d5265616c6c79426967416374696f6e222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e436f6c6c656374506f61706d4368616e6765537461636b44656332303139222c20225622203a2022626f6f6c7c3122207d205d2c2022464347726f75704d617022203a207b2022464347726f75704d61705f3122203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4d6f6465726e436f6d6d656e74732e4163636573736962696c697479416e6e6f746174696f6e546172676574222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4d6f6465726e436f6d6d656e74732e4163636573736962696c6974794465736372697074696f6e222c20225622203a2022626f6f6c7c3122207d205d2c2022464347726f75704d61705f3222203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c65576f726b696e67436f707943616d446973636172644368616e676573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c65576f726b696e67436f707943616d53617665222c20225622203a2022626f6f6c7c3122207d205d2c2022464347726f75704d61705f3322203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e54657874486967686c696768745374617465537570706f7274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e436f6d6d656e74732e4372656174654e657754657874416e63686f726564436f6d6d656e7473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e436f6d6d656e74732e43726561746554657874416e63686f72696e67496e666f466f72536d617274417274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e436f6d6d656e74732e48616e646c6554657874416e63686f72436c69636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e436f6d6d656e74732e54657874416e63686f72696e67486967686c696768745549222c20225622203a2022626f6f6c7c3122207d205d2c2022464347726f75704d61705f3422203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e456e61626c6550726f6d6f74655369676e496e4578706572696d656e74222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e50726f6d6f74655369676e496e4578706572696d656e7454726561746d656e74222c20225622203a2022696e7433325f747c3222207d205d2c2022464347726f75704d61705f3522203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e456e61626c6543616e63656c61626c6553657276696365526571756573745265676973747279222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e456e61626c6555736572466163747350726f7669646572222c20225622203a2022626f6f6c7c3122207d205d2c2022464347726f75704d61705f3622203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4272617a696c69616e456e7447656e64657242696173222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4272617a696c69616e456e7452616369616c42696173222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4272617a696c69616e456e74536f6369616c42696173222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4672656e6368526573756d6547726f75703130222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4672656e6368526573756d6547726f757032222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4672656e6368526573756d6547726f757033222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4672656e6368526573756d6547726f75703422 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople OfficeClickToRun.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\MICROSOFT\OFFICE\16.0\COMMON\CLIENTTELEMETRY\RULESMETADATA\OFFICECLICKTORUN.EXE\ULSMONITOR OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1.6 = 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 OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\ApplicationFlags = "1" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|8" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigIds = "std::wstring|P-R-76757-1-2,P-R-54903-1-3,P-R-26146-7-15,P-D-29635-1-1,P-D-27087-1-9,P-R-79688-1-3,P-X-76549-2-3,P-R-66908-18-16,P-R-67503-18-20,aimic582cf:105706,P-X-79775-1-7,apexp148:113214,P-R-68936-1-3,P-R-58640-1-3,P-R-35099-2-4,P-X-50506-1-3,P-R-51246-18-22,P-R-46974-18-18,P-R-34843-4-4,chpre575:67433,P-X-80678-1-5,P-X-76393-1-7,P-X-87237-1-3,P-X-78773-2-3,P-X-70135-1-5,P-R-87587-4-4,P-R-75069-1-3,P-R-75001-1-3,P-R-53005-22-21,P-R-68152-18-21,P-R-45483-16-49,P-R-52316-C17-37,P-R-49162-18-13,P-R-49161-18-13,P-R-48550-2-2,P-R-40646-19-54,P-R-40253-6-19,P-R-40254-6-18,P-R-38974-6-21,P-R-35412-4-3,P-R-35401-6-7,P-R-35086-2-3,P-R-34777-4-4,P-R-32107-22-22,P-R-32704-1-4,P-R-26006-3-5,clrep308:103534,cladd357:82425,cldon215:104761,expappvcabtrueflightcf:111462,c2rrestreamfilesinstreampipeline:74107,P-R-66715-18-10,P-R-28546-6-10,P-R-24980-8-48,P-R-24390-5-10,P-R-19046-2-19,P-R-18279-2-65,P-R-56232-18-19,P-R-55934-18-8,P-R-52982-18-34,P-R-51145-2-7,P-X-74418-1-3,P-X-71449-1-3,P-X-66590-1-5,P-R-79616-1-3,P-R-77621-1-3,P-R-77204-1-3,P-R-76107-1-3,P-R-74334-1-3,P-R-74439-1-3,P-R-73642-1-3,P-R-69812-1-3,P-R-68938-1-4,P-R-62875-2-4,P-R-60579-2-2,P-R-60333-1-3,P-R-58107-2-2,P-R-56751-18-12,P-R-55743-1-3,P-R-52789-18-21,P-R-51958-1-5,P-R-48148-18-18,P-R-38085-12-9,domod387:70149,domod898:60719,enableactronodc:48605,P-X-87535-1-3,P-X-75669-1-3,P-X-69527-1-3,P-E-28677-2-3,P-R-55122-8-8,P-R-50255-10-9,P-R-45314-10-16,P-R-44965-2-5,powerqueryavoidoverridefillsessionmashupresource:110099,exocs695:94447,exlea890:75122,P-E-38231-C1-4,P-R-81499-12-41,P-R-61147-18-2,P-R-54728-16-23,P-R-54698-16-16,P-R-54658-18-19,P-R-46373-6-10,P-R-38306-18-3,P-R-34019-4-3,P-R-35109-4-3,P-X-80537-1-11,P-X-72602-3-13,P-X-69189-1-7,P-X-66537-1-7,P-X-63134-1-7,P-X-86265-1-3,P-X-84464-2-5,P-X-81043-2-3,P-X-78402-1-3,P-X-72950-1-3,P-X-67585-1-3,P-X-66364-1-5,P-X-62261-1-3,P-X-58678-1-5,P-X-58493-1-9,P-X-56274-1-9,P-X-56154-1-5,P-X-56147-1-5,P-X-55832-1-6,P-X-54358-1-7,P-X-54212-1-5,P-X-53975-3-9,P-X-53845-1-9,P-X-52591-1-9,P-X-51262-1-9,P-E-42700-C1-4,P-R-89832-8-4,P-R-87559-8-4,P-R-82742-1-4,P-R-78562-1-4,P-R-78293-1-3,P-R-74806-5-15,P-R-74441-1-3,P-R-72712-1-3,P-R-69779-1-3,P-R-69065-1-3,P-R-62464-18-9,P-R-59808-26-29,P-R-59193-1-3,P-R-48699-C17-18,P-R-48047-18-29,P-R-46746-18-22,P-R-45609-14-6,P-R-45197-2-6,P-R-40980-18-16,P-R-39029-5-18,P-R-38162-58-62,P-R-36310-4-4,P-R-35945-10-4,P-R-29809-1-6,P-R-26968-3-9,ficlp360:110401,16mbfragment:115145,fiena903:65944,fienf552:69426,ficac841:49664,561eg364:112486,fiomi293cf:114405,fimoc497cf:108783,fisha109:104700,fihalwaysinitcache:115163,fisyn285:63948,fiena631:91186,fiena340:60251,fiena415:38780,fileiosharingsuggestion:69876,fidav265:55035,fiena276:41004,remotemovedevice:42500,fiena490:34181,fiena947:30635,fiena381:49997,fista407:61027,fiser190:49498,fimoc589:28979,firef346:34525,P-R-53545-4-5,P-R-49736-6-22,P-R-32106-7-28,P-R-30085-1-9,P-R-25009-1-6,P-R-24363-1-8,P-R-19898-1-20,P-R-19814-1-62,P-R-19012-1-56,P-R-33555-1-5,P-X-83388-1-3,P-X-79079-1-3,P-X-77742-1-3,P-X-75876-1-5,P-X-75210-1-3,P-X-75198-1-5,P-X-65301-1-3,P-X-59793-1-5,P-X-59792-1-5,P-X-50220-1-3,P-X-49730-1-3,P-X-47943-1-3,P-X-47754-1-3,P-R-85262-4-5,P-R-77265-1-3,P-R-76547-1-6,P-R-69349-1-5,P-R-69347-1-4,P-R-68723-1-4,P-R-65312-18-11,P-R-64841-22-15,P-R-64983-2-3,P-R-63587-18-20,P-R-63100-28-10,P-R-62183-18-21,P-R-55589-6-3,P-R-52529-18-15,P-R-41836-42-18,P-R-40990-12-15,P-R-32744-14-13,P-R-32741-32-16,P-D-34269-2-4,graut130:111576,grisw569:112168,grdel347:112468,grrem245:111953,gralt888:111717,gralt817:111716,grsvg156:58147,grisa112:50610,grish568:50609,gruse488:19772,grico406:19777,grico406:19777,gruse488:19772,P-X-69692-2-11,P-X-69688-2-3,ofhfbs355oyp4d31:59558,ofhfbs355oyp4d31:59558,P-R-50429-18-8,P-R-63710-18-11,P-R-66897-18-20,P-R-65295-18-23,P-R-59944-24-18,P-R-54640-34-21,P-R-53421-28-14,P-R-50764-18-13,P-R-40475-28-28,P-R-32004-2-5,P-R-66422-18-21,P-R-61248-18-6,P-R-60117-18-52,P-R-51995-18-28,P-X-72042-5-20,P-X-87562-2-3,P-X-79907-2-5,P-X-77394-2-5,P-X-75959-1-5,P-R-81288-1-3,P-R-79963-1-2,P-R-65186-1-4,P-R-60816-10-19,P-R-51764-1-4,P-R-42392-2-4,P-R-39073-1-5,useasviewertreatment:87580,f4eb1467:105522,49j5f427:85311,bha5f878:98779,3ic9f496:89277,P-R-38410-18-22,P-X-76796-2-3,P-X-70418-1-3,P-X-51759-1-3,P-R-86288-4-5,P-R-86110-8-8,P-R-66436-1-3,P-R-65296-1-3,P-R-65199-18-31,P-R-59534-1-3,P-R-54557-1-3,P-R-51751-18-21,P-R-36649-8-8,oesam997cf:88812,oesha722:108398,oemac358:20502,P-R-71360-18-19,P-X-76555-1-3,P-R-65278-1-3,P-R-65279-1-3,onmap366:81740,P-R-44803-8-15,P-R-38510-2-9,P-R-32186-32-29,P-R-82473-1-4,P-R-56618-1-3,P-R-62574-18-10,P-R-61718-18-3,P-R-55661-18-11,P-R-33892-1-5,P-R-33696-1-5,P-X-60583-3-7,P-R-68433-1-3,P-R-64769-14-16,P-R-56230-1-3,P-R-39912-1-2,podoc563:44757,P-R-50380-18-18,P-X-81132-1-5,P-X-73315-1-9,P-X-78444-1-3,P-R-84963-8-5,P-R-83076-18-17,P-R-73521-1-3,P-R-67898-18-49,P-R-68150-18-14,P-R-66024-18-29,P-R-64595-1-4,P-R-63338-18-11,P-R-58251-18-11,P-R-33737-1-4,seclp948:105472,seclp879:86520,seclp723:90375,P-X-74273-1-11,P-X-83008-1-5,P-X-75056-1-7,P-X-75174-1-7,P-X-75171-1-7,P-X-75064-1-7,P-X-75173-1-7,P-X-75170-1-7,P-X-75169-1-7,P-X-75168-1-7,P-X-78966-1-7,P-X-78965-1-7,P-X-74239-1-11,P-X-74236-1-11,P-X-74234-1-9,P-X-74274-1-9,P-X-74241-1-9,P-X-74248-1-9,P-X-74244-1-9,P-X-74404-1-5,P-X-74405-1-5,P-X-74238-1-11,P-X-74403-1-7,P-X-74237-1-11,P-X-74276-1-9,P-X-74247-1-11,P-X-74400-1-7,P-X-74145-1-9,P-X-74144-1-9,P-X-74141-1-9,P-X-74143-1-9,P-X-74150-1-9,P-X-74147-1-9,P-X-74132-1-9,P-X-74131-1-9,P-X-74240-1-9,P-X-74271-1-9,P-X-74133-1-9,P-X-74140-1-9,P-X-74265-1-9,P-X-74262-1-9,P-X-74138-1-9,P-X-74134-1-9,P-X-74156-1-9,P-X-74126-1-9,P-X-74157-1-9,P-X-74125-1-9,P-X-74243-1-9,P-X-74401-1-7,P-X-74120-1-9,P-X-74269-1-9,P-X-78545-1-3,P-X-74847-1-5,P-X-74846-1-5,P-X-73718-1-3,P-E-29662-2-3,P-R-89029-4-7,P-R-84075-4-9,P-R-74526-1-3,P-R-68571-2-6,P-R-67807-2-5,P-R-67808-2-5,P-R-67806-2-5,P-R-67809-2-6,P-R-67804-2-5,P-R-67803-2-5,P-R-67797-2-7,P-R-63947-18-2,P-R-58750-2-7,P-R-58748-2-7,P-R-58749-4-6,P-R-55426-2-6,P-R-52027-2-6,P-R-52026-2-6,P-R-52021-2-8,P-R-50391-2-6,P-R-50384-2-5,P-R-49963-2-7,P-R-49953-2-7,P-R-49952-2-7,P-R-49948-2-8,P-R-49947-2-7,P-R-49203-2-8,P-R-48897-2-5,P-R-48635-2-6,P-R-48432-2-5,P-R-48183-2-7,P-R-47752-2-9,P-R-47532-2-5,P-R-47531-2-8,P-R-47242-18-11,P-R-45964-1-6,P-R-44991-18-9,P-R-45550-18-46,P-R-44735-2-6,P-R-44096-2-7,P-R-42512-1-2,P-R-42555-2-3,P-R-42505-2-9,P-R-42255-3-10,P-R-42254-3-10,P-R-41549-18-20,P-R-40868-2-8,P-R-40443-2-8,P-R-40169-8-11,P-R-39701-2-7,P-R-39584-2-7,P-R-39568-1-4,P-R-39468-2-8,P-R-39463-2-8,P-R-33179-4-10,P-R-36664-4-3,P-R-35801-4-6,P-R-35407-4-3,P-R-33128-2-8,P-R-33127-3-13,P-R-30292-4-5,P-R-30283-4-10,P-R-28976-2-11,P-R-29282-2-15,P-R-29230-2-10,P-R-29278-2-8,P-R-29277-2-7,P-R-29381-2-9,P-R-29056-2-8,P-R-29055-2-9,P-R-29232-2-12,P-R-29027-6-13,P-R-28988-8-14,P-R-28644-1-4,P-R-24037-1-6,P-R-23445-3-6,P-R-23434-3-7,P-R-23403-3-6,P-R-18513-1-30,P-D-34260-1-5,P-D-34258-2-5,P-D-32465-1-5,shgra564:97991,shgra511:102799,shgra771:87072,shgra748:87074,shgra203:87070,shgra636:87075,shgra225:87076,shgra512:87071,shgra476:87078,shgra103:87077,shgra100:99396,shgra171:99397,shgra967:78670,shgra960:78672,shgra747:86677,shgra648:78690,shgra271:78678,shgra104:78684,shgra462:78703,shgra470:78700,shgra591:78699,shgra787:78671,shgra739:78674,shgra835:78673,shgra586:78687,shgra772:87471,shgra863:78715,shgra524:78693,shgra985:78694,shgra422:78695,shgra568:78696,shgra236:78701,shgra366:78702,shgra339:78688,shgra500:78683,shgra679:78682,shgra596:78675,shgra125:78708,shgra328:78709,shgra577:78710,shgra226:78711,shgra233:78712,shgra120:78686,shgra782:78679,shgra677:78704,shgra352:78685,shgra924:78705,shgra246:78713,shgra401:78689,shgra670:78692,shgra463:77500,shaut596:92107,shgra545:87073,shgra668:94435,shicr317:94521,P-R-85176-4-6,P-R-86521-8-5,P-R-65011-1-3,P-R-50541-2-7,P-R-36932-2-11,P-X-71568-1-5,P-R-69232-38-12,P-R-23681-2-7,P-D-32502-2-3,P-D-32501-2-3,P-D-32415-2-3,taena576:90265,P-X-83304-1-3,P-X-71671-1-5,P-R-64513-18-10,P-R-51916-84-31,teuae310:114066,uaecallstack:84401,P-R-88309-2-4,P-R-87451-1-3,P-R-86118-1-3,P-R-85960-2-4,P-R-80517-3-5,P-R-79793-1-3,P-R-79633-1-3,P-R-79238-4-6,P-R-78852-3-5,P-R-78112-1-3,P-R-77290-1-3,P-R-76955-2-4,P-R-76918-1-3,P-R-76721-1-3,P-R-76544-6-8,P-R-76253-1-3,P-R-75440-2-4,P-R-75436-1-3,P-R-75434-1-3,P-R-75433-1-3,P-R-72449-3-6,P-R-46041-4-8,P-R-46062-4-8,P-R-46066-4-8,P-R-46058-4-8,P-R-46055-3-7,P-R-46065-4-8,P-R-46067-4-8,P-R-46064-4-8,P-R-46054-4-8,P-R-23746-23-29,P-R-49656-5-9,P-R-71346-1-3,P-R-49435-9-21,P-R-56209-5-11,P-R-68864-2-4,P-R-68069-2-4,P-R-67544-2-5,P-R-66975-1-3,P-R-66757-5-7,P-R-66140-3-5,P-R-65567-1-3,P-R-60602-1-3,P-R-53309-1-3,P-R-52633-1-3,P-R-52171-2-4,P-R-51921-8-10,P-R-51258-5-7,P-R-50752-2-4,P-R-50681-2-4,P-R-50599-3-5,P-R-50596-2-4,P-R-50553-1-3,P-R-49597-3-5,P-R-49458-2-4,P-R-48530-4-6,P-R-47948-1-4,P-R-47564-4-6,P-R-46580-3-5,P-R-46484-9-11,P-R-46122-1-3,P-R-45858-2-4,P-R-43966-2-4,P-R-43502-18-20,P-R-38248-13-17,P-R-41430-1-3,P-R-40751-8-10,P-R-40273-4-6,P-R-39238-2-4,P-R-38682-3-5,P-R-37588-2-4,P-R-34355-5-7,P-R-26266-4-9,P-R-26834-3-8,P-R-24662-15-21,P-R-27479-6-11,P-R-26056-7-15,P-R-27006-7-12,P-R-30338-2-6,P-R-30178-51-53,P-R-30053-7-9,P-R-27458-1-5,P-R-25822-9-12,P-R-25653-3-6,P-R-25083-6-9,P-R-24690-28-32,P-R-24689-2-5,P-R-24666-2-5,P-R-24663-6-11,P-R-24659-7-10,P-R-23744-7-9,P-R-23739-7-9,P-R-23736-13-16,P-R-23734-7-9,P-R-23730-16-19,P-R-23723-8-10,P-R-23714-9-11,P-D-32588-1-3,P-D-32534-1-3,P-D-32524-1-3,P-D-32518-1-3,P-D-32512-1-3,P-D-32509-1-3,P-D-32486-1-3,P-D-32485-1-4,P-D-32484-1-4,P-D-32405-1-3,P-X-71999-3-11,P-R-58921-22-25,P-R-47601-18-13,P-R-46202-18-11,P-R-33916-1-5,P-R-33580-8-9,ucsha660:76558,P-X-82382-1-3,P-X-79922-1-5,P-R-89565-4-4,P-R-85919-4-4,P-R-77634-1-4,P-R-77121-1-3,P-R-68086-2-3,P-R-61426-18-6,P-R-60205-18-6,P-R-59426-1-3,P-R-58123-18-6,ux488646:95333,reactfilterpointerevents:105513,P-R-19262-1-12,P-X-77184-1-3,P-E-44774-2-8,wocol936:80031,P-R-81720-1-2,P-R-58406-1-5,P-D-50697-2-4,P-D-29719-1-1,P-D-29718-1-1,P-D-29593-1-4" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|2" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property\0018C00305CAF1A9 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ExternalFeatureOverrides\officeclicktorun OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "2" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ETag = "std::wstring|\"yPqFrp5yXgffG+LDja+ehI2r2REQFeYvKvW3NWfGF14=\"" OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun OfficeClickToRun.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1 = 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 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|4" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\Expires = "int64_t|1626951244" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry\Volatile OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSTagIds0 = "5804129,17110992,7202269,41484365,17110988,7153487,39965824,17962391,17962392,3462423,3702920,3700754,3965062,4297094,7153421,18716193,7153435,7202265,20502174,6308191,18407617" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Experiment\officeclicktorun\BuildNumber = "16.0.14131" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1.9 = 207b205c22436f617574685c22203a207b205c224576656e74735c22203a207b205c22457865637574654d65726765496e7374616e63655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224b69636b4f6666517569636b536176655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22586c53796e6353746174654368616e67654c697374656e65724f6e53796e6353746174654368616e67655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f63734765744f70496e7465726e616c5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436c6f7365576f726b626f6f6b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224261636b67726f756e6451756575655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f637350756c6c4f704f6e4765745265766973696f6e436f6d706c657465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f637350756c6c4f704f6e4765745265766973696f6e526573706f6e736552656365697665645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f637350756c6c4f70464275696c644765745265766973696f6e526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f637350756c6c4f704f6e436f6d706c657465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436865636b5061636b61676546696c6553746172745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436865636b5061636b61676546696c6553746f705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436865636b456e637279707465644d6574726f46696c6553746172745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436865636b456e637279707465644d6574726f46696c6553746f705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22536b697070656443686743656c6c5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243717532674872446f456e74657243656c6c466d6c61584c5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22436f6d6d616e645c22203a207b205c224576656e74735c22203a207b205c2252656672657368416c6c5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22526566457874446174615c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d2c205c2246696c65536176655c22203a207b205c224576656e74735c22203a207b205c225361766541735361766546696c655c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d2c205c2243616c635c22203a207b205c224576656e74735c22203a207b205c224669784d616e75616c43616c634f6e4c6f61645c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4578706572696d656e746174696f6e222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c224564676546657463685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6f6164696e67466972737453657373696f6e43616368655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e457874656e736962696c697479222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c22436174616c6f675c22203a207b205c224576656e74735c22203a207b205c2245786368616e67654765744c6173745570646174655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22547279446973636f76657245777355726c735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2254727948616e646c6541757468656e7469636174696f6e526573756c745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2245786368616e6765476574456e7469746c656d656e74735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2245786368616e67654765744d616e6966657374735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2245786368616e676552656672657368457874656e73696f6e4c6973745c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2253616e64626f785c22203a207b205c224576656e74735c22203a207b205c224372656174654f7366436f6e74726f6c56325c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2244656c6574654f7366436f6e74726f6c5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253616e64626f784372656174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f445053686f775461736b70616e65436f6e74726f6c5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243726561746552656d6f7465725c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22446f776e6c6f61644d616e69666573745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2252656c6f6164416c6c4f7366436f6e74726f6c735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225265737461727452656d6f7465725c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225265737461727453616e64626f7865735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253746172744f7366436f6e74726f6c5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c22417070436f6d6d616e64735c22203a207b205c224576656e74735c22203a207b205c224f4450417070436f6d6d616e6473526962626f6e436c69636b56325c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22417070436d6450726f6a656374696f6e5374617475735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224361636865446573657269616c697a6546726f6d53747265616d5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22436163686553657269616c697a65546f53747265616d5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224361636865536f6c7574696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22457773526566726573685c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2245786563757465416374696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2246616c6c6261636b546f46697273744c6976654964496e4f454d5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2246616c6c6261636b546f46697273744c6976654964496e526962626f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2246657463684361636865536f6c7574696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22496e7374616c6c4d616e696665737452656164795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224c6f61644d696e43616368655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224d69734d61746368696e67526962626f6e4964656e74697479496e666f5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225072657061726553686f775461736b70616e6556325c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2252656d6f766546726f6d526962626f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253686f775465616368696e6743616c6c6f75745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225461736b70616e65417070436d64496e7374616c6c6174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c22496e7374616c6c65725c22203a207b205c224576656e74735c22203a207b205c225061636b61676541707078457874726163746f725461736b5061636b616765496e666f726d6174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d207d2c205c225375624e616d657370616365735c22203a207b205c224d61696e5c22203a207b205c224576656e74735c22203a207b205c2243496e7374616c6c65724d61696e5368656c6c53687574646f776e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2243496e7374616c6c65724d61696e5368656c6c5363686564756c655461736b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2243496e7374616c6c65724d61696e5368656c6c496e69745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224765744e6574776f726b436f737454696d656f75745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224765744e6574776f726b436f737453657276696365556e617661696c61626c655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f7366496e7374616c6c657253746172744d61696e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f7366496e7374616c6c65725374617274436f6d5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f7366496e7374616c6c657253746172744e6f74434f4d5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c225461736b456e67696e655c22203a207b205c224576656e74735c22203a207b205c22436865636b416e64557064617465416c6c536478536f6c7574696f6e735461736b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22436865636b416e64557064617465416c6c536478536f6c7574696f6e735461736b5265676973746572536f6c7574696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22436865636b416e64557064617465416c6c536478536f6c7574696f6e735461736b52656769737465724e65757472616c5061636b6167655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22436865636b416e64557064617465416c6c536478536f6c7574696f6e735461736b52656769737465724c6f63616c655061636b6167655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224765744368616e676564536f6c7574696f6e735461736b4c6f63616c65556e617661696c61626c655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224765744368616e676564536f6c7574696f6e735461736b5061636b616765556e617661696c61626c655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22496e7374616c6c536478536f6c7574696f6e5461736b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253636176656e6765725461736b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253636176656e6765725461736b436c656172526567697374726174696f6e4661696c65645c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d2c205c2255585c22203a207b205c224576656e74735c22203a207b205c224c61756e63684f6d657853534f436f6e73656e744469616c6f675c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22416761766555784d696e6f72426c6f636b65645c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2241707044656c6574656446726f6d446f63756d656e745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224469616c6f67436c6f7365645c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224469616c6f674f70656e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253686f77496e666f626172436f6e73656e74566965775c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253686f774c6f6164696e6753746174655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253686f775265616374566965775c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c224f4d54656c656d657472795c22203a207b205c224576656e74735c22203a207b205c22576f72645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22416464696e50726566657463685c22203a207b205c224576656e74735c22203a207b205c22507265666574636849636f6e735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22507265666574636855726c5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225072656c6f61644d616e69666573745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253616e64626f78507265666574636855726c5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2241637469766174696f6e5c22203a207b205c224576656e74735c22203a207b205c224352656d6f74657250726f78795c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2241757468656e7469636174696f6e526963684170695c22203a207b205c224576656e74735c22203a207b205c22476574416363657373546f6b656e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2247657441757468546f6b656e5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2253696e676c655369676e4f6e5c22203a207b205c224576656e74735c22203a207b205c22446973706c617953534f436f6e73656e7450616765466f7241706943616c6c5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224578656375746547657453534f546f6b656e496e7465726e616c5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2247657441757468546f6b656e5c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d2c205c224576656e74735c22203a207b205c2256626154656c656d65747279436f6d4f626a656374496e7374616e7469617465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2256626154656c656d6574727950726f6a6563744c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434f4d416464696e4f7065726174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f4450417070436f6d6d616e647343616368655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f4450417070436f6d6d616e6473496e7374616c6c54696d655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f4450417070436f6d6d616e6473526962626f6e436c69636b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224557534c69626c657443616c6c735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256626154656c656d65747279436f6d70696c655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256626154656c656d657472794465636c6172655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256626154656c656d65747279486f73744d6163726f52756e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256626154656c656d657472794d6163726f4372656174655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256626154656c656d657472794d6163726f5265636f72645c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256626154656c656d657472795265666572656e6365644c6962726172795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256626154656c656d6574727953686f774964655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22434f4d416464696e436f756e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434f4d416464696e446c67436c69636b5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434f4d416464696e556e68616e646c6564457863657074696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f4d43616c6c54656c656d65747279486173684d61705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446565704c696e6b696e67436865636b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22446565704c696e6b696e67446f63756d656e744f70656e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22446565704c696e6b696e67446f63756d656e7453686f77547275737455495c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22446565704c696e6b696e675472757374526573756c745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224577734c6173745570646174655374617475734974656d436c69636b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224577734c6173745570646174655374617475734974656d53686f776e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2247656e314163746976697479416767726567617465644261736553756272756c655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2247656e314163746976697479416767726567617465644661696c757265436f756e OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1.10 = 745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2247656e3141637469766974794167677265676174656453756363657373436f756e74576974685461675c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f445041637469766174696f6e466f7254616761353572735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f44504170704d616e6167656d656e744d656e755c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f4450496e73657274696f6e4469616c6f675c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f445050617273654e65774d616e69666573744572726f725c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f44505265636f6d6d656e64656447616c6c657279436c69636b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f4450526962626f6e427269646765526962626f6e436c69636b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f445053616e64626f7841637469766174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f45504d616e696665737450617273696e675c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22526962626f6e427574746f6e436c69636b5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253746f7265557365725374617475735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253746f7265557365725374617475734572726f725c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f445041637469766174696f6e466f7254616761353572715c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224f44504c6174656e63795c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e466565646261636b222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c2253617665526573706f6e73655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e46696c65494f222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c224d534f5c22203a207b205c224576656e74735c22203a207b205c2246696c6552657061697250726f746563746564446f63756d656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f4f4c446f634e657744657374727563746f725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6f63616c446f63756d656e74496e666f557073656c6c4576656e745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224c6f63616c446f63756d656e74496e666f466c796f757444726f707065645c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2248616e646c65417574684661696c7572655f5573654578697374696e6743726564735f47656e657269634661696c7572655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f4f4c446f6342617365476574504b4d436c69656e7445785c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f536572766572496e666f476574536572766572496e666f5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e745265636f766572794872476574447270436f72655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e745265636f766572794d736f4872426567696e4d6f646966794472705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225469746c654261725361766555694d616e616765725772697465537461747573546f5469746c654261725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6f6164437369446c6c466f72436c69636b3252756e456e7669726f6e6d656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2249735365727665724361636865645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224353495c22203a207b205c224576656e74735c22203a207b205c2253796e634261636b65645265636f6e63696c657252656275696c6442617365576974684f6e6c696e654d6f64656c5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224343616368656446696c655363686564756c6546696c6555706c6f6164526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e49734f6e6c79436c69656e7452657175657374436f6d706c6574655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22437369446176436c69656e7453656e64526571756573745374617475735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574446f63756d656e7446726f6d55726c5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243656c6c53746f726167654f6e426c6f624865617052657175657374526573756c745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224343616368656446696c654373694c6f616446696c655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224343616368656446696c654373695361766546696c655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22446f63756d656e74466163746f72794372656174654e6577446f63756d656e745c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22446f63756d656e7452656e616d655375626d6974576f726b4974656d5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22464d617050617468735c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22476574536861726555726c466f72436f6e7461696e65724173796e635c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22476574536861726555726c466f7246696c654173796e635c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22476574576f706955726c46726f6d46696c654964656e7469666965724173796e635c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2249446f63756d656e7447657456657273696f6e4c6973745c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2249446f63756d656e74526573746f72654173796e635c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224973446f776e6c6f616465644261736556616c69644e6f48617368436865636b5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2253796e634261636b65645265636f6e63696c65725472795265636f6e63696c65546f4c6174657374416674657256657273696f6e4e6f74466f756e645c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2253796e634261636b65645265636f6e63696c65725472616e736974696f6e4f6e6c696e655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2254727944657374726f794f666669636546696c6543616368655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22576f706942726f77736542726f777365546f436f6e7461696e65724173796e635c22203a207b205c224576656e74466c61675c22203a203438383936207d207d2c205c225375624e616d657370616365735c22203a207b205c2253746f726167655c22203a207b205c224576656e74735c22203a207b205c2243616368654f70746963735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f7074696373446f776e6c6f61644572726f72446973747269627574696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f7074696373446f776e6c6f61644572726f72446973747269627574696f6e7337446179735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f70746963734572726f72735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f707469637346696c6553746f726546696c6553697a65446973747269627574696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f707469637355706c6f61644572726f72446973747269627574696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f707469637355706c6f61644572726f72446973747269627574696f6e7337446179735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f7074696373576f726b696e67436f707946696c6553697a65446973747269627574696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2252656d6f766546696c65456e7472795c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616368654f707469637350657246696c655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2253746172744f666669636546696c6543616368655c22203a207b205c224576656e74466c61675c22203a203438383936207d207d2c205c225375624e616d657370616365735c22203a207b205c2243656e7472616c5461626c655c22203a207b205c224576656e74735c22203a207b205c22436865636b536368656d6156657273696f6e5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22436c65617243616368655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22437265617465446174616261736546696c655573696e6754656d706c6174655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2243726561746544617461536f757263654661696c7572655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2244617461736f757263654f70656e4661696c7572655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2246696c65436163686550726f70657274696573526f774e6f74466f756e645c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224d69677261746546696c654e616d6546726f6d496e695c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22526f77736574556e6b6e6f776e4661696c7572655c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22536368656d61557067726164655c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d2c205c224661756c744d616e6167656d656e745c22203a207b205c224576656e74735c22203a207b205c224661756c745265636f766572795c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224661756c745265706f72745c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d207d207d207d207d2c205c225254435c22203a207b205c224576656e74735c22203a207b205c2246696e6453657373696f6e456e64706f696e7452756e5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2250726f746f636f6c5061727365725c22203a207b205c224576656e74735c22203a207b205c22464c6f6164436d644c696e65436f72655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22446f63756d656e74536861726555726c5c22203a207b205c224576656e74735c22203a207b205c22556e7061636b536861726555726c416e6448616e646c65526573756c745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e556e7061636b55726c436f6d706c657465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22556e7061636b4c696e6b5c22203a207b205c224576656e74735c22203a207b205c22556e7061636b4c696e6b5769746848696e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7061636b4c696e6b5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22486c696e6b5c22203a207b205c224576656e74735c22203a207b205c224d736f4872486c696e6b43726561746546726f6d537472696e675c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2246696c6553746f72655c22203a207b205c224576656e74735c22203a207b205c22465344436f7272757074696f6e5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c2247617262616765436f6c6c656374696f6e5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c225a65726f4279746546696c6555706c6f6164417474656d707465645c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d2c205c2252756e74696d6550726f706572746965735c22203a207b205c224576656e74735c22203a207b205c22496e636f6d70617469626c6543736956657273696f6e44657465637465645c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d2c205c224f66666963655c22203a207b205c225375624e616d657370616365735c22203a207b205c2246696c65494f5c22203a207b205c225375624e616d657370616365735c22203a207b205c224353495c22203a207b205c225375624e616d657370616365735c22203a207b205c2253746f726167655c22203a207b205c224576656e74735c22203a207b205c2243616368654f707469637356325c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d207d207d2c205c224d6f6373695c22203a207b205c224576656e74735c22203a207b205c22557064617465486f73745469705c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d207d207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e466c6f6f6467617465222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c22436c69656e74436f72655c22203a207b205c225375624e616d657370616365735c22203a207b205c22426f6e6469446573657269616c697a6174696f6e5c22203a207b205c224576656e74735c22203a207b205c2246726f6d5375727665795061796c6f616442696e6172795c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4772617068696373222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c224172745669657756616c69646174655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22415243457863657074696f6e53636f70655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224175746f6669745368617065546f54657874436d645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f704c6576656c456666656374447261775c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224372656174654269746d617046726f6d506c6174666f726d4269746d61705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e6b496e70757453757266616365426173655570646174655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250617468576964656e657246576964656e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250617468576964656e657246576964656e53696d706c65506174685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243726561746544657669636544334431305c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22537065637472655472616e73636f646541637469766974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22496e73657274496e646976696475616c4d6f64656c334441637469766974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224c6f61646564496d61676550726f706572746965735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22496e736572744d6f64656c334441637469766974795c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22537065637472654372656174655363656e6541637469766974795c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224d6f64656c334452656e64657241637469766974795c22203a207b205c224576656e74466c61675c22203a203438383936207d207d2c205c225375624e616d657370616365735c22203a207b205c224175746f416c74546578745c22203a207b205c224576656e74735c22203a207b205c2251756572794175746f43617074696f6e526573756c74735461736b5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22554953657373696f6e5c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4964656e74697479222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c22456e7375726550726f7669646572496e697465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574506572736f6e50 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\officeclicktorun\Overrides OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|12" OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|13" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1.4 = 66742e4f66666963652e47726170686963732e5356472e52656e646572536861646f7756696146696c74657273222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e55736541726344656275674c61796572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e5573654c6f6754656c656d65747279466c6167222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e5573654c6f676963616c445049466f72566563746f72496d6167655265736f75726365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e5573654d65646961456e67696e65222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726f7774682e4465666572726564413130222c20225622203a20224d736f3a3a416e79547970657c75696e7431365f747c323b626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e48656c702e496e636c756465436f6d6d616e6454797065222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e456e61626c65547275737443656e746572466f726d4261736564417574685549222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e46656174757265476174652e446570726563617465456e61626c654144414c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e4c6f636b57616d476574416363657373546f6b656e46726f6d4372656450726f766964657243616c6c73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e4c6f6e674c69766564546f6b656e537570706f7274466f724144414c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e4e65774d53414775657374466c6f77222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e53534d537570706f7274456e61626c6564466f7253504f222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e53706f41757468436f6e74657874456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e5570646174654d6574614461746150657253657373696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e5573654964656e7469747943726564656e7469616c734661696c757265496e666f222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e5573654e65774368616c6c656e676550617273696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e5573654e657750726f66696c6553657276696365466f72414144222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e5573654e657750726f66696c6553657276696365466f7241414450686f746f73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e5573654e657750726f66696c6553657276696365466f7241414450726f66696c6573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e416c6c6f774e554c50657270657475616c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e44617465546f5573654d6963726f736f6674333635466f72436f6e73756d657273222c20225622203a20227374643a3a77737472696e677c323032302d30342d32315430303a30303a30302b30303a303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e44617465546f5573654d6963726f736f6674333635466f72534d42222c20225622203a20227374643a3a77737472696e677c323032302d30342d32315430303a30303a30302b30303a303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e456e61626c65456475436f6e76657273696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e456e61626c654e6f456e7469746c656d656e74734d6f62696c65506c616e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e486561727462656174446179734265666f726545787044617465222c20225622203a2022696e7433325f747c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e486f757273556e74696c4e6578745369676e496e436f6e6669726d416c6c6f776564222c20225622203a2022696e7433325f747c3422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e4e6f456e7469746c656d656e74735472794275794578706572696d656e7454726561746d656e74222c20225622203a2022696e7433325f747c3222207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e53686f756c6453686f775669727475616c537570706f72744167656e744c696e6b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e53686f7747656e75696e654f6666696365467265654f7074696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e5573654c5655584865726f4578706572696d656e74222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e5573655265666163746f726564436f6e666967446570726f766973696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4e616e63794f66666963655465616d2e7a686574616e34313232303231222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e417070436f6d6d616e64526566726573685632222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e43474d6f72654d616e696665737454656c656d65747279222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e496e766f6b6546657463684d616e696665737443616c6c6261636b4f6e446f776e6c6f61644d616e696665737432222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e5365745465616d73416464696e4c61737455736564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e53686172656452756e74696d65466f7246697273745061727479536478222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e536f6c7574696f6e5265666572656e6365436f6d70617269736f6e4669785634222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e56616c6964617465446f776e6c6f61645265736f7572636573222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e436f6e7465787475616c54616248796272696452756e74696d65222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e436f6e7465787475616c54616253686172656452756e74696d65222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e44796e616d6963526962626f6e436f6e7465787475616c546162417069222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e44796e616d6963526962626f6e557365436f6e7465787475616c546162222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e456e61626c65436f6e7465787475616c54616273657449636f6e446f776e6c6f616454656c656d65747279222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e456e61626c65506572446f63756d656e7444796e616d6963526962626f6e58222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e456e61626c65526962626f6e4170694f76657272696465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4d61634f4d455841707056657273696f6e4f76657272696465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4f666673637265656e52656e646572696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4f7366496e7374616c6c6572526567697374657242675461736b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e5368617265644f626a6563744d6f64656c456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6172742e456e61626c65496e736572744d6564696154656c656d65747279222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6666696365496e73696465722e5570646174654e6f77222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6e654e6f74652e44656570426174636853746f7265456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6e654e6f74652e4d61705768697465546f4f66665768697465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e434c504175646974696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e5063782e417474656d70744f75746c6f6f6b41757468466f7250726f66696c65222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e5063782e427567466978466f7255736572486561646572496e4964656e7469747941757468222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e5063782e4c696e6b6564496e4b32466978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e5063782e5063784d61706955736167654669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572666f726d616e63652e426c6f636b696e6757616974732e4f737250726f63657373222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572666f726d616e63652e496e70757444656c61794d6f6e69746f722e494f486f6f6b73526970636f7264222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e456e61626c65476574496e736967687473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e456e61626c65506f7374476f7665726e616e63654461746152656672657368417349646c655461736b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e456e61626c6553656e645369676e616c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e47657455736572466163747354696d656f75744d696c6c697365636f6e6473222c20225622203a2022696e7433325f747c3530303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e4368616e6765476174652e436865636b456e6372797074696f6e44617461466f724d6f6469667950617373776f7264222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e446f634f70732e536176652e53617665417357616974466f7252756e6e696e67536176654f724d6572676554696d656f7574536563222c20225622203a2022696e7433325f747c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e4d657267652e557365426c6f624361636865466f72435349546f6f222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e4f584d4c2e43616e4f6d69744f6c6545326f566d6c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e50726f6a6563742e50726f6a65637443656e74656e6e69616c53657276657232303133426c6f636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e50726f6a6563742e50726f6a65637443656e74656e6e69616c53657276657232303133436f6e6e656374696f6e426c6f636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e417070477561726453686f756c6445646974436f6d6d616e644f70656e496e4170704775617264222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e4174746163686d656e744948616e646c657241637469766174696f6e486f7374222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c502e46472e4169704f75746c6f6f6b436f6e666967506172697479222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c502e46472e4175646974696e67456e64706f696e745632456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c502e46472e446973616c6c6f7746616c6c6261636b4964656e74697479496e48656c706572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c502e4d616e6461746f72794c6162656c6c696e6746656174757265222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c502e53656e7369746976697479427574746f6e557365446f634964656e74697479222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c502e5573654170706c794c6162656c2e4e6f6e5370656369666963222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c504175646974696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e52656d6f766546656465726174696f6e50726f7669646572476c6f62616c436865636b456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e53686f756c6452756e436c6f75645365637572697479506f6c696379436865636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e547275737443656e7465722e5669727475616c4469736b436865636b222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e556e69717565436f756e74222c20225622203a2022626f6f6c7c3022 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceTicket = 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 OfficeClickToRun.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1.15 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|7" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\1.8 = 636b65645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f70656e526563656e74446f63756d656e7473566965775769746846656174757265456e61626c6564436c69636b65645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22424743616c634d616e6167657250726f6365737353657456616c75657350726f635c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22424743616c6349646c655461736b46457865637574655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224e617669676174696f6e5265616453697465526f6f74427956726f6f6d5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224e617669676174696f6e52656164446f634c6962466f6c646572427956726f6f6d5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22486f6d65506167655c22203a207b205c224576656e74735c22203a207b205c22506c6163654368616e6765536c6162436f6e646974696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e53686f77486f6d65506167655c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c225365617263685c22203a207b205c224576656e74735c22203a207b205c225365656e4279557365725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c224f666669636553746172745c22203a207b205c224576656e74735c22203a207b205c22536574757054656d706c61746550726f706572746965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243757272656e745549416374697665506c6163654368616e67655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22547269676765725468756d626e61696c416374696f6e52756e5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22446f63756d656e744e6f74696669636174696f6e735c22203a207b205c224576656e74735c22203a207b205c2252656769737465724f6e49646c65466561747572654761746544697361626c65645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d7275536572766963654170695c22203a207b205c225375624e616d657370616365735c22203a207b205c22446f63756d656e74735c22203a207b205c224576656e74735c22203a207b205c2252656164526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225772697465526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e526571756573745375636365656465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22506c616365735c22203a207b205c224576656e74735c22203a207b205c2252656164526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225772697465526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e526571756573745375636365656465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c224d736f53686172696e675c22203a207b205c224576656e74735c22203a207b205c22434d736f53686172696e675365727669636548656c706572456e64476574486f73744361706162696c69746965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572476574486f73744361706162696c69746965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e6447657455736572417474726962757465735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c70657247657455736572417474726962757465735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e644765744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065724765744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e645365744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065725365744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e644765745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065724765745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e645365745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065725365745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572436865636b5065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c70657247657453686172696e67496e666f726d6174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572426567696e5365745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c70657247657453686172696e6756657273696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d6f6465726e4261636b73746167655c22203a207b205c224576656e74735c22203a207b205c224261636b737461676550616765436f6e74726f6c55736572437265617465436f6e74726f6c557365725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224465736b746f704261636b73746167654e617669676174696f6e5c22203a207b205c224576656e74735c22203a207b205c224e617669676174696f6e5461736b496e766f6b655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224465736b746f7053686172696e675c22203a207b205c224576656e74735c22203a207b205c22436f6c6c616250616e6555736572536574436f6c6c616250616e654d6f64655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c616250616e6555736572436c69636b53686172696e674c696e6b5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c616250616e6555736572497343757272656e74446f63456e746572707269736550726f7465637465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22446f63756d656e7473536861726564576974684d655c22203a207b205c224576656e74735c22203a207b205c22446f63756d656e7473536861726564576974684d6552657175657374446f63756d656e7473536861726564576974684d654173796e635c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7473536861726564576974684d6552657175657374436163686564446f63756d656e7473536861726564576974684d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7473536861726564576974684d654964656e74697479436163686552657175657374526573756c745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7473536861726564576974684d6552657175657374436163686564446f63756d656e7473466f724661696c757265735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22486973746f727955585c22203a207b205c224576656e74735c22203a207b205c224163746976697479506167654d616e6167657252656769737465725669736962696c697479436f6e74726f6c6c65725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224275734261724f70656e4c6f63616c56657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434163746976697469657341676772656761746f72496e69745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434163746976697469657341676772656761746f7252657475726e4572726f725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243437369446f63756d656e74537461746545787465726e616c556e7265676973746572446f63756d656e744c697374656e65725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243486973746f727941637469766974696573466163746f727952656672657368416674657252656e616d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f62616c744163746976697469657346696c6556657273696f6e4c697374557064617465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243536f61704461746150726f7669646572496e69745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765436c6f73655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765436f707956657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765436f707956657273696f6e496e7465726e616c5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f7279506167654372656174655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765526573746f726556657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f72795061676553656c65637456657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616e654e6f6e436c69636b61626c654974656d53656c65637465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6f63616c41637469766974696573426567696e526566726573685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6666696365436f6c6c61624163746976697479436f6d6d616e644d534f446f63756d656e7450726f76696465725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225368617265506f696e74436865636b4f757446696c65546f4c6f63616c466f6c6465725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f67676c65486964655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f67676c6553686f775c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225759574143616c6c6f757453686f7743616c6c6f755c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e416374697669747943616c6c6f757450726573656e7443616c6c6f75745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e41637469766974794765744c6173745669657754696d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e416374697669747946696e6443757272656e74557365724c6f67696e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e416374697669747943616c6c6f7574436c69636b65645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2253686f77536d616c6c53637265656e435759574143616c6c6f75745c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d7275416461707465725c22203a207b205c224576656e74735c22203a207b205c224872416464446f63756d656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c6163655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464446f63756d656e74576974684f7074696f6e7357697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c616365576974684f7074696f6e7357697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464446f63756d656e745061746857697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c6163655061746857697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464446f63756d656e74496e6465785c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c616365496e6465785c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22487252656d6f7665506174685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464576974684f7074696f6e7357697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d6f6465726e446f6354656d706c617465536572766963655c22203a207b205c224576656e74466c61675c22203a20322c205c224576656e74735c22203a207b205c2243446f63756d656e7454656d706c617465476574496d616765446f776e6c6f6164526573756c744173796e635c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7454656d706c61746552657175657374496d6167654173796e635c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22417070446f63735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e745c22203a207b205c225375624e616d657370616365735c22203a207b205c2241637469766174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6173744f70656e6564446f63756d656e744d657461646174615c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c225361766550726f6d707448656c7065725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c6162436f726e65725c22203a207b205c224576656e74735c22203a207b205c22436f6175746847616c6c65727955736572437265617465416374696f6e4875624c69737446726f6d536e617073686f745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22436f6175746847616c6c65727955736572437265617465466c65784c69737446726f6d536e617073686f745c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2253686172696e6755495c22203a207b205c225375624e616d657370616365735c22203a207b205c22436f6c6c616250616e65557365725c22203a207b205c224576656e74735c22203a207b205c22536861726550616e65436f6d706c657465446973706c61795c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2253686172654469616c6f675c22203a207b205c224576656e74735c22203a207b205c224e61766967617465546f5765624469616c6f675c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253656e6441734174746163686d656e745c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d2c205c224544505c22203a207b205c224576656e74735c22203a207b205c22506f6c6963794d657461646174615c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c225369746573536572766963654170695c22203a207b205c224576656e74735c22203a207b205c22526571756573744173796e635c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225265616446726f6d43616368655c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e44796e616d696343616e766173222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c224f7574537061636543616e7661735c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c2250726f677265737355695c22203a207b205c224576656e74735c22203a207b205c22556e6578706f727461626c655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224578706f727461626c655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2243616e7661735c22203a207b205c225375624e616d657370616365735c22203a207b205c225765624469616c6f675c22203a207b205c225375624e616d657370616365735c22203a207b205c2242726f777365724576656e7448616e646c65725c22203a207b205c224576656e74735c22203a207b205c224f6e4c6f616465645c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d2c205c224e617669676174696f6e48616e646c65725c22203a207b205c224576656e74735c22203a207b205c224f6e4e61766967617465645c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d207d207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e457863656c222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\Expires = "int64_t|0" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|9" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates OfficeClickToRun.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes:
powershell.exepowershell.exepid process 2076 powershell.exe 2076 powershell.exe 2076 powershell.exe 4056 powershell.exe 4056 powershell.exe 4056 powershell.exe -
Suspicious use of AdjustPrivilegeToken 12 IoCs
Processes:
powershell.exepowershell.exeOfficeClickToRun.exedescription pid process Token: SeDebugPrivilege 2076 powershell.exe Token: SeDebugPrivilege 4056 powershell.exe Token: SeBackupPrivilege 3860 OfficeClickToRun.exe Token: SeRestorePrivilege 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe Token: 35 3860 OfficeClickToRun.exe -
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
OfficeClickToRun.exeOfficeC2RClient.exepid process 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 3292 OfficeC2RClient.exe -
Suspicious use of SendNotifyMessage 3 IoCs
Processes:
OfficeClickToRun.exepid process 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 2912 OfficeClickToRun.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
OfficeSetup.exeOfficeClickToRun.exeOfficeClickToRun.exeOfficeClickToRun.exeOfficeC2RClient.exepid process 3172 OfficeSetup.exe 2800 OfficeClickToRun.exe 3860 OfficeClickToRun.exe 2912 OfficeClickToRun.exe 3292 OfficeC2RClient.exe 3292 OfficeC2RClient.exe -
Suspicious use of WriteProcessMemory 10 IoCs
Processes:
OfficeSetup.exedescription pid process target process PID 3172 wrote to memory of 2076 3172 OfficeSetup.exe powershell.exe PID 3172 wrote to memory of 2076 3172 OfficeSetup.exe powershell.exe PID 3172 wrote to memory of 2076 3172 OfficeSetup.exe powershell.exe PID 3172 wrote to memory of 4056 3172 OfficeSetup.exe powershell.exe PID 3172 wrote to memory of 4056 3172 OfficeSetup.exe powershell.exe PID 3172 wrote to memory of 4056 3172 OfficeSetup.exe powershell.exe PID 3172 wrote to memory of 2800 3172 OfficeSetup.exe OfficeClickToRun.exe PID 3172 wrote to memory of 2800 3172 OfficeSetup.exe OfficeClickToRun.exe PID 3172 wrote to memory of 2912 3172 OfficeSetup.exe OfficeClickToRun.exe PID 3172 wrote to memory of 2912 3172 OfficeSetup.exe OfficeClickToRun.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\OfficeSetup.exe"C:\Users\Admin\AppData\Local\Temp\OfficeSetup.exe"1⤵
- Checks computer location settings
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile "$package = Get-AppxPackage Microsoft.Office.Desktop -allUsers; if (!$package) { $Error.Add(\"Package is not installed\")}; if ($error.Count -eq 0) { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '1' -Encoding ascii; } else { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '0' -Encoding ascii; Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateError.scratch' -InputObject $error -Encoding ascii;} "2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile "$package = Get-AppxPackage Microsoft.Office.Desktop -allUsers; if (!$package) { $Error.Add(\"Package is not installed\")}; if ($error.Count -eq 0) { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '1' -Encoding ascii; } else { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '0' -Encoding ascii; Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateError.scratch' -InputObject $error -Encoding ascii;} "2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=en-us productstoadd=ProPlus2019Retail.16_en-US_x-none cdnbaseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl.16=http://officecdn.microsoft.com/sg/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version.16=16.0.14131.20332 mediatype.16=CDN sourcetype.16=CDN ProPlus2019Retail.excludedapps.16=groove pidkeys=MMNJQ-2XKG9-XGCFQ-YTC34-4YBCT flt.useexptransportinplacepl=unknown flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.usebingaddononinstall=unknown flt.usebingaddononupdate=unknown scenario=CLIENTUPDATE2⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=en-us productstoadd=ProPlus2019Retail.16_en-US_x-none cdnbaseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl.16=http://officecdn.microsoft.com/sg/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version.16=16.0.14131.20332 mediatype.16=CDN sourcetype.16=CDN ProPlus2019Retail.excludedapps.16=groove pidkeys=MMNJQ-2XKG9-XGCFQ-YTC34-4YBCT flt.useexptransportinplacepl=unknown flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.usebingaddononinstall=unknown flt.usebingaddononupdate=unknown2⤵
- Executes dropped EXE
- Checks computer location settings
- Loads dropped DLL
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /progressandlaunch AppTargets="root\office16\excel.exe|root\office16\lync.exe|root\office16\msaccess.exe|root\office16\mspub.exe|root\office16\onenote.exe|root\office16\outlook.exe|root\office16\powerpnt.exe|root\office16\winword.exe" ManualUpgrade=False ScenarioToTrack="Scenario:{477E0208-58BD-4F33-978A-09BCC9AA9EB1}@INSTALL"1⤵
- Executes dropped EXE
- Checks computer location settings
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVFILESYSTEMMETADATA.dllMD5
27312ec34a5452d4070ccca50e8ce55d
SHA191a6430607a78f588531c68d4ad6b3e34253c19b
SHA256ead0f91bdca233199f69970f788c33bb9ad45ad774b90a44e2f95cb701051b78
SHA5121365d149f91cdcc871633bdbc5b7034ef034d2e101d6e96d4f628edf589497315974ec1ad948b2b6ae8ea47c52fd62865a4569f14972f9e1a8d571d70d3a0bfb
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVMANIFEST.dllMD5
b34b3761b55dcb33626fa3161eb15fee
SHA103ceb80844ad9b5ecfbe731ce49f40d6e58334d2
SHA2561b344aa0875aeb12cd2d037411c5b97622ade52d6a40c5bf336355d79371ae64
SHA512772f6c26e8b15c8c054c5aa72f371f4234cfa3dad82edf7b21ae89509500ffb2db75123f1faafcf8eeb466259a54425a8bc563539a9ac50676dd95f6a1a32a7f
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVPOLICY.dllMD5
3fac26f8941a87c077006422f1fd2d50
SHA19f1401d3b17136e2ae15075d0c7fbe88e1bcebb3
SHA256f3e8d273ffd5453a19a4ead39a3c56a8d3581d9e972177d65422d7e338125a1c
SHA51291e879b9b007346e2330ec7f0a06232788dbe50db13a2c3bd589aac36d0bc7bb4bc1c0428b684a72dd0e47afe03925d27ee9f65a531a742704cd3a89436d8091
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dllMD5
cc2b3930ea10d482dfa35233adb38bce
SHA1d7243b76955e18f0b43632fdce3e3fdb21226d85
SHA256d97d46b602bc3b9187a3aa80e13ce7c1ca6cdd6d3ad9e5f8c56448681055b46e
SHA512ee5dc4ad9d2168964b8e61eaa7edbeac6cef83d24e00fb5af9e783607c56186ac161907cffb1ad2c3e0d1a24b2cd81421bb12e2a647f93ce087253ff7897b739
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVCatalog.dllMD5
544877c1af95dcd2de43dffebb9a10ad
SHA1bf43d8ebcbdfd0f2175788ff68974b073c8606a8
SHA25645ac7bf2afd7f59eadc9d8797f5052e5c9ba8cbd499cd8b7487ea43193529985
SHA51210bdeec5c7a5e4f28bca9efd9d5b9e101eb401d19f0cb6d305e504bf680996ecae6249e6f61933e6715a8210d8ffa751a256bf29769533aaba6f5d2fdf6d2c9d
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIntegration.dllMD5
3286c112ff9a603008822d53827aaeb5
SHA119db18066701aa465dec35741feeb17d0df068be
SHA2560d31ad541270c495236264ec416509d23c3166147bd9ad0dca38a7fb277d2a79
SHA5128ea06f68cea12c33839a7a2392c41b327143adc393ea4bf6889e98e97094d6329b4a18eb380aa6d66285442fb2cd5bf81b8afbcc834a83db7c0896afbe41919b
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvApi.dllMD5
3c85cb2d2e4b9312d39983115f4b7988
SHA1ad24746acb90a819b3b146a2774a19da17873e1f
SHA2564f45a7f0829ffef4dd0e083ceccd0d4987da6b3a889d7bc1a8071de43efdf63a
SHA512b11fb96b4adf4f2c8139c7c230530660029cb100a924846857cd753e7dac2e70b6278acc02a15936e78fe845f4db3416e942cd167dc134bd11e479aba661957c
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvStreamingManager.dllMD5
cae5364f833e5da957bbfd9be4fc209f
SHA1a66b96edad93ad3fa8f9314b001cf796f40641b2
SHA2565d98e973b1ab9b532c610105d9f82316ae9d3ecea1afc0574ae6f7423bf05400
SHA5127fb14d7c9785c44e0d6da1d52916f3ee6b2c56111e4f110df53fee249979ba57f52bc90ddb363a6be35003efbc6b4493505a608bc9fa6a342005b895ea2bcf08
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvSubsystemController.dllMD5
af903d45c9b5e57ed44dd74fb71db058
SHA180c098a6c6df6671767191dae211f658f47ead1c
SHA256f7d4668d289d1aaf3c5dba545b23c02c2719494d0e63620ff17ba4fe3b003cf3
SHA512d1bf3599917c75c4c8d4fb3f498423b5b0857cb8edaeb0b304e4432602fc1234130308905ff59b4b03e554c2242e66c5932d2d6d56c7fdb47fc6ae98d0efcf31
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvVirtualization.dllMD5
6dc8dcb1f8d25626061a5f7b8c00e1fb
SHA12a153334c8c7c6a43bb33d404cb8dac69b78186a
SHA2569dac9604746a1dc8c65964ed1c4f357d7b52348538c3e711accfa20a09a84d82
SHA5124663b3df8f0b717440518a1e587263e969cd83c4faccbceda83f35c3533a03a2f0fdcc142e44f1da48b4002ee4ab0c2930f1a91f61a31edc9841453ec4f052ae
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVOrchestration.dllMD5
5046c0734d201fcff86da3ae826cfeee
SHA17c55fb67861742ff6aed202ac7d2064f85e486eb
SHA2565879eafe7a6e2418a8acb25bd00e4fa78170259610fa8a11e8e1e4cedc30cd6b
SHA51237ac546f7d0634812574122a8c3f3ee4d9fa57b67deb6b96ccf34c4be60787f7678a8ef8eed927e8595e0859648fec7b144385b4410e13ec91aa6cec2c734739
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2RUI.dllMD5
9b2928440830f5557b55243f5690c072
SHA11a8c55fdc946d7dc7bddeee110b3190c5d488cda
SHA256062fb7d5dd121d031acca2b845272fa9da7d21e522053e43dc7beaa28a012b96
SHA51254fd4e3a8fdd242156c38ff5bafd253e502522359b9be08dd50fa2db692a57c28c373a84c259c747d3ca3926e614af003e951981d2f230a0d0698092dd5c5f9f
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\IntegratedOffice.exeMD5
f83496e864398a5caf84709e990b9a1d
SHA166d739dca1e0f5058a11bcaf2224c51521d4ebf2
SHA256e740c941c003b603f5c15b73918054a529832c98028e38cff49babc617cdbe42
SHA51279f534c9a09941b9a3ff9c06120f5ae10be4ec4f1d3c2850d34c9e35042482c304851cec36a82ce802f9f24a769e823e262c3ea339c64e68910a7683bf297067
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSIX.dllMD5
3fb73294dd0a16d24755743210a709c2
SHA1141b831c4e2848cfb870bc35e2a27acf2b38edeb
SHA256a4660ce9df336dfd1974bcfceed10433834e71a36918d8cb5f030c35a6bcaa32
SHA512243c39c26a9a7967df25624dcf8fc4549673399c87f49788c19ff8683ef344f1dc33adba9a1fbe31e468231a5d4584c552df5eed18e91ba264885e010daf6b74
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCP140.dllMD5
c15a199252046e54b2447ac8a23a4f5f
SHA1f9d6fc729ff7f03494a5f1f51b9693a7df689a7b
SHA25618bc3e55806b676abbc598d1a4331b80ef4a7931101683b5080d0194a47e67cf
SHA5120505ec128700604ed48c8bd385eb5e158d58ddc0e5f85f31424e96ac101e163bf3f344a8f1c3820bf63e63b18ee9cf0899f50c0b41b2dfd53e5d227a7aa4e855
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exeMD5
121b3ef38dca50030b4a03138468f034
SHA19d745cd87258f90e44a124df8dd8d9d86e057c2e
SHA256dfa4af56c8f01280182618667201f123cd1d7555fcfdce0945056fabd0045566
SHA51263d6d7f51e11c357efc771ded36c2c4d001eed4fc087794d05fbc58baa20bf3f819aeb0a5b8f4b7c929c261eb39957225af480ef9e4a3de02fb4345f56d942d9
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeMD5
782fc534737ec5d85fa226b9b4b7e1c8
SHA1b5a53d806c74f29fa027717243a852384f5fbe20
SHA2561193b9810bb4842bc8e52c84e6d090ad7b42879d1090079ebf4e37376ef2ca88
SHA5127a54c04d061e95481f840ebc15e5680075b7f0d00d5f481b7fd450c8fdc3c7229f057188b8fda9afa097d86507e840d3d9e2ca72ece38684cbfc899d4f9e8e12
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\StreamServer.dllMD5
41a43383922e9e6ffab3ea06a7280686
SHA117cd7ad5a61488d1c6b489254193e6955bd60d7f
SHA256d537afe5f824c4bb38c8dc42c0c3e74b1330fc7444ef438f7f608ddc208ad50c
SHA512d59cc8b85fc559b23c6c9c98f324efaf8d181ac86577f5cbedbfd97c132f010044d986da7f8fccb325d42417012bc1b608ae41c31adbcce78864c4e7b5d06846
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\VCRUNTIME140.dllMD5
845a3a6471fb853d0d218518e4c48f8c
SHA1ab4bad2575ab028b0cba13bb445e3c6dd965fb13
SHA25648140e727d1f2438f4fab1e08632ba9c5c928b6c1a4584758391a4fe9d7d978d
SHA512f0a13125a1e1904a9c2483295bd770106485dc1f31bbdb7d3f11ed48d9f7e8282ab46a070f57c82ef19c933608ce29abf6ef5744a61ed608b6026504194ce19f
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\VCRUNTIME140_1.dllMD5
6feeb6ba00dfee9cf3a2e4c6905af7f1
SHA15f7a7a74f9a7de8a344299bf966c0723da26a056
SHA256092e91d8b179ce00c2a139afed85fc478632841e906e44b7ec2fb67268f5aef5
SHA512a008c0df0796067fac98cf04dd2c2ef7e7b0c7248f92f6fb7c346ad77b72d45c60347f7cb974a81fd311408ba74822230f9b1a248ab1b4b06c54c13372d2bb4b
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\appvisvsubsystems32.dllMD5
b08214bf264103819d8f4acb0ee405bf
SHA147022962ab1ecce56637717b61c53141cac08994
SHA2565c2bd34dc72468abf4af44989791e6dbe526735f2f42c4e3737ddd2e82c31352
SHA51267bd23b4cc79c55244e957e7ece438c475ecbcea72409402890f3c78b658b23cf3b9917bb4995d38fff017c56e3cd01300564917b41da426e75e1e7c2b24e31e
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\c2rintl.en-us.dllMD5
73eb617dc2d2c809bd729b40c3516638
SHA1b77d4c548936ef8a18d4f3b58b09a9064b304f42
SHA256fae187f5c35801adb694a561edeb9310dc0d4816587cd86d4548277014ff5d54
SHA512931d41ce892a2dc3c6dd9c80dcaa166713f7fc3d5e31c4a8dd1730a36bd68a54522bd2591e5b09a075b88a064fdd254efebf9fdfab662c41c5330f603e79eb2f
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\repoman.dllMD5
e0d7d6ef9a89793ae929f551ff70f439
SHA1ae4b8be1a993c02c2e5f36de0f06fb0d503555b8
SHA2563ca6e75b244239f9c39e399792acf74c6bb4474e8571abfcbfc21ff39af99524
SHA51293deeeea36898b48804c4e4a6381434c8974035df986a8bb8cc688d251e84e94042549ab40021e1a4ed09dfcec1b4a91953c7b4f172165561f11f17fa1a7160e
-
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exeMD5
121b3ef38dca50030b4a03138468f034
SHA19d745cd87258f90e44a124df8dd8d9d86e057c2e
SHA256dfa4af56c8f01280182618667201f123cd1d7555fcfdce0945056fabd0045566
SHA51263d6d7f51e11c357efc771ded36c2c4d001eed4fc087794d05fbc58baa20bf3f819aeb0a5b8f4b7c929c261eb39957225af480ef9e4a3de02fb4345f56d942d9
-
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exeMD5
782fc534737ec5d85fa226b9b4b7e1c8
SHA1b5a53d806c74f29fa027717243a852384f5fbe20
SHA2561193b9810bb4842bc8e52c84e6d090ad7b42879d1090079ebf4e37376ef2ca88
SHA5127a54c04d061e95481f840ebc15e5680075b7f0d00d5f481b7fd450c8fdc3c7229f057188b8fda9afa097d86507e840d3d9e2ca72ece38684cbfc899d4f9e8e12
-
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exeMD5
782fc534737ec5d85fa226b9b4b7e1c8
SHA1b5a53d806c74f29fa027717243a852384f5fbe20
SHA2561193b9810bb4842bc8e52c84e6d090ad7b42879d1090079ebf4e37376ef2ca88
SHA5127a54c04d061e95481f840ebc15e5680075b7f0d00d5f481b7fd450c8fdc3c7229f057188b8fda9afa097d86507e840d3d9e2ca72ece38684cbfc899d4f9e8e12
-
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.logMD5
54176ec6eaef90744f5c2f7bb7614825
SHA13b302e4d62cb5811779cd18939f7b40484e7dead
SHA256c7baa57ca88fe15a03be7bbd16f8b0b87c76482291302de57bc1410e360992ef
SHA51228a0f7e32cd291bdead87fa5f3d24512d32e372fc442d142628a681eabb6701ebeaaae3d6782d6e2d1ba438414479dec93a5afd43b7773fdcac18991008a26cc
-
C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.dbMD5
8665de22b67e46648a5a147c1ed296ca
SHA1b289a96fee9fa77dd8e045ae8fd161debd376f48
SHA256b5cbae5c48721295a51896f05abd4c9566be7941cda7b8c2aecb762e6e94425f
SHA512bb03ea9347d302abf3b6fece055cdae0ad2d7c074e8517f230a90233f628e5803928b9ba7ba79c343e58dacb3e7a6fc16b94690a5ab0c71303959654a18bb5da
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractiveMD5
895f56745ea4e9d1fbc2d953ed6e9306
SHA1b0f134779cec71e588a74818705ea66d58842198
SHA256d3a0999d24ff33f4c4cdfff3417fcefafdfcace8f752677b868a367f07a37d87
SHA5128a9b199026db1e003668c164c8f96fa090acb14210aaa8e7dff54e207ef7524566034f13299d60fdcf356f8db377920f9b6f43596457e96c41dac3c63ce30e94
-
C:\Users\Admin\AppData\Local\Temp\Office.ValidateError.scratchMD5
bd3457e50947d4280734e74b51b5b68d
SHA1424635c6b5622a6c01a59d290a1c9ab8e593effc
SHA25623d647979bc5dc186de5ba3e00a222a912ab8e4782eb6407efa70e29e95979f5
SHA512e83e3615a5e94af288eb1c9b92f55e271765cc43531ec94574371debf63c0c4a58327b6fd8a4775bfba8a3234220cb0396b6d33164309a09a1d826c0689143fb
-
C:\Users\Admin\AppData\Local\Temp\Office.ValidateError.scratchMD5
bd3457e50947d4280734e74b51b5b68d
SHA1424635c6b5622a6c01a59d290a1c9ab8e593effc
SHA25623d647979bc5dc186de5ba3e00a222a912ab8e4782eb6407efa70e29e95979f5
SHA512e83e3615a5e94af288eb1c9b92f55e271765cc43531ec94574371debf63c0c4a58327b6fd8a4775bfba8a3234220cb0396b6d33164309a09a1d826c0689143fb
-
C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratchMD5
21438ef4b9ad4fc266b6129a2f60de29
SHA15eb8e2242eeb4f5432beeec8b873f1ab0a6b71fd
SHA25613bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
SHA51237436ced85e5cd638973e716d6713257d692f9dd2e1975d5511ae3856a7b3b9f0d9e497315a058b516ab31d652ea9950938c77c1ad435ea8d4b49d73427d1237
-
C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratchMD5
21438ef4b9ad4fc266b6129a2f60de29
SHA15eb8e2242eeb4f5432beeec8b873f1ab0a6b71fd
SHA25613bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
SHA51237436ced85e5cd638973e716d6713257d692f9dd2e1975d5511ae3856a7b3b9f0d9e497315a058b516ab31d652ea9950938c77c1ad435ea8d4b49d73427d1237
-
\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dllMD5
cc2b3930ea10d482dfa35233adb38bce
SHA1d7243b76955e18f0b43632fdce3e3fdb21226d85
SHA256d97d46b602bc3b9187a3aa80e13ce7c1ca6cdd6d3ad9e5f8c56448681055b46e
SHA512ee5dc4ad9d2168964b8e61eaa7edbeac6cef83d24e00fb5af9e783607c56186ac161907cffb1ad2c3e0d1a24b2cd81421bb12e2a647f93ce087253ff7897b739
-
\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dllMD5
cc2b3930ea10d482dfa35233adb38bce
SHA1d7243b76955e18f0b43632fdce3e3fdb21226d85
SHA256d97d46b602bc3b9187a3aa80e13ce7c1ca6cdd6d3ad9e5f8c56448681055b46e
SHA512ee5dc4ad9d2168964b8e61eaa7edbeac6cef83d24e00fb5af9e783607c56186ac161907cffb1ad2c3e0d1a24b2cd81421bb12e2a647f93ce087253ff7897b739
-
\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dllMD5
cc2b3930ea10d482dfa35233adb38bce
SHA1d7243b76955e18f0b43632fdce3e3fdb21226d85
SHA256d97d46b602bc3b9187a3aa80e13ce7c1ca6cdd6d3ad9e5f8c56448681055b46e
SHA512ee5dc4ad9d2168964b8e61eaa7edbeac6cef83d24e00fb5af9e783607c56186ac161907cffb1ad2c3e0d1a24b2cd81421bb12e2a647f93ce087253ff7897b739
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVCatalog.dllMD5
544877c1af95dcd2de43dffebb9a10ad
SHA1bf43d8ebcbdfd0f2175788ff68974b073c8606a8
SHA25645ac7bf2afd7f59eadc9d8797f5052e5c9ba8cbd499cd8b7487ea43193529985
SHA51210bdeec5c7a5e4f28bca9efd9d5b9e101eb401d19f0cb6d305e504bf680996ecae6249e6f61933e6715a8210d8ffa751a256bf29769533aaba6f5d2fdf6d2c9d
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dllMD5
27312ec34a5452d4070ccca50e8ce55d
SHA191a6430607a78f588531c68d4ad6b3e34253c19b
SHA256ead0f91bdca233199f69970f788c33bb9ad45ad774b90a44e2f95cb701051b78
SHA5121365d149f91cdcc871633bdbc5b7034ef034d2e101d6e96d4f628edf589497315974ec1ad948b2b6ae8ea47c52fd62865a4569f14972f9e1a8d571d70d3a0bfb
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVIntegration.dllMD5
3286c112ff9a603008822d53827aaeb5
SHA119db18066701aa465dec35741feeb17d0df068be
SHA2560d31ad541270c495236264ec416509d23c3166147bd9ad0dca38a7fb277d2a79
SHA5128ea06f68cea12c33839a7a2392c41b327143adc393ea4bf6889e98e97094d6329b4a18eb380aa6d66285442fb2cd5bf81b8afbcc834a83db7c0896afbe41919b
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvApi.dllMD5
3c85cb2d2e4b9312d39983115f4b7988
SHA1ad24746acb90a819b3b146a2774a19da17873e1f
SHA2564f45a7f0829ffef4dd0e083ceccd0d4987da6b3a889d7bc1a8071de43efdf63a
SHA512b11fb96b4adf4f2c8139c7c230530660029cb100a924846857cd753e7dac2e70b6278acc02a15936e78fe845f4db3416e942cd167dc134bd11e479aba661957c
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvStreamingManager.dllMD5
cae5364f833e5da957bbfd9be4fc209f
SHA1a66b96edad93ad3fa8f9314b001cf796f40641b2
SHA2565d98e973b1ab9b532c610105d9f82316ae9d3ecea1afc0574ae6f7423bf05400
SHA5127fb14d7c9785c44e0d6da1d52916f3ee6b2c56111e4f110df53fee249979ba57f52bc90ddb363a6be35003efbc6b4493505a608bc9fa6a342005b895ea2bcf08
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvSubsystemController.dllMD5
af903d45c9b5e57ed44dd74fb71db058
SHA180c098a6c6df6671767191dae211f658f47ead1c
SHA256f7d4668d289d1aaf3c5dba545b23c02c2719494d0e63620ff17ba4fe3b003cf3
SHA512d1bf3599917c75c4c8d4fb3f498423b5b0857cb8edaeb0b304e4432602fc1234130308905ff59b4b03e554c2242e66c5932d2d6d56c7fdb47fc6ae98d0efcf31
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvVirtualization.dllMD5
6dc8dcb1f8d25626061a5f7b8c00e1fb
SHA12a153334c8c7c6a43bb33d404cb8dac69b78186a
SHA2569dac9604746a1dc8c65964ed1c4f357d7b52348538c3e711accfa20a09a84d82
SHA5124663b3df8f0b717440518a1e587263e969cd83c4faccbceda83f35c3533a03a2f0fdcc142e44f1da48b4002ee4ab0c2930f1a91f61a31edc9841453ec4f052ae
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVManifest.dllMD5
b34b3761b55dcb33626fa3161eb15fee
SHA103ceb80844ad9b5ecfbe731ce49f40d6e58334d2
SHA2561b344aa0875aeb12cd2d037411c5b97622ade52d6a40c5bf336355d79371ae64
SHA512772f6c26e8b15c8c054c5aa72f371f4234cfa3dad82edf7b21ae89509500ffb2db75123f1faafcf8eeb466259a54425a8bc563539a9ac50676dd95f6a1a32a7f
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVOrchestration.dllMD5
5046c0734d201fcff86da3ae826cfeee
SHA17c55fb67861742ff6aed202ac7d2064f85e486eb
SHA2565879eafe7a6e2418a8acb25bd00e4fa78170259610fa8a11e8e1e4cedc30cd6b
SHA51237ac546f7d0634812574122a8c3f3ee4d9fa57b67deb6b96ccf34c4be60787f7678a8ef8eed927e8595e0859648fec7b144385b4410e13ec91aa6cec2c734739
-
\Program Files\Common Files\microsoft shared\ClickToRun\AppVPolicy.dllMD5
3fac26f8941a87c077006422f1fd2d50
SHA19f1401d3b17136e2ae15075d0c7fbe88e1bcebb3
SHA256f3e8d273ffd5453a19a4ead39a3c56a8d3581d9e972177d65422d7e338125a1c
SHA51291e879b9b007346e2330ec7f0a06232788dbe50db13a2c3bd589aac36d0bc7bb4bc1c0428b684a72dd0e47afe03925d27ee9f65a531a742704cd3a89436d8091
-
\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dllMD5
73eb617dc2d2c809bd729b40c3516638
SHA1b77d4c548936ef8a18d4f3b58b09a9064b304f42
SHA256fae187f5c35801adb694a561edeb9310dc0d4816587cd86d4548277014ff5d54
SHA512931d41ce892a2dc3c6dd9c80dcaa166713f7fc3d5e31c4a8dd1730a36bd68a54522bd2591e5b09a075b88a064fdd254efebf9fdfab662c41c5330f603e79eb2f
-
\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dllMD5
73eb617dc2d2c809bd729b40c3516638
SHA1b77d4c548936ef8a18d4f3b58b09a9064b304f42
SHA256fae187f5c35801adb694a561edeb9310dc0d4816587cd86d4548277014ff5d54
SHA512931d41ce892a2dc3c6dd9c80dcaa166713f7fc3d5e31c4a8dd1730a36bd68a54522bd2591e5b09a075b88a064fdd254efebf9fdfab662c41c5330f603e79eb2f
-
\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dllMD5
73eb617dc2d2c809bd729b40c3516638
SHA1b77d4c548936ef8a18d4f3b58b09a9064b304f42
SHA256fae187f5c35801adb694a561edeb9310dc0d4816587cd86d4548277014ff5d54
SHA512931d41ce892a2dc3c6dd9c80dcaa166713f7fc3d5e31c4a8dd1730a36bd68a54522bd2591e5b09a075b88a064fdd254efebf9fdfab662c41c5330f603e79eb2f
-
\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dllMD5
73eb617dc2d2c809bd729b40c3516638
SHA1b77d4c548936ef8a18d4f3b58b09a9064b304f42
SHA256fae187f5c35801adb694a561edeb9310dc0d4816587cd86d4548277014ff5d54
SHA512931d41ce892a2dc3c6dd9c80dcaa166713f7fc3d5e31c4a8dd1730a36bd68a54522bd2591e5b09a075b88a064fdd254efebf9fdfab662c41c5330f603e79eb2f
-
\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.dllMD5
9b2928440830f5557b55243f5690c072
SHA11a8c55fdc946d7dc7bddeee110b3190c5d488cda
SHA256062fb7d5dd121d031acca2b845272fa9da7d21e522053e43dc7beaa28a012b96
SHA51254fd4e3a8fdd242156c38ff5bafd253e502522359b9be08dd50fa2db692a57c28c373a84c259c747d3ca3926e614af003e951981d2f230a0d0698092dd5c5f9f
-
\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.dllMD5
9b2928440830f5557b55243f5690c072
SHA11a8c55fdc946d7dc7bddeee110b3190c5d488cda
SHA256062fb7d5dd121d031acca2b845272fa9da7d21e522053e43dc7beaa28a012b96
SHA51254fd4e3a8fdd242156c38ff5bafd253e502522359b9be08dd50fa2db692a57c28c373a84c259c747d3ca3926e614af003e951981d2f230a0d0698092dd5c5f9f
-
\Program Files\Common Files\microsoft shared\ClickToRun\RepoMan.dllMD5
e0d7d6ef9a89793ae929f551ff70f439
SHA1ae4b8be1a993c02c2e5f36de0f06fb0d503555b8
SHA2563ca6e75b244239f9c39e399792acf74c6bb4474e8571abfcbfc21ff39af99524
SHA51293deeeea36898b48804c4e4a6381434c8974035df986a8bb8cc688d251e84e94042549ab40021e1a4ed09dfcec1b4a91953c7b4f172165561f11f17fa1a7160e
-
\Program Files\Common Files\microsoft shared\ClickToRun\StreamServer.dllMD5
41a43383922e9e6ffab3ea06a7280686
SHA117cd7ad5a61488d1c6b489254193e6955bd60d7f
SHA256d537afe5f824c4bb38c8dc42c0c3e74b1330fc7444ef438f7f608ddc208ad50c
SHA512d59cc8b85fc559b23c6c9c98f324efaf8d181ac86577f5cbedbfd97c132f010044d986da7f8fccb325d42417012bc1b608ae41c31adbcce78864c4e7b5d06846
-
\Program Files\Common Files\microsoft shared\ClickToRun\msix.dllMD5
3fb73294dd0a16d24755743210a709c2
SHA1141b831c4e2848cfb870bc35e2a27acf2b38edeb
SHA256a4660ce9df336dfd1974bcfceed10433834e71a36918d8cb5f030c35a6bcaa32
SHA512243c39c26a9a7967df25624dcf8fc4549673399c87f49788c19ff8683ef344f1dc33adba9a1fbe31e468231a5d4584c552df5eed18e91ba264885e010daf6b74
-
\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dllMD5
c15a199252046e54b2447ac8a23a4f5f
SHA1f9d6fc729ff7f03494a5f1f51b9693a7df689a7b
SHA25618bc3e55806b676abbc598d1a4331b80ef4a7931101683b5080d0194a47e67cf
SHA5120505ec128700604ed48c8bd385eb5e158d58ddc0e5f85f31424e96ac101e163bf3f344a8f1c3820bf63e63b18ee9cf0899f50c0b41b2dfd53e5d227a7aa4e855
-
\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dllMD5
c15a199252046e54b2447ac8a23a4f5f
SHA1f9d6fc729ff7f03494a5f1f51b9693a7df689a7b
SHA25618bc3e55806b676abbc598d1a4331b80ef4a7931101683b5080d0194a47e67cf
SHA5120505ec128700604ed48c8bd385eb5e158d58ddc0e5f85f31424e96ac101e163bf3f344a8f1c3820bf63e63b18ee9cf0899f50c0b41b2dfd53e5d227a7aa4e855
-
\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dllMD5
c15a199252046e54b2447ac8a23a4f5f
SHA1f9d6fc729ff7f03494a5f1f51b9693a7df689a7b
SHA25618bc3e55806b676abbc598d1a4331b80ef4a7931101683b5080d0194a47e67cf
SHA5120505ec128700604ed48c8bd385eb5e158d58ddc0e5f85f31424e96ac101e163bf3f344a8f1c3820bf63e63b18ee9cf0899f50c0b41b2dfd53e5d227a7aa4e855
-
\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dllMD5
845a3a6471fb853d0d218518e4c48f8c
SHA1ab4bad2575ab028b0cba13bb445e3c6dd965fb13
SHA25648140e727d1f2438f4fab1e08632ba9c5c928b6c1a4584758391a4fe9d7d978d
SHA512f0a13125a1e1904a9c2483295bd770106485dc1f31bbdb7d3f11ed48d9f7e8282ab46a070f57c82ef19c933608ce29abf6ef5744a61ed608b6026504194ce19f
-
\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dllMD5
845a3a6471fb853d0d218518e4c48f8c
SHA1ab4bad2575ab028b0cba13bb445e3c6dd965fb13
SHA25648140e727d1f2438f4fab1e08632ba9c5c928b6c1a4584758391a4fe9d7d978d
SHA512f0a13125a1e1904a9c2483295bd770106485dc1f31bbdb7d3f11ed48d9f7e8282ab46a070f57c82ef19c933608ce29abf6ef5744a61ed608b6026504194ce19f
-
\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dllMD5
845a3a6471fb853d0d218518e4c48f8c
SHA1ab4bad2575ab028b0cba13bb445e3c6dd965fb13
SHA25648140e727d1f2438f4fab1e08632ba9c5c928b6c1a4584758391a4fe9d7d978d
SHA512f0a13125a1e1904a9c2483295bd770106485dc1f31bbdb7d3f11ed48d9f7e8282ab46a070f57c82ef19c933608ce29abf6ef5744a61ed608b6026504194ce19f
-
\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140_1.dllMD5
6feeb6ba00dfee9cf3a2e4c6905af7f1
SHA15f7a7a74f9a7de8a344299bf966c0723da26a056
SHA256092e91d8b179ce00c2a139afed85fc478632841e906e44b7ec2fb67268f5aef5
SHA512a008c0df0796067fac98cf04dd2c2ef7e7b0c7248f92f6fb7c346ad77b72d45c60347f7cb974a81fd311408ba74822230f9b1a248ab1b4b06c54c13372d2bb4b
-
\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140_1.dllMD5
6feeb6ba00dfee9cf3a2e4c6905af7f1
SHA15f7a7a74f9a7de8a344299bf966c0723da26a056
SHA256092e91d8b179ce00c2a139afed85fc478632841e906e44b7ec2fb67268f5aef5
SHA512a008c0df0796067fac98cf04dd2c2ef7e7b0c7248f92f6fb7c346ad77b72d45c60347f7cb974a81fd311408ba74822230f9b1a248ab1b4b06c54c13372d2bb4b
-
\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140_1.dllMD5
6feeb6ba00dfee9cf3a2e4c6905af7f1
SHA15f7a7a74f9a7de8a344299bf966c0723da26a056
SHA256092e91d8b179ce00c2a139afed85fc478632841e906e44b7ec2fb67268f5aef5
SHA512a008c0df0796067fac98cf04dd2c2ef7e7b0c7248f92f6fb7c346ad77b72d45c60347f7cb974a81fd311408ba74822230f9b1a248ab1b4b06c54c13372d2bb4b
-
memory/2076-204-0x0000000009230000-0x0000000009231000-memory.dmpFilesize
4KB
-
memory/2076-198-0x0000000008C90000-0x0000000008C91000-memory.dmpFilesize
4KB
-
memory/2076-142-0x0000000008C80000-0x0000000008C81000-memory.dmpFilesize
4KB
-
memory/2076-127-0x0000000007EA0000-0x0000000007EA1000-memory.dmpFilesize
4KB
-
memory/2076-114-0x0000000000000000-mapping.dmp
-
memory/2076-117-0x0000000006730000-0x0000000006731000-memory.dmpFilesize
4KB
-
memory/2076-126-0x0000000008050000-0x0000000008051000-memory.dmpFilesize
4KB
-
memory/2076-125-0x00000000075E0000-0x00000000075E1000-memory.dmpFilesize
4KB
-
memory/2076-147-0x0000000009010000-0x0000000009011000-memory.dmpFilesize
4KB
-
memory/2076-176-0x000000007F9C0000-0x000000007F9C1000-memory.dmpFilesize
4KB
-
memory/2076-177-0x00000000068C3000-0x00000000068C4000-memory.dmpFilesize
4KB
-
memory/2076-124-0x0000000007780000-0x0000000007781000-memory.dmpFilesize
4KB
-
memory/2076-197-0x0000000009140000-0x0000000009141000-memory.dmpFilesize
4KB
-
memory/2076-135-0x0000000008CA0000-0x0000000008CD3000-memory.dmpFilesize
204KB
-
memory/2076-203-0x0000000009A80000-0x0000000009A81000-memory.dmpFilesize
4KB
-
memory/2076-123-0x0000000007530000-0x0000000007531000-memory.dmpFilesize
4KB
-
memory/2076-122-0x0000000007710000-0x0000000007711000-memory.dmpFilesize
4KB
-
memory/2076-121-0x0000000006E10000-0x0000000006E11000-memory.dmpFilesize
4KB
-
memory/2076-120-0x00000000068C2000-0x00000000068C3000-memory.dmpFilesize
4KB
-
memory/2076-118-0x0000000006F00000-0x0000000006F01000-memory.dmpFilesize
4KB
-
memory/2076-119-0x00000000068C0000-0x00000000068C1000-memory.dmpFilesize
4KB
-
memory/2800-320-0x0000000000000000-mapping.dmp
-
memory/2912-357-0x0000000000000000-mapping.dmp
-
memory/4056-233-0x0000000004CA2000-0x0000000004CA3000-memory.dmpFilesize
4KB
-
memory/4056-231-0x0000000004CA0000-0x0000000004CA1000-memory.dmpFilesize
4KB
-
memory/4056-216-0x0000000000000000-mapping.dmp
-
memory/4056-307-0x000000007F280000-0x000000007F281000-memory.dmpFilesize
4KB
-
memory/4056-308-0x0000000004CA3000-0x0000000004CA4000-memory.dmpFilesize
4KB