Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
23/03/2023, 14:54
Static task
static1
Behavioral task
behavioral1
Sample
OfficeSetup.exe
Resource
win10v2004-20230220-en
General
-
Target
OfficeSetup.exe
-
Size
7.0MB
-
MD5
07adcb1942238af49ffddb1bfebdc0b4
-
SHA1
5a69972af991ef7b7f44ae1ea1d93ef45e19a74f
-
SHA256
4a5c3925f2b5a6650af073e180f17357ccaa7c19aeef9e3f4fd6486a17a1772b
-
SHA512
08f06af0b75077822215204fc32fc60667fccb49b74ec76f549655f7cb9668dd109b6ae6da0feae053b9b5693dc1982d80857492b771641827b1f761b8fe6f65
-
SSDEEP
196608:cqq9dY2LVcIF20bI0fg4oMOLz3dNH+tJTwcuis:cqeY2ZF7I0oTMOHCjTwcLs
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 3 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation OfficeSetup.exe Key value queried \REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation OfficeClickToRun.exe Key value queried \REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation OfficeC2RClient.exe -
Executes dropped EXE 3 IoCs
pid Process 3112 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 3868 OfficeC2RClient.exe -
Loads dropped DLL 34 IoCs
pid Process 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 3868 OfficeC2RClient.exe 3868 OfficeC2RClient.exe 3868 OfficeC2RClient.exe 3868 OfficeC2RClient.exe 3868 OfficeC2RClient.exe 3868 OfficeC2RClient.exe 3868 OfficeC2RClient.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry 2 TTPs 8 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer OfficeSetup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName OfficeSetup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName OfficeClickToRun.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120663v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703700v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702101v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701651v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120675v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120602v10.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701051v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703600v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703951v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702851v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10626v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10819v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11446v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703901v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule224901v11.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120402v18.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700201v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701801v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10808v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120631v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120647v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120678v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702701v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230171v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703751v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702051v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700101v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700951v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120635v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120638v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120645v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120677v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702700v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11793v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120610v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702651v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10906v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11285v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11499v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11768v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701951v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701550v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10907v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120665v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700350v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700950v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700500v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700251v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702401v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230162v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule12019v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule460009v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120601v3.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702550v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703950v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701101v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10807v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10879v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10940v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11190v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120642v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704050v0.xml OfficeClickToRun.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.es-mx.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\inventory.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\SharedPerformance.man OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll.bak OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\concrt140.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\OfficeClickToRun.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-core-localization-l1-2-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RHeartbeatConfig.xml OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.de-de.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RUI.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-core-file-l1-2-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-utility-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.it-it.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-conio-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.hr-hr.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.he-il.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.pt-pt.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\i640.hash OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\officesvcmgrschedule.xml OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-stdio-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\appvcleaner.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\AppVIntegration.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.en-us.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\FrequentOfficeUpdateSchedule.xml OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\officeinventory.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\MavInject32.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\OfficeC2RClient.exe OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe.bak OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\RepoMan.dll.bak OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-core-synch-l1-2-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-time-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\AppVClient.man OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.sv-se.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-private-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.ja-jp.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.sl-si.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.zh-cn.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\IntegratedOffice.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-convert-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\AppVIsvApi.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.da-dk.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.fr-fr.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.ar-sa.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.sk-sk.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\StreamServer.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-runtime-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\AppVShNotify.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.kk-kz.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\officesvcmgr.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\RepoMan.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-core-timezone-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\c2r32werhandler.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.fr-ca.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.nl-nl.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2R32.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.uk-ua.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\msix.dll.bak OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\api-ms-win-crt-environment-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.pt-br.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\SubsystemController.man OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\AppVFileSystemMetadata.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\C2RINTL.ko-kr.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16130.20332OfficeC2R7D839AA9-DA2C-4456-A9DC-8CB5C8683CE1\OfficeOEMPlugin.dll OfficeClickToRun.exe -
Checks processor information in registry 2 TTPs 15 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeSetup.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeC2RClient.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeSetup.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeSetup.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe -
Enumerates system info in registry 2 TTPs 15 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeSetup.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeSetup.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeSetup.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe -
Modifies data under HKEY_USERS 64 IoCs
description ioc Process Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "2" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|0" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.3 = 22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e506f77657251756572792e53616665457863657074696f6e48616e646c696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e506f77657251756572795468726f774f75744f664d656d6f7279457863657074696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4578706572696d656e746174696f6e2e44796e616d6963447069222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4578706572696d656e746174696f6e2e4665617475726551756572794c6f676765722e456e61626c655374617469634c6f6767696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e416c6c6f7752657374617274466f72436c6f7564446f63756d656e745632222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4261636b67726f756e6455706c6f616457696e3332456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e434c502e5265706c61636557434c6162656c4f6e504c4368616e6765222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e436163686546696c6552756e74696d654e65774c6f636b696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4368616e6765476174652e4973496e766f6b654d6f64656c4f6e436c69636b73456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e436865636b466f72436f6175746852657175657374222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e436865636b5265766973696f6e53747265616d457175616c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e436f6c6c616250726f7053746f72654361636865456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e446176536572766572436865636b456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e446f63732e4d736f2e4f757473706163652e496e6974436163686546726f6d464948222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e446f776e6c6f6164467261676d656e7453697a65222c20225622203a2022696e7436345f747c313637373732313622207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e44796e616d6963467261676d656e7453697a65222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c654163636573734d6f64654d616e6167657243616d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c6542617463685363686564756c6572466f72636543616e63656c6c6174696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c65436163686546696c6552756e74696d654f7065726174696f6e42696e64696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c65446f63756d656e744d6f64654d616e6167657243616d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c654d6f766543616d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c655265636f6e63696c657243616d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c6552656d6f74654d6f766543616d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c6553617665526571756573744d616e6167657243616d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e456e61626c65576f726b696e67436f707943616d526573746f7265222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4772617068415049466f724f44456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e496e74656772617465546f5265736f75726365496e666f222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4c697374656e546f486f73744e6f74696669636174696f6e73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4c6f636b4672656552657175657374547261636b6572456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4d6f63736944656665727261626c65426c6f6273222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4d6f6373695761746368646f674661696c757265486973746f7279222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4f6d697455706c6f6164426c6f636b6564466f7242617365446f776e6c6f61644661696c757265222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e4f6e654472697665436f6e76657267656e6365456e6c69676874656e6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e5265666163746f7265644d6f63736953796e634368616e6e656c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e5265667265736855706f6e526573746f726174696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e52756e74696d655472616e73616374696f6e52656d6f766564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e53656e6454656c656d657472794576656e74466f72416c6c4572726f7273222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e536572766572496e666f4d736f446176436865636b456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e536572766572496e666f52657472794c696d6974456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e53686172696e6753756767657374696f6e46656174757265222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e53686172696e6753756767657374696f6e5573654f72636155726c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e53686f756c6441646450726f746f636f6c48616e646c65724f726967696e506172616d73222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e536b6970556e636f6d70617261626c65446f776e6c6f61645265766973696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e5374616e64617264456e6372797074696f6e50726f7669646572496e557365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e537562736372696265546f456469746f72735461626c654e6f74696669636174696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e54657374476174652e4f6463436c69656e74466c69676874696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e556e6c6f636b4f6e506970656c696e65416363657373222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e556e7365745265736f757263654964496646696c655761734e6f745361766564546f536572766572222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e556e74616e676c6541757468466f72416c6c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e556e74616e676c654175746846726f6d5349222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e5573654261636b67726f756e64506f7374222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e46696c65494f2e56616c69646174654d617050617468734c697465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e44656661756c744368616e6e656c436f6f6c646f776e2e42616e6e6572222c20225622203a2022696e7436345f747c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e496e7369646572546f6173744c61756e63686572456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e497353757276657950726f6d70744475726174696f6e456e61626c656441734c6f6e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e4973537572766579546f6b656e456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e4d617843616d706169676e73506572417070222c20225622203a2022696e7436345f747c323522207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e4d6178446961676e6f73746963436f6c6c656374696f6e73506572417070222c20225622203a2022696e7436345f747c323022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e50726976616379436865636b466f724e6f6e436f6e74726f6c6c657253657276696365466f72537572766579222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e466c6f6f64676174652e53757276657973456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e476c6f62616c2e54656d706c617465732e50726566657245646974696e674c6f63616c65222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e416c7454657874426172466565646261636b55495265706f7274456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e4175746f416c74546578744f7074696f6e466978456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e4368616e6765476174652e4643616d656f4572726f7248616e646c696e67222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e4368616e6765476174652e485641547970696e67496e536861706573222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e44656c657465456469746f724561726c7952657475726e4f6e5265656e747279222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e456e61626c654368616e676550696374757265436f6d6d616e64466f72426c697046696c6c73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e456e61626c65496e6b4d696e7574657354656c656d747279222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e456e61626c654f7074696d616c52656374616e676c654f6e416c6c5465787475726573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e457874656e64506c61795365636f6e64734f6e49646c65222c20225622203a2022696e7436345f747c31353022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e49636f46696c746572456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e5356474c6f616446726f6d4c6f63616c46696c6573797374656d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e536b69704661696c656446436f70794f50544573496e46436f7079222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e55736541726344656275674c61796572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e5573654c6f6754656c656d65747279466c6167222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e47726170686963732e5573654c6f676963616c445049466f72566563746f72496d6167655265736f75726365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e48656c702e496e636c756465436f6d6d616e6454797065222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e4368616e6765476174652e456e61626c6553534f466f72536f7665726569676e4163636f756e74735573696e6757414d222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e4368616e6765476174652e46656465726174696f6e496e666f457870697265222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e4368616e6765476174652e50617373486561646572546f467053657276696365222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e456e7375726550726f66696c65466f725072696d6172794964656e746974696573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e46472e45787465726e616c576974686f7574486f6d6554656e616e74222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e46656174757265476174652e45786368616e67654f6e5072656d4d6f6465726e41757468456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e46656174757265476174652e46616d696c794f6641756469656e636573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e46656174757265476174652e50617373486561646572546f467053657276696365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4964656e746974792e46656174757265476174652e53686f756c6446656465726174696f6e5072 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ExternalFeatureOverrides\officeclicktorun OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=1033&build=16.0.16130&crev=3 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|5" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|7" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\VersionId = "uint16_t|0" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\LastClean = 307c23d09f5dd901 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.8 = 616e676564416374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6f6164436f6d6d656e74416374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368436c6f7365566965774576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368436f6e74657874437265617465644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2244697370617463684f70656e566965774576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368566965774368616e6765644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368426567696e44726166744576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2244697370617463684361706162696c69746965734368616e6765645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368436f6d6d656e74734368616e6765644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368436f6d6d656e7453656c65637465644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368437265617465436f6d6d656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368446f634368616e6765644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368456e64436f6d6d656e7453657373696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368456e6444726166744576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2244697370617463684576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368466f63757350616e655472696767657265644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368496e6974436f6d6d656e7453657373696f6e4173796e635c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368496e697469616c52656e646572436f6d706c657465644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469737061746368496e76616c69644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2244697370617463684c6f6164546872656164735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446973706174636850616e654368616e6765644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446973706174636850616e65466f63757353746174654368616e6765644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446973706174636850616e65546f52656e6465724576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446973706174636853656c656374436f6d6d656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446973706174636853657448616c6650616e65446973706c61794d6f64655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2244697370617463685468656d654368616e6765645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446973706174636844656c657465436f6d6d656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224469736361726444726166745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436c656172436f6d6d656e7453656c656374696f6e416374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22486f6d65506167655c22203a207b205c224576656e74735c22203a207b205c22506c6163654368616e6765536c6162436f6e646974696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e53686f77486f6d65506167655c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c225365617263685c22203a207b205c224576656e74735c22203a207b205c225365656e4279557365725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c224f666669636553746172745c22203a207b205c224576656e74735c22203a207b205c22536574757054656d706c61746550726f706572746965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243757272656e745549416374697665506c6163654368616e67655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22547269676765725468756d626e61696c416374696f6e52756e5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22446f63756d656e744e6f74696669636174696f6e735c22203a207b205c224576656e74735c22203a207b205c2252656769737465724f6e49646c65466561747572654761746544697361626c65645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d7275536572766963654170695c22203a207b205c225375624e616d657370616365735c22203a207b205c22446f63756d656e74735c22203a207b205c224576656e74735c22203a207b205c2252656164526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225772697465526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e526571756573745375636365656465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22506c616365735c22203a207b205c224576656e74735c22203a207b205c2252656164526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225772697465526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6e526571756573745375636365656465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c224d736f53686172696e675c22203a207b205c224576656e74735c22203a207b205c22434d736f53686172696e675365727669636548656c706572456e64476574486f73744361706162696c69746965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572476574486f73744361706162696c69746965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e6447657455736572417474726962757465735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c70657247657455736572417474726962757465735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e644765744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065724765744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e645365744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065725365744c696e6b735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e644765745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065724765745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572456e645365745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c7065725365745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572436865636b5065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c70657247657453686172696e67496e666f726d6174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c706572426567696e5365745065726d697373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434d736f53686172696e675365727669636548656c70657247657453686172696e6756657273696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d6f6465726e4261636b73746167655c22203a207b205c224576656e74735c22203a207b205c224261636b737461676550616765436f6e74726f6c55736572437265617465436f6e74726f6c557365725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224465736b746f704261636b73746167654e617669676174696f6e5c22203a207b205c224576656e74735c22203a207b205c224e617669676174696f6e5461736b496e766f6b655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225461736b496e766f6b654f6e52656164466f6c6465725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224465736b746f7053686172696e675c22203a207b205c224576656e74735c22203a207b205c22436f6c6c616250616e6555736572536574436f6c6c616250616e654d6f64655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c616250616e6555736572436c69636b53686172696e674c696e6b5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c616250616e6555736572497343757272656e74446f63456e746572707269736550726f7465637465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22446f63756d656e7473536861726564576974684d655c22203a207b205c224576656e74735c22203a207b205c22446f63756d656e7473536861726564576974684d6552657175657374446f63756d656e7473536861726564576974684d654173796e635c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7473536861726564576974684d6552657175657374436163686564446f63756d656e7473536861726564576974684d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7473536861726564576974684d654964656e74697479436163686552657175657374526573756c745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7473536861726564576974684d6552657175657374436163686564446f63756d656e7473466f724661696c757265735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22486973746f727955585c22203a207b205c224576656e74735c22203a207b205c224163746976697479506167654d616e6167657252656769737465725669736962696c697479436f6e74726f6c6c65725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224275734261724f70656e4c6f63616c56657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434163746976697469657341676772656761746f72496e69745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22434163746976697469657341676772656761746f7252657475726e4572726f725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243437369446f63756d656e74537461746545787465726e616c556e7265676973746572446f63756d656e744c697374656e65725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243486973746f727941637469766974696573466163746f727952656672657368416674657252656e616d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f62616c744163746976697469657346696c6556657273696f6e4c697374557064617465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243536f61704461746150726f7669646572496e69745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765436c6f73655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765436f707956657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765436f707956657273696f6e496e7465726e616c5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f7279506167654372656174655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616765526573746f726556657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f72795061676553656c65637456657273696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22486973746f727950616e654e6f6e436c69636b61626c654974656d53656c65637465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6f63616c41637469766974696573426567696e526566726573685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224f6666696365436f6c6c61624163746976697479436f6d6d616e644d534f446f63756d656e7450726f76696465725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225368617265506f696e74436865636b4f757446696c65546f4c6f63616c466f6c6465725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f67676c65486964655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f67676c6553686f775c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225759574143616c6c6f757453686f7743616c6c6f75745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e416374697669747943616c6c6f757450726573656e7443616c6c6f75745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e41637469766974794765744c6173745669657754696d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e416374697669747946696e6443757272656e74557365724c6f67696e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22556e7365656e416374697669747943616c6c6f7574436c69636b65645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2253686f77536d616c6c53637265656e435759574143616c6c6f75745c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d7275416461707465725c22203a207b205c224576656e74735c22203a207b205c224872416464446f63756d656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c6163655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464446f63756d656e74576974684f7074696f6e7357697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c616365576974684f7074696f6e7357697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464446f63756d656e745061746857697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c6163655061746857697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464446f63756d656e74496e6465785c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464506c616365496e6465785c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22487252656d6f7665506174685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224872416464576974684f7074696f6e7357697468436f6e746578745c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22417070446f63735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e745c22203a207b205c225375624e616d657370616365735c22203a207b205c2241637469766174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6173744f70656e6564446f63756d656e744d657461646174615c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d6f6465726e446f6354656d706c617465536572766963655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225361766550726f6d707448656c7065725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e74436861745c22203a207b205c224576656e74735c22203a207b205c22446f63756d656e7443686174417661696c6162696c6974795274634c697374656e6572436f6e6e65637465644576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7443686174417661696c6162696c6974795274634c697374656e6572436f6e6e656374696e674576656e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f63756d656e7443686174417661696c6162696c6974795274634c697374656e6572446973636f6e6e65637465644576656e74 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.15 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|9" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=1033&build=16.0.16130&crev=3\0\EndDate = 40f28afa685ed901 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|2" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.10 = 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 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|13" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=1033&build=16.0.16130&crev=3\0\FilePath = "officeclient.microsoft.com\\63B9BA75-E910-49EB-88B3-0E9F30CC10FE" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ETag = "std::wstring|\"3eBLKZDJD5xL63OhPhZ3iRn+7alZhUdELnd23KM9lhA=\"" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry\Volatile OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSCategoriesSeverities = "1329 50,1329 10,944 15,943 6,1329 15,1329 100,1329 6,943 10,943 15,944 6,940 50,941 15,941 10,941 6,942 15,942 10,942 6,944 100,944 10,944 50,940 6,940 100,940 10,940 15" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\FirstSessionUpgradeCandidate OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSCategoriesSeverities = "1329 50,1329 10,1329 15,1329 100,1329 6" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry\Volatile\MsaDevice = "t=GwAWAbuEBAAUKFVEGReoCdHdlh1TorgVuqX+P2gOZgAAECpttB8oNAUuhV+pIEYo3MHgAH/J96iujXMX9jlrxvM8K62lbnfL3g/gXPXM2n2RxCQ++ethfNqlVsxcLniBJCtU8sjZkHQItnO/xlW2oOxZBs2tLmGB3BnjtkyJaKTg8vZUopefj7WTHpwpLVC+vB0grzPL+eXKxaAEM6+emleDSIEU2Am8wp+7Wd7CYvbNB90gNgRZEjEuvK29qciLW40mSA3GjrUF3FzaZu3dS7S03GxFloED9/4zbepfkITpCJVCaO2xB6h7wU2Qj/uSoUESWfVUE4FX125YtsnnWeoQLCdTlrttvxmY3L/BqpoYEVRkHQE=&p=" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.5 = 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 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.9 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|11" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.14 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\SessionId = 2c359b45c515c348a4586d3184871c06 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|10" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|15" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSTagIds0 = "577889346,5804129,7202269,9179409,24262478,41484365,17110988,7153487,17962391,17962392,3702920,3462423,3700754,3965062,24262474,4297094,7153421,3462365,18716193,7153435,7202265,41816131,20502174,6308191,18407617,39125643,539756558,17110992,17102418,595174594,593359442,24262477,25036127,24262473,9179410,6104718,9179411,51475283,41185282,39389248,539756557,528570079" OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Experiment\officeclicktorun\BuildNumber = "16.0.16130" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.6 = 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 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|14" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" OfficeClickToRun.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeBackupPrivilege 3112 OfficeClickToRun.exe Token: SeRestorePrivilege 3112 OfficeClickToRun.exe -
Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 3868 OfficeC2RClient.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 2612 OfficeClickToRun.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2972 OfficeSetup.exe 2168 OfficeClickToRun.exe 3112 OfficeClickToRun.exe 2612 OfficeClickToRun.exe 3868 OfficeC2RClient.exe 3868 OfficeC2RClient.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2972 wrote to memory of 2168 2972 OfficeSetup.exe 89 PID 2972 wrote to memory of 2168 2972 OfficeSetup.exe 89 PID 2972 wrote to memory of 2612 2972 OfficeSetup.exe 94 PID 2972 wrote to memory of 2612 2972 OfficeSetup.exe 94
Processes
-
C:\Users\Admin\AppData\Local\Temp\OfficeSetup.exe"C:\Users\Admin\AppData\Local\Temp\OfficeSetup.exe"1⤵
- Checks computer location settings
- Checks system information in the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2972 -
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=es-es productstoadd=O365ProPlusRetail.16_es-es_x-none cdnbaseurl=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version=16.0.16130.20332 mediatype=CDN sourcetype=CDN O365ProPlusRetail.excludedapps=groove updatesenabled=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.UseTeamsOnInstallConsumer=unknown flt.UseTeamsOnUpdateConsumer=unknown uninstallcentennial=True scenario=CLIENTUPDATE2⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
PID:2168
-
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=es-es productstoadd=O365ProPlusRetail.16_es-es_x-none cdnbaseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version.16=16.0.16130.20332 mediatype.16=CDN sourcetype.16=CDN O365ProPlusRetail.excludedapps.16=groove updatesenabled.16=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.UseTeamsOnInstallConsumer=unknown flt.UseTeamsOnUpdateConsumer=unknown uninstallcentennial=True2⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2612
-
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Drops file in System32 directory
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3112
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /progressandlaunch AppTargets="root\office16\excel.exe|root\office16\lync.exe|root\office16\msaccess.exe|root\office16\mspub.exe|root\office16\onenote.exe|root\office16\outlook.exe|root\office16\powerpnt.exe|root\office16\teams.exe|root\office16\winword.exe" ManualUpgrade=False ScenarioToTrack="Scenario:{477E0208-58BD-4F33-978A-09BCC9AA9EB1}@INSTALL"1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:3868
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
296KB
MD547df99fe851db855c5507328f660dcf5
SHA1195a33f0b91d6fda50d48c98c8e9bbfacfbf331b
SHA25615646e0312a8ac15305efb382ce658ca37e6d4e4b73f93387589fd1d8139e3db
SHA5125de2564d67dbf37ec38d40ac3b2d11fae4318744655941a763a514ed35d38fdf55694852789ca98d9e11c9ead5f997f8091d1413e20d511aba9aef1f8c46d5ea
-
Filesize
984KB
MD518ebc0da472b1efc4e8f6b6627cffc93
SHA120a7cf7558d8a7a5bbcc131cbaf4ba75d3f11815
SHA256624ab9c6838a88550ad5d906e86829778b5a9fce09a55a67eadcbb5806058c98
SHA512a443da09f063e6ba8711df6ac9c35aa26298356e3dcf819e7784b8641c609fa8fd5d30ec03964493790058b138534f342b65e0688b93e8fcd6d6aa772acd6f6d
-
Filesize
1.0MB
MD51c03d1935b5892738a188ba40cd5a223
SHA1b793c3918203f57468a7baa83e8d9e6e7b775545
SHA256d656c21853e185feb04c0decc52df277ed9d214e9ffa31b86ed34c682e1b5730
SHA512f9fa9def40ec3053f3a75ab2bc8e7c68c8b806be5bb80cda726ac8c08e3152c32db84a43a9e5775851bde0067d9ce9c8657a19850887171b0b206685318dbf40
-
Filesize
512KB
MD553b1a51bba995790be81e3c605938aca
SHA1f3bb041ad17ed935db365cd60cbaec5c298a9c2d
SHA256a304f6864f61933eabb3381231750c5b1f308c33b83e08fe60437e2c5bb01bb5
SHA512782a762c34ecc5ae3f8cd0f832211a49458ca532c2fc707a4731de83a2cd988598582afc79914c7c1db7de2fad3a9d26bc2a153131722bafb20f9ec11a8d716f
-
Filesize
596KB
MD5cf282ddd8d2cd281b2afb341bbbc7f8a
SHA18104ad996680c838c44743b1cc3149353c8bdb2b
SHA25691cc31c10bac6b042855d8a48c854ba57b8e2085ca427786416f418f3597860b
SHA512fed8069b200919471a21ac0b1d258f89f206bb6ed172b9b5a17e7d13b78fd825d25a33172adedec55cb89f225756f36daa9eec587eff52bf91df3752c2bd9de3
-
Filesize
1.6MB
MD5c01cc0200f3d889c68b503c68049ff62
SHA1338589ddb1ffb4422f06e75f62f0db1151741f5d
SHA256326bcb85652c67780d0193d78d5bab30e3668e6bcbcffcff304751b2f4518f54
SHA5128d072207da418ff170e843f2d97b0e52875b42d2d4b46882d5de08a4e98bf1b7788052c5c591aa70f72813fe2b692541c55920d6dbe22ef15b7ef8a9252da58a
-
Filesize
404KB
MD5fc0e1d121cdded19e7b98cd995bde281
SHA1102ebe6eb24cf598d559b305423b38896a8208cc
SHA2567ccc472997dc3d5080cac6918bbd7ba172a4e674f59b5721e7487cd9b101d64d
SHA5127077503a5265554f85364744385c4db557cc87f3540688f661c3f139e94cf107ceb2fdac51235a92030ce9dc19a411326ac720ff0925d9d28894afa4b3a0989c
-
Filesize
188KB
MD54d3d26e3dee4398c1127903171ceb1c3
SHA195e316fe28d10ab358eaf71cc1bc66e3912d55a0
SHA2563f54dc6589030ea96e0022e2a36624d9f8aba31a0940db4f2da3773739f5fd3c
SHA5127241f433e9c970d16658fc3498235804de128564c7be25afce9c3d75d14000e738a9cc8de343c339f47144f243250eb8918f4ddaef783fae1b0dae0a1d5bcb45
-
Filesize
1.0MB
MD5c11a2fd58229c692c39030a8247b2d24
SHA1880ed2315aaa6da88115d601e62ff15343a2dddd
SHA256e2df35a7d853c4a436cb3c62274f9f47347aa82765bc39d9142c5d7933924f0c
SHA5120f40eb4c8e29420a04f1f5f3662f57931238e91269692745fbaa979bdcbec9d23360258419aa723081743a70cb4b31dfb25203f6791024832ff7ef4913858956
-
Filesize
569KB
MD5ce44f80d1b763e431d33588d4b74d1e5
SHA195dcdfc80cc6d16e2be3e74bf398598988a2a01f
SHA256d1cdcde82af468feed1a8ac8826f40cf902d387605367be8437cc6dbbb3ebf6f
SHA512982faaec67f708db33717efd079f42691de1073ea84f5079e3d0ca2b565feb19b4014f3bd53bed893f81bc99b0bda00d6337b65bc63bc6bed3318a373e3272c9
-
Filesize
828KB
MD50884821e75b789d14faa4757a7f31880
SHA1b837e32188a5673683d02bc62e21a23647308d7f
SHA2561ebb321cbfeceb8eb13045118f09d43b94bc0172cdd185fbb3dffe58d7da10ab
SHA51242fe74d5d28c20695d2230d66e0c368059e0726f494a2ecec3e2c8aef4e4a1c570f072564c59362c347e653c46b4f15af4db11fbc9ad0d2babbf8883df032ebb
-
Filesize
2.6MB
MD50f50929c92c5e2a7f99cc7710555a7fa
SHA198867e554529fd0e8b212e69551ec4081f88a4c9
SHA25685872dc52a3bcab776e2902271c7e18f2ba9f856a97ffdceeed4655166a24a5a
SHA512deb56e922be67c9f6ee3e4a3746b1291b224a9bbf137d7e4c9b2d2cf673b4424249e478d2cbeb94f6daf9ef114a96c48ab32034244e8caf516db01498d597906
-
Filesize
309KB
MD522a0056ffd1c0b3081ca56f441cec3c9
SHA181eaaed525b7c714261f840f7cdb5164e45d734e
SHA256782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1
SHA51272cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b
-
Filesize
4.9MB
MD5a11ab35485abb8a6ffafe8f924761a22
SHA1c582a02c2b7c2dfb145e635f7cba6c7526c095e3
SHA256c95aa0b057cba39bf5f5e2feac86552a75377731142d3b32e0dce382222005c4
SHA5124a45369b9c8539386837b2326f11ea088a55220762c2adcfa8d34308cc474c6b01c74889ab001e0e95be23d2a392fef3d038968fc9d5a9ceec1d1cec615d7a05
-
Filesize
2.0MB
MD573e5db06d521ae01c73f212066d60e7d
SHA14a543443217f83e6e5b5f626ffe1ceda8faa1722
SHA25651f1ee787de22c43f88fbf10396f656c4fb709c7f42f84a6391a33817fc2d39f
SHA512e118ba8665ceacf719092713a8b200d6a028160b0cb3cad1a3f4b56c708f22e830cc842e35f9083206a7c8a2555b5a4b8cc5e24a38e1da42339fce70c40d49f2
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
25.1MB
MD5a5ed3c080e8d5090e346f7b25e28f170
SHA1c37b9c4eefe1720a9b8aa8e23c6a5af131606715
SHA25692ff29a6c4b58cd54f0563116b4a5cbc6be931f8d5a41a64483bedbcc7a5198c
SHA512d7e72df6febb7f64cbf26213b95b15ebc8d5e53f8199322f4387a3c311f9945eb268b7686ba45a7de0bae06dee8aad585399f67239889b41a60c8b76303631de
-
Filesize
11.9MB
MD5c556c791f88562d3bd83aceb32ef01bf
SHA1a2cf2856fc9d74e8ca75d9349c882e562758c303
SHA2569ebadd4dcff913b7755c5449d48ef8a6e1008e31d7e80e04b343c98b0074e279
SHA512f0ca333ed9129860351f15839a6f952dc0b23ad40b1a813c2214e4b89b4480ee963a9a8b3c909fca4db21e11adc50d703c6526a502196f238f7f8b36e71fd445
-
Filesize
3.5MB
MD563b3085004c5e360d3c33c15cce38079
SHA187a85d4c0774a301cc51163411684fee583a89d8
SHA2564c532b3b31c3f91f7f7ac19bd2002f00053ab2c0844da3dbdcde3f9a22abd197
SHA5122d40c248b445c694be5d890a110f29280df99205bc572de7087ddd8f8aad121d67ce76d1ba391d181fea8c1a11359bd3584c39bb39983bc7f6929c50afd2fdfb
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
1.3MB
MD5cc9a7fa30bd51462ebcb900b7ec14826
SHA167c3cac4848c518e70e80d9a77db07b1c2fd6184
SHA256334b83604aebec2edc6c18dcb59a8394627db9fd0c40aa9fcb54a5eeee9dd888
SHA512cd45ecab0f8ac6783a7f5ab409d6a786948e8082c64bb1244e64a461aa547cfd183db232efc4199b83eddd389c961b824714e199ab424ab33b1b2474ebb105ed
-
Filesize
51KB
MD5a957033550e6f27b1b12c8d083cf7d76
SHA13265cec5d7d6b10a8ae597f7d2c1b09e112a388a
SHA256fde986b2b14c7f2a158ea8af0304b9884086fa9454d4510fc1698cc5f469604e
SHA512b28612bad7ec3645938863e8e5ceec6dd779f5848b242f1a3d5b360ee96bf5be12bac47c5e89a01c5fe6c35a0e44e7c03615b415e4df73a5e6070dd072077011
-
Filesize
106B
MD51a05c6bf577d4841aeee609aeab7ed69
SHA109e8dbe1a56a0bf58620944fa50a26176e7ced82
SHA256fdbe544507f48d8cd60cf32fb3812ddf167f7185a8ab9322d23568551b690d22
SHA51268316e36b09642add9aae7a559afe42999d8cabb9a63ab06aea22ed9732eb447c3bd184d87de4ea016ced4a874aa1a95dd11d197cfa80a836cd68238ae6e72ea
-
Filesize
5.6MB
MD56697ea80326a1b569aedc5909ac02a93
SHA1d2c5d4576ead4ec0dbda4efcabf97697b48fb1d5
SHA25638ea68c117d76a5385acb4ff501360698f3d9555d0e4671c589abd294b2146b7
SHA512810bb64e7c2ccbf1029741e967c38abaeeb9cab35c513c283eb99d5f1881867b2eafb0c63e494691f1662cbb6721738a364132e13a2b00dac0ce4607843831e0
-
Filesize
512KB
MD553b1a51bba995790be81e3c605938aca
SHA1f3bb041ad17ed935db365cd60cbaec5c298a9c2d
SHA256a304f6864f61933eabb3381231750c5b1f308c33b83e08fe60437e2c5bb01bb5
SHA512782a762c34ecc5ae3f8cd0f832211a49458ca532c2fc707a4731de83a2cd988598582afc79914c7c1db7de2fad3a9d26bc2a153131722bafb20f9ec11a8d716f
-
Filesize
512KB
MD553b1a51bba995790be81e3c605938aca
SHA1f3bb041ad17ed935db365cd60cbaec5c298a9c2d
SHA256a304f6864f61933eabb3381231750c5b1f308c33b83e08fe60437e2c5bb01bb5
SHA512782a762c34ecc5ae3f8cd0f832211a49458ca532c2fc707a4731de83a2cd988598582afc79914c7c1db7de2fad3a9d26bc2a153131722bafb20f9ec11a8d716f
-
Filesize
512KB
MD553b1a51bba995790be81e3c605938aca
SHA1f3bb041ad17ed935db365cd60cbaec5c298a9c2d
SHA256a304f6864f61933eabb3381231750c5b1f308c33b83e08fe60437e2c5bb01bb5
SHA512782a762c34ecc5ae3f8cd0f832211a49458ca532c2fc707a4731de83a2cd988598582afc79914c7c1db7de2fad3a9d26bc2a153131722bafb20f9ec11a8d716f
-
Filesize
596KB
MD5cf282ddd8d2cd281b2afb341bbbc7f8a
SHA18104ad996680c838c44743b1cc3149353c8bdb2b
SHA25691cc31c10bac6b042855d8a48c854ba57b8e2085ca427786416f418f3597860b
SHA512fed8069b200919471a21ac0b1d258f89f206bb6ed172b9b5a17e7d13b78fd825d25a33172adedec55cb89f225756f36daa9eec587eff52bf91df3752c2bd9de3
-
Filesize
296KB
MD547df99fe851db855c5507328f660dcf5
SHA1195a33f0b91d6fda50d48c98c8e9bbfacfbf331b
SHA25615646e0312a8ac15305efb382ce658ca37e6d4e4b73f93387589fd1d8139e3db
SHA5125de2564d67dbf37ec38d40ac3b2d11fae4318744655941a763a514ed35d38fdf55694852789ca98d9e11c9ead5f997f8091d1413e20d511aba9aef1f8c46d5ea
-
Filesize
1.6MB
MD5c01cc0200f3d889c68b503c68049ff62
SHA1338589ddb1ffb4422f06e75f62f0db1151741f5d
SHA256326bcb85652c67780d0193d78d5bab30e3668e6bcbcffcff304751b2f4518f54
SHA5128d072207da418ff170e843f2d97b0e52875b42d2d4b46882d5de08a4e98bf1b7788052c5c591aa70f72813fe2b692541c55920d6dbe22ef15b7ef8a9252da58a
-
Filesize
404KB
MD5fc0e1d121cdded19e7b98cd995bde281
SHA1102ebe6eb24cf598d559b305423b38896a8208cc
SHA2567ccc472997dc3d5080cac6918bbd7ba172a4e674f59b5721e7487cd9b101d64d
SHA5127077503a5265554f85364744385c4db557cc87f3540688f661c3f139e94cf107ceb2fdac51235a92030ce9dc19a411326ac720ff0925d9d28894afa4b3a0989c
-
Filesize
188KB
MD54d3d26e3dee4398c1127903171ceb1c3
SHA195e316fe28d10ab358eaf71cc1bc66e3912d55a0
SHA2563f54dc6589030ea96e0022e2a36624d9f8aba31a0940db4f2da3773739f5fd3c
SHA5127241f433e9c970d16658fc3498235804de128564c7be25afce9c3d75d14000e738a9cc8de343c339f47144f243250eb8918f4ddaef783fae1b0dae0a1d5bcb45
-
Filesize
1.0MB
MD5c11a2fd58229c692c39030a8247b2d24
SHA1880ed2315aaa6da88115d601e62ff15343a2dddd
SHA256e2df35a7d853c4a436cb3c62274f9f47347aa82765bc39d9142c5d7933924f0c
SHA5120f40eb4c8e29420a04f1f5f3662f57931238e91269692745fbaa979bdcbec9d23360258419aa723081743a70cb4b31dfb25203f6791024832ff7ef4913858956
-
Filesize
569KB
MD5ce44f80d1b763e431d33588d4b74d1e5
SHA195dcdfc80cc6d16e2be3e74bf398598988a2a01f
SHA256d1cdcde82af468feed1a8ac8826f40cf902d387605367be8437cc6dbbb3ebf6f
SHA512982faaec67f708db33717efd079f42691de1073ea84f5079e3d0ca2b565feb19b4014f3bd53bed893f81bc99b0bda00d6337b65bc63bc6bed3318a373e3272c9
-
Filesize
984KB
MD518ebc0da472b1efc4e8f6b6627cffc93
SHA120a7cf7558d8a7a5bbcc131cbaf4ba75d3f11815
SHA256624ab9c6838a88550ad5d906e86829778b5a9fce09a55a67eadcbb5806058c98
SHA512a443da09f063e6ba8711df6ac9c35aa26298356e3dcf819e7784b8641c609fa8fd5d30ec03964493790058b138534f342b65e0688b93e8fcd6d6aa772acd6f6d
-
Filesize
828KB
MD50884821e75b789d14faa4757a7f31880
SHA1b837e32188a5673683d02bc62e21a23647308d7f
SHA2561ebb321cbfeceb8eb13045118f09d43b94bc0172cdd185fbb3dffe58d7da10ab
SHA51242fe74d5d28c20695d2230d66e0c368059e0726f494a2ecec3e2c8aef4e4a1c570f072564c59362c347e653c46b4f15af4db11fbc9ad0d2babbf8883df032ebb
-
Filesize
1.0MB
MD51c03d1935b5892738a188ba40cd5a223
SHA1b793c3918203f57468a7baa83e8d9e6e7b775545
SHA256d656c21853e185feb04c0decc52df277ed9d214e9ffa31b86ed34c682e1b5730
SHA512f9fa9def40ec3053f3a75ab2bc8e7c68c8b806be5bb80cda726ac8c08e3152c32db84a43a9e5775851bde0067d9ce9c8657a19850887171b0b206685318dbf40
-
Filesize
51KB
MD5a957033550e6f27b1b12c8d083cf7d76
SHA13265cec5d7d6b10a8ae597f7d2c1b09e112a388a
SHA256fde986b2b14c7f2a158ea8af0304b9884086fa9454d4510fc1698cc5f469604e
SHA512b28612bad7ec3645938863e8e5ceec6dd779f5848b242f1a3d5b360ee96bf5be12bac47c5e89a01c5fe6c35a0e44e7c03615b415e4df73a5e6070dd072077011
-
Filesize
51KB
MD5a957033550e6f27b1b12c8d083cf7d76
SHA13265cec5d7d6b10a8ae597f7d2c1b09e112a388a
SHA256fde986b2b14c7f2a158ea8af0304b9884086fa9454d4510fc1698cc5f469604e
SHA512b28612bad7ec3645938863e8e5ceec6dd779f5848b242f1a3d5b360ee96bf5be12bac47c5e89a01c5fe6c35a0e44e7c03615b415e4df73a5e6070dd072077011
-
Filesize
51KB
MD5a957033550e6f27b1b12c8d083cf7d76
SHA13265cec5d7d6b10a8ae597f7d2c1b09e112a388a
SHA256fde986b2b14c7f2a158ea8af0304b9884086fa9454d4510fc1698cc5f469604e
SHA512b28612bad7ec3645938863e8e5ceec6dd779f5848b242f1a3d5b360ee96bf5be12bac47c5e89a01c5fe6c35a0e44e7c03615b415e4df73a5e6070dd072077011
-
Filesize
2.6MB
MD50f50929c92c5e2a7f99cc7710555a7fa
SHA198867e554529fd0e8b212e69551ec4081f88a4c9
SHA25685872dc52a3bcab776e2902271c7e18f2ba9f856a97ffdceeed4655166a24a5a
SHA512deb56e922be67c9f6ee3e4a3746b1291b224a9bbf137d7e4c9b2d2cf673b4424249e478d2cbeb94f6daf9ef114a96c48ab32034244e8caf516db01498d597906
-
Filesize
25.1MB
MD5a5ed3c080e8d5090e346f7b25e28f170
SHA1c37b9c4eefe1720a9b8aa8e23c6a5af131606715
SHA25692ff29a6c4b58cd54f0563116b4a5cbc6be931f8d5a41a64483bedbcc7a5198c
SHA512d7e72df6febb7f64cbf26213b95b15ebc8d5e53f8199322f4387a3c311f9945eb268b7686ba45a7de0bae06dee8aad585399f67239889b41a60c8b76303631de
-
Filesize
11.9MB
MD5c556c791f88562d3bd83aceb32ef01bf
SHA1a2cf2856fc9d74e8ca75d9349c882e562758c303
SHA2569ebadd4dcff913b7755c5449d48ef8a6e1008e31d7e80e04b343c98b0074e279
SHA512f0ca333ed9129860351f15839a6f952dc0b23ad40b1a813c2214e4b89b4480ee963a9a8b3c909fca4db21e11adc50d703c6526a502196f238f7f8b36e71fd445
-
Filesize
11.9MB
MD5c556c791f88562d3bd83aceb32ef01bf
SHA1a2cf2856fc9d74e8ca75d9349c882e562758c303
SHA2569ebadd4dcff913b7755c5449d48ef8a6e1008e31d7e80e04b343c98b0074e279
SHA512f0ca333ed9129860351f15839a6f952dc0b23ad40b1a813c2214e4b89b4480ee963a9a8b3c909fca4db21e11adc50d703c6526a502196f238f7f8b36e71fd445
-
Filesize
5.6MB
MD56697ea80326a1b569aedc5909ac02a93
SHA1d2c5d4576ead4ec0dbda4efcabf97697b48fb1d5
SHA25638ea68c117d76a5385acb4ff501360698f3d9555d0e4671c589abd294b2146b7
SHA512810bb64e7c2ccbf1029741e967c38abaeeb9cab35c513c283eb99d5f1881867b2eafb0c63e494691f1662cbb6721738a364132e13a2b00dac0ce4607843831e0
-
Filesize
3.5MB
MD563b3085004c5e360d3c33c15cce38079
SHA187a85d4c0774a301cc51163411684fee583a89d8
SHA2564c532b3b31c3f91f7f7ac19bd2002f00053ab2c0844da3dbdcde3f9a22abd197
SHA5122d40c248b445c694be5d890a110f29280df99205bc572de7087ddd8f8aad121d67ce76d1ba391d181fea8c1a11359bd3584c39bb39983bc7f6929c50afd2fdfb
-
Filesize
106B
MD51a05c6bf577d4841aeee609aeab7ed69
SHA109e8dbe1a56a0bf58620944fa50a26176e7ced82
SHA256fdbe544507f48d8cd60cf32fb3812ddf167f7185a8ab9322d23568551b690d22
SHA51268316e36b09642add9aae7a559afe42999d8cabb9a63ab06aea22ed9732eb447c3bd184d87de4ea016ced4a874aa1a95dd11d197cfa80a836cd68238ae6e72ea
-
Filesize
309KB
MD522a0056ffd1c0b3081ca56f441cec3c9
SHA181eaaed525b7c714261f840f7cdb5164e45d734e
SHA256782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1
SHA51272cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b
-
Filesize
309KB
MD522a0056ffd1c0b3081ca56f441cec3c9
SHA181eaaed525b7c714261f840f7cdb5164e45d734e
SHA256782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1
SHA51272cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b
-
Filesize
31KB
MD5a6c5b1ac6224c3203b46433e9cf0d1b9
SHA16d8ca2da4bd451b070778e067d78ffe4ffa0c343
SHA256876df1bc43dc7bfd0be27da790af20a46ae1754fefd9693a2a234b4553605d65
SHA512191604b1dd28dbffbea578ff566a4aef766f208a0cbf134297c754c88d7bea4e97e285623fc37a8c09a96a387b305c5a1776d5c1c84a3fd8bfec0b8da24985a8
-
Filesize
2.0MB
MD573e5db06d521ae01c73f212066d60e7d
SHA14a543443217f83e6e5b5f626ffe1ceda8faa1722
SHA25651f1ee787de22c43f88fbf10396f656c4fb709c7f42f84a6391a33817fc2d39f
SHA512e118ba8665ceacf719092713a8b200d6a028160b0cb3cad1a3f4b56c708f22e830cc842e35f9083206a7c8a2555b5a4b8cc5e24a38e1da42339fce70c40d49f2
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
4.9MB
MD5a11ab35485abb8a6ffafe8f924761a22
SHA1c582a02c2b7c2dfb145e635f7cba6c7526c095e3
SHA256c95aa0b057cba39bf5f5e2feac86552a75377731142d3b32e0dce382222005c4
SHA5124a45369b9c8539386837b2326f11ea088a55220762c2adcfa8d34308cc474c6b01c74889ab001e0e95be23d2a392fef3d038968fc9d5a9ceec1d1cec615d7a05
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\en-us.16\MasterDescriptor.en-us.xml
Filesize35KB
MD5f372b7fa4a20c0bbdb75495d1ae74f9b
SHA17cf08c1ebf728c65c0f6249b3179351272338dc6
SHA25681fe78cdb9c0e3126381b1336e1c970155d5dea2c5ddad435a67a9025615be76
SHA5122751f28c838b7f7c5a96c53fdd2578d7b3f05ea555b480908025937589bdbbc18d358667f92d4cc4f3e10420d80c3555c7bc9ad81c62a3d209ad7063cf4421c8
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\en-us.16\stream.x64.en-us.dat.cat
Filesize83KB
MD552a2e044932a0548d28f41c1b1568c63
SHA1c19397666a06ba2b13660f40e799f91722af1bac
SHA25684ceebcd77fe3c3432d1c9b37fe2d37377c4ba6574d94e34867caeb4d7e09cc9
SHA5129417ff5a426cf0f6ec4a3fe5edcbd1f53e82e4fd6632d6b87d3c93542f0078a97447e34503f0223ab539b34d790cf59fe48360bd15c9ea14587d0a5e93f4b22c
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\es-es.16\MasterDescriptor.es-es.xml
Filesize35KB
MD50fdbff0415a022f1434907b050075c7a
SHA126f63b74a7af96e2a60a7a43a8c8683e39a03a10
SHA256a28aca2ab6b05d7e739418131aa79405d9293b7ec2c74d989c125c8be05fd015
SHA512b473ed5ad08dfb1709bd0005fd04890e401c833a1f2a4d90f0fdec87907a49df1fb0323efc219b8dbc69b3f329e4e5074628d98486329389a6bf05d56e0bd042
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\es-es.16\stream.x64.es-es.dat.cat
Filesize118KB
MD52c97938c1a4486fa261aa9de1348399c
SHA1ade1640519a28ef4f12ba29c2c96f72669d71277
SHA256bca28b0542f69df80788e374017e5ebb03c7926c9d58db4716e8030b4cdacbfa
SHA5126da76938246c176942b13e609c99e61761362d0ff06b2d9d031cf8b0150aab36be4e926b4cc83add9eb9b417f96711b497db036d4d427e64e21d848ada1ea747
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd640.delta02.cab_extractOfficeC2R14BFA045-29BC-4896-9705-656E49D25CFE\MasterDescriptor.x-none.xml
Filesize30KB
MD5071ca370fbf64aa3d813bff554e340cb
SHA1df1be005b001ff5922e73d721e9d15a7df9a5bb5
SHA256d3da6d96bab02c5afe88a8e27470fbf9dfc1b810eae3dc61c7f75bb375af0950
SHA51201c6db05f246c9f04b2e2068a3e99df88cfd25d8b2f3c3040ef60a12f343c31c043458c84b93368226f7c57d2ad7c03c57d8ebf083836b5534f4787da0284da4
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd640.delta03.cab_extractOfficeC2RDF2952F4-0193-4C4F-AAB6-0AAA25EE3D9E\stream.x64.x-none.delta03.hash
Filesize128B
MD59caf9bc117d0fa80006e1aa24fe0a239
SHA1d8779325ffa1706f2a7c1b5978e3214365e1be15
SHA25616ab85d8a448ed54dc96c92ace435fa1eebe2826321fd1b68732ff2840cbc058
SHA51231b73f4f98f2500735cfd21cfe8a8535965f556cab0546c1dc451c5ef85727d317f1514ea1de429148b6a6ce35a02c1444a3923c77fd6c4723cfe52cc3363332
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd640.delta03.cab_extractOfficeC2RDF2952F4-0193-4C4F-AAB6-0AAA25EE3D9E\stream.x64.x-none.delta03.man.dat
Filesize22KB
MD5519e54055e9025ae2b1656cfde13e3f5
SHA1f55e985f5e0e5e744c09bed16636155f9319e773
SHA256abbdfe64445063b8266497599a8a5dcf94abde039780678e5c958da0d92c4798
SHA512b9f9a059ddf5ddbdb84a1eb92611ec490cfa741e554611e332633352aa0be495a63017ccac9f75c2b0e5508e4a6dddaf8bc9065a7c6a346a31f860d0fe7967e0
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd641033.delta03.cab_extractOfficeC2RC90FA3DE-5EEF-45FF-8DCA-A520F39CE1C4\stream.x64.en-us.delta03.hash
Filesize128B
MD5f0a1605950ef1e42593041864ce78a6d
SHA117279cf2aea6325230207c3fa88e5ed6e7b3ca13
SHA256a88a890c04cdd8b91d75af05bb8f85d0919a7cafbe11b5c46c66647d3cf04930
SHA512adef464c91fadc57188e8059addcad4ca72b681b7d56948b1d9e63f499b982c787d37a7bc55f5051a3f841d4ffba3e2e18b1d5ea34d1b44185db1df55204d10e
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd641033.delta03.cab_extractOfficeC2RC90FA3DE-5EEF-45FF-8DCA-A520F39CE1C4\stream.x64.en-us.delta03.man.dat
Filesize15KB
MD5d4a230c3d19ce4495057b52ce1d7e535
SHA1f171a958b92ac6cb162707026b7ed46faf61ed39
SHA256a8653cccaa16fa30a5f948d6f2ddf0d5ca05ce37d1f35704485e1977c58d1436
SHA512a9c4eb0aeddeb8516f69d7dd7c6ec192abbd61314680f3bc175987ead4ec75460e19982fabc495dcf74c61c3f3e728c1f56f908a4d2472f3b97d0f2e8e46e3d4
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd643082.delta02.cab_extractOfficeC2RCCDE7C9B-1E5E-4A42-9100-A9858144CBE1\MasterDescriptor.es-es.xml
Filesize30KB
MD5000d7c0b330b59df253f268dede485e2
SHA1f5ff02e2f7a9ca78eda30710bb4de7bfe5e5cade
SHA2565163cb71a822e222113444ec175f0f2849052f9d44d08d00f4ee9807d99ba304
SHA512dfb776474712439e3c6b5fdf474eb104da7cff8f6b4510fd9e17d61973c2f75290dcc85361aae0884910181d8adef08888124f22e4efa2c4a097e2ed894dfdbe
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd643082.delta03.cab_extractOfficeC2RBF9ED622-5FAB-4266-A04C-BF2FDAEEB51E\stream.x64.es-es.delta03.hash
Filesize128B
MD59f5c9cf0446a664e4ec4edd92db06e90
SHA196a21aa784471c0aac65c3008340d30e71b4b272
SHA256f60a1270673a88c4abd5a6caeb4a9dae84e3b33efe4ccfd2e547908a6a3f37fc
SHA5126fbce9dd3746c7f5172bfd316ef3a483ea3852b31f551e83990634c6a99b72592191da9b2e4f37a46bff44be05d78fc0fc097b53f64fe26ac86d0111146e13bb
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\sd643082.delta03.cab_extractOfficeC2RBF9ED622-5FAB-4266-A04C-BF2FDAEEB51E\stream.x64.es-es.delta03.man.dat
Filesize17KB
MD50ece54249f716e925e64037bb95461a0
SHA13ddad57da73d321fa75f04217976c98aed15445f
SHA2561914b4e302bd8077c0e0aa4e7979701fad96abb99863ad9430862d4699a7362a
SHA512ab1d72ecc163e54734066a14ba687ed117c3dcabc6d375fdee4fe9be49b8173d4ab74d59b6d61f785283278843d9e8d589d311bad5f66aa58d1d4add019fb0de
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\x-none.16\MasterDescriptor.x-none.xml
Filesize34KB
MD5601510478f1f0b638ac3e3cfe8cad027
SHA1b68013760d62ae69d83becc06f8c6e08a70adea7
SHA2561ef54c9e9c700968428ed9cf36c4b96c5f6e13ce16d402d91c7c226307ad59ba
SHA512cbc9e5efea9d2252705ae4a3e99e095772f0b86b538454ecda87d8536b065c4a30823be77b3efcbb607ff7ec920b048ab1c96b16b7a7a6bb8ee634eb7678b984
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\3605164C-7F73-4C5E-89F7-A5238E5D9D14\x-none.16\stream.x64.x-none.dat.cat
Filesize649KB
MD58663bb7f97349e3dc3f01cd5b2485ae3
SHA16e07db84946aa4de56d5cf62a8091297688ce11a
SHA2563dbcb9c378ef67e374a17aa2d4d7e1623fe155d3b42e32471cb156624b47ffb6
SHA51277aa4626198b490348e30c18832e9cd1f697159de311f21b564e46c648aa187eb94b1e31d6ddab7ab41d3fbf057ff3bf605343854a362c2393616ef379792f31
-
Filesize
926B
MD505b25e8252b8ccc41c6640673ba6a02c
SHA1f4c7b52521d4c13d2d965012412cccbf2f9b60e6
SHA2569b36aef75f1535814697f9335623fdaa9e99c33c3b67d8b47ff940230c4f2032
SHA5124dbbebd0a3813ab8187304e0c2743a22ef9951bc0677f2a1530ef14a066f754b99e1288308d3546e439833af4060ed947d3f19f5bc305b7be27b0c38cf6b56cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A7891822FCFF127E4EADADE9757112B
Filesize246B
MD5e244530156d59e85e37060b11799a852
SHA1f46ae00c140dd299cdcbe8317a0ad54bded1c8d4
SHA256f558d8510de3bee7e287b49f8489268c9844fe6a0851a6d7f7c8068d7c38ee94
SHA512b34da61e55c5f6ad91922a6e5c58e0fe45bc47309acfef42b3b0c5e0b2617d6cfad0b75cc32a8395adc5bc4b826de68da28210d9fb9463a541fd8d939e50afbe
-
C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\F246A31B-912D-4370-A187-9B83C7763C31
Filesize154KB
MD5eb69f210c39d268cb975447ce45f5c69
SHA14c7a8586eb4bd204735adfd072693b71208c2cab
SHA2568256db42a84fd84284baf2dd8a49e9067c1278f5959ef1957b6507a578c5c730
SHA512fe2b2823457b2c264256259fc45bdf55b5c18c822861ff5f7f0c7d6fb6d4fb1fa39a56b494558f6b92bade1637ab6ce6b02db4bc320db61bdd4e30645863c888
-
Filesize
352KB
MD5b29414aac0cec4a5602d1b226413b7d4
SHA11f04fe5b62b881f015e831436d2758834879409f
SHA256f85399c62c85734baad213deaf791d85e2249c120bdb92a63d37adcedc21630a
SHA51257ff366c08e94f987ae7ec46d4d87a29d09361293d50312cd20e10283b3cd31944345e6f71c250382a249c758f157b8cee2d20f8485ee3a5a25122b0cf9c30ce
-
Filesize
24KB
MD58665de22b67e46648a5a147c1ed296ca
SHA1b289a96fee9fa77dd8e045ae8fd161debd376f48
SHA256b5cbae5c48721295a51896f05abd4c9566be7941cda7b8c2aecb762e6e94425f
SHA512bb03ea9347d302abf3b6fece055cdae0ad2d7c074e8517f230a90233f628e5803928b9ba7ba79c343e58dacb3e7a6fc16b94690a5ab0c71303959654a18bb5da
-
Filesize
30.9MB
MD5c5fa1f270a995eda68171b7e1bebc0d5
SHA18e65faebcf30cf20868ee57bd7f6b25d71d5be14
SHA2564d44bd28dc01586164b0c09cc7e060305f44645c1df7c9c573c3a7d1de89f694
SHA51247c791bf3443c86916d8b5bc71f2111410c4777c2ae1ab894d8691f4d9981adb0f8aa8b9b84bf5a5a4f5b8e3adb6993eddff549e8ebb31b76214adcd7685db7e
-
C:\Users\Admin\AppData\Local\Temp\OfficeC2R18FCEF3A-C3B6-47C2-9DF3-863AE6E61E7A\VersionDescriptor.xml
Filesize12KB
MD54a8d1a2be4774566ef1bfd1a68297a62
SHA1800fb3d571f10deb896f07b5e456638990d78895
SHA256d9a44a37c89a3cbbf221f4a02c23cbaf3a983f3486579c58358bf52182ae1449
SHA512c64fbbb77eabadd1a1e83d3da268e170c6d710e9aeb82e1eaa7dff7e6fd524c7edfe5b7f8f0773bab6fc9140b41ffc6db9c87d7de78689ae0476298bb7b541f1
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120100v3.xml
Filesize999B
MD50847565b252c325b0f3f4b65ddbf8cc2
SHA1bbae496c74dd0952de4cfc8a2f86fd0a8a9bb3b8
SHA2560534c65211d5503b490beed86790ee243c5da900eada1b419d593c90ee082a9e
SHA512d53981bfddf765ca9e4544744a234b7fef266dfa85700e51523e52d784b4ee955a670da22a549ee53bccdc4d2ce5a9007ec793a732202ab143db6f27317c98fb
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120128v0.xml
Filesize658B
MD5cfbb28296f4a33b2f8e95864c1508238
SHA132e37e3c0fa4ecf031853d8bf96c622584b592d6
SHA256888834f341f5545bc2b966d239e346da71c205315eb37447af310d760d6f46cb
SHA5123dc7d9ca340ff0784b38e358ce519f05e053d687d03d89a902dbdcd86c8febde4f5ac65c32a79dc006366ab8222509304b93385c91cc97a700309e8b1251ba61
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120600v4.xml
Filesize2KB
MD58bbd2775aa81f41a3625c1185693f355
SHA18b2bd5ea1c41d9fa47f541847effb2b088667ec9
SHA25660c556b6975f181604286131cefe803b627861bc3bc0c0bd43af6b3728ef4fd6
SHA512db11d25e0b235f3af00c0c57e1bac7c5095625822a3c66aef9b582d6e16643303b5ef2f69dffc0af1ec64484b21b196905c1569e383995a2527c452a205a36fe
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120601v3.xml
Filesize3KB
MD5c97559a15d66ff99a6987def29b110a1
SHA17b142a9cb743d9b0ec0d90e248bd9bd9b95e6d36
SHA2567219297b50382ea2e07926a7b5659e91cee9a7688abe7ee55936a926953dd147
SHA512f6756dfe078a9a8f41c4905af48100f2a175ad01b7c85910dbec786debac73f15a91df229af6f5d68bda62d70aea571566254a1de216d2df20c9859ac44610f0
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120602v10.xml
Filesize2KB
MD56a50162350af385152a98777bcebc25a
SHA13d0c0c5542627c797cd50058837646d7851749e7
SHA256713a6b8cdc7ad4b8f7f3f07fb8868f1d65ecb8150e79b28db635126cf39bd6f6
SHA5123288bc3095878d747c923a614d80d80e86f355e4c168cd0c00622e1eef1a3d02fbc810b41d7f1b9debc13484456f221b4d8598d33793eb7bf87d05a17481fcf8
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120603v8.xml
Filesize2KB
MD5c0cd509af6e12fc3d2a441b81f550999
SHA1732988232e7d2cff964008a510c5f58034e45c89
SHA256c3c7819fe42f83faf7508bbb4a184b429c0dc8926050d5becb20ff4f73e1782a
SHA512bae01a8fe637ddf65503ddb0b67fa16c7bf4fbc45b023ddb5e5bd916a775d63f9e49a2e3e6e099ec6577e7eac0c0fdaec3f443162d6aed9d06bbcaefe37da9bb
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120607v1.xml
Filesize204B
MD5ce0a4e537d56ecc3e4821a95085f70fa
SHA1c739e2bd188972cbdbe56cabc9a559c9c0d0b38a
SHA25672599399f448ece4bdd6cde83d9daad26385ecc9f9041fafecd03e0b62daa2a2
SHA5125d49c5c9cd616d8baa6a32a8b3e68b9c662a733269088db66d609b8d114c8c7e02a8ec3fd3474c76a76de50125e8f421d249316c6b78719e24598b152840c41a
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120608v0.xml
Filesize2KB
MD58c5777ac756cc40b68cbe34588696355
SHA1bb6c949c54144bf5489af3d12031692a38c31745
SHA256093a6a5626cf6ef14c8986b7ff0de639e4bbb9f152e092a1f7c896af804e3408
SHA512955fd469318dff19fe4438308e288b9543c62c9ab577c963525b81b86cba449df1853ad1bf3ddf070bfeb5329c1f896aa01cddbad72b0f82c5f98830b3f7d12f
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120609v0.xml
Filesize408B
MD5a5e9e240da5021a44de2baf579e8b347
SHA1f0e818444f67af281a33c7decff515761dfbaa6f
SHA256ffe83d5f40f6a716b3215eb98bc35709f2dd6afc64433cba47d52dac5618987d
SHA5124ba5e8977e984119dd5fdb9cb69418734cfe668b5e5eb9b08db8e4da542515c278f3fe64c763ce1a54f2555ca48033073acbb3a6f0efffb1e087c4c211007d15
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120610v0.xml
Filesize474B
MD5b749b5a57be6f4bca525707db60c079d
SHA1d3e1a5802fba58dfdfe8d49e6045ad5e1bda3d91
SHA2568771387ac554c3bacba845583d16017cd31889c9c50a922d468c76fded4c262b
SHA512b139d03311f95d54cf5d4db20499a4c4e6f179fa7cec10ac9b234169cc1d280f4f9dc53901776b90e2a6d7ac3f35d68e4e7724ed136a02c3dfda4976cf145756
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120611v0.xml
Filesize415B
MD596718bbac0dfce5a21fb806ea2cc862b
SHA1c5eda22f3fae25f5213d4b1f1d1eebeb9f29aaef
SHA256cb5297d29bfe20d41f76dabf48dfa447a1675b61255778a41fd951fbbe37bf4d
SHA5124156b7307ca6f5a3b8293ed85f96451ca8a9562a48c96f5b547ea6243894232ef81fe839f184e0ce2b49901ad89e7af29788d3e4426133e6b3d4da5cf34bcb83
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120612v0.xml
Filesize471B
MD51afd53ec257e7a723f1a178236a9067d
SHA17b06375a5b91c6d31ed0bc332d40c3a1e093e929
SHA256994bfccaec776aeba7bbd1a919ce807dd659454cd5783e57d2d825129848d81c
SHA51283ba0ee3849a4d1bf1feb632009587b0af58a3f7be0dac7e8eb79bc0492e93aca9dcee3abc67630f02d0deeccb56a444d4b0fac50f2a7478cc14fa320326c891
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120613v0.xml
Filesize632B
MD52df5adf9e713cb5364ef87433ecdfd5b
SHA1b7056e141c73dc2617261e1b0332df9769fb07fc
SHA2562188bc1fea17080edc6b217a2e62ba75db989ac7147038fa489d5dbef5f42111
SHA5127cec28bcdb6e6fc9a5e861423c6f10757d7e3e5fe8dcb63cf5c9b4114ebd8a689d5e36f61332d61ddfc7e7d74eac830cf1f9e7e8bf78d97f5c65cc4e2cf538cc
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120614v0.xml
Filesize467B
MD5d5c74868b0ce63977312885f24b52b19
SHA1867d9ac41c3ed3e696e60af34617c9396df88c94
SHA25648adb758e05cea4b8530d29b93b36905fef8023fcedb6fa82509e3729c0e0dba
SHA512aa6cd53ba6279d7ba68081f85ff4f0136558b391f178a4cdef240f1b2a2f6c7bdc6176182cc68da77c1eab072bd59a084a9ab979432ad88577c1d6d4bd3afe68
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120615v0.xml
Filesize407B
MD511ef9ac85f51c17ee92a874871c4225c
SHA1f7a67119cd3a3eb47ad54e933b5a402a66355641
SHA2568797b1ee2e130f062e458a3a4ee6fa9f927aea4464b4c857e685aab3a333f320
SHA5124c76191e38b2c299b616c5adebc1abb6b1a2827299b5e564281ef9957a8533e60f5e106be3a161daa93528a9253cd918f654105b63c5768aaad94c28fd7e7321
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120616v0.xml
Filesize486B
MD5431e061c0c685aa869cc3876be98287a
SHA15447daed661fcc183ac2c3aadabeac0f1a302006
SHA2561be8d9f5cf7a2f6e51a6fe00b054bc27e3215801627d166465981d7c120b4e29
SHA512a4ef855e03f5a79c0079aa0b40895fdb30d7106b4191c4eb3173078eaf502a371802d5e9ef0827952c7782948fc55697fc936a36a57fa40d8e98c9ebc75f6465
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120617v0.xml
Filesize427B
MD5395f200d816e7a822711d339cfe86deb
SHA15ca4adb08c34ecf340de984d7f47b6048773eb4d
SHA25604edba0d637c8f30ac9657436c9b77488ac2c4a58b0c6980f41adfd48b63d2a0
SHA51254ab4c73a36c04c36edd76f02e89fd99d0aad17dcdb0d1eac1a4a1b90e63914dad9a1822ae8f45c846505b3dec2daa465f50d8f85c68ceb0b727b572ee40d7b3
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120618v0.xml
Filesize486B
MD5f9af81c21ff8cc34ecde29d483e063fd
SHA15cd9cccc74e9cb4b492e1a0d09f468410a7fb8fb
SHA2563a2a4ddb372535e3e99590640aee8cb088ae4616fa64099688426483235b823b
SHA51284c5d6138d224dddb1fd60eb36a86612ce612c272b58d5abc05f0044910566d17a705f9461b2758ef3c464300814bde42cfb3049e053de1ca8efdc1fd9ccd7f3
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120619v0.xml
Filesize407B
MD5410c8b3bd23ddf3f449917721e53fd9f
SHA14b981223d329360bded4760d87fe709edad1e389
SHA256a387ccd41188d26bd26780b0aeb9157643f3d41f55534834012570c5ad6c64b5
SHA512f2da84432883b1159a17ae4e3540e28784524fab7cbc89a34ffb9fa584876ccaa8b81ace4d07c692e72de05d6b935c08240fd5c817ab646c9b37dc53483dbdbe
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120620v0.xml
Filesize469B
MD5301b0971b4326f62ecaf33cb8bbafbb7
SHA16b14a87124ec22dba9a94c4881302b7d3e77daaa
SHA256392b7517812fd2366bde1b288fa12cbc25d669bc9d262e8b60260763dccf11d8
SHA51229e5c9fa576964cce9599c132f747a2e7c74b1dc6f88b96c341ebaf8f88bf182e2dbb7f8a780e7f95347b2451cab82b57f11974540adfc2ba532c54c181999fb
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120621v0.xml
Filesize415B
MD5830c460becf18c01e066180e7eb789e5
SHA13ed7bd9fe1f93d30dc6037eaf60c148c564db9a7
SHA256e43f95abc6c7bf6448e8e6003b5fab7c80308489387b9aac5a79bfeb03ca4497
SHA512a017ea101940a7622d1e3855effec962f7a9ae4212865da1292e11e0ca5fca56bdf272f93abf5786d605ada934ca7e9b7bca799a2033b52af231e8057cff2753
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120622v0.xml
Filesize477B
MD59f9af9e8a246e87d45ffe9123f6caeb6
SHA11843ce1361e4f9f1333478b35f11772c2ad85990
SHA256d144803e1cccd335a6513b880780dd6a77b9f1ccea6d76e8cb0b32ba363ee5fb
SHA512d5d472808941d290cb8d5ebf9ec02b4dd794325a4d8a687614fa219f575d84440470b40d4a7f7ac16856bb3cfc3a49619d8b517d8da90ee637f048a46d79ade2
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120623v0.xml
Filesize464B
MD53eb89000aa74957de8793d54737345f1
SHA1a117239292effbae5e3650d7eb759363b04e63b4
SHA256a939fece0e6a230effe3f8817a4ad408c8dd01b26bd6ccf67632e00fc2537364
SHA512d2610ce7302461320df87f23a89014f74b522bb5e1bb4d650305427cbd58be0e3ec03a6007dbe08f93eb8f767248550e53ef5c52d8cec7f6994925c60b4170e6
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120624v0.xml
Filesize494B
MD5baa5cd29311854ef0d66167f95444086
SHA1f527d33a6821ecb5e7a68edb5aa42a7c9f619446
SHA25661c667260daa8bf6ef92a549253c7f274515347b1c631b7f6a51a8164c85da41
SHA51275fd1622666eaa531442ee0db445cba6baf28c7b342dfdf15f98d1bcb089e1f54c2c7f8fdf31707c5c689e25b92467e04c805234ca94a0ffe155f4cb106f93d6
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120625v0.xml
Filesize419B
MD5abfa11c5220eb85a2dc48fa469c189e8
SHA1a95ff0dfefd479e53cfcaffa9bd480f2cdb7d58f
SHA256b1b876e3b5216b9847af3d15744d8a46ad43a87724a0a5ec4acbab27a1c31966
SHA51238babe70c3ed0c35088eb686e024e2254a36016508d0c0b90340700ccf0ae089726bcb42c4e750102199856a16622fbe25d7efc6257031215a12e7cd7c910991
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120626v0.xml
Filesize472B
MD526c4548d858e7d6fab6ab51006f8cb7a
SHA15fb6d792665d9bf99a7463021eadc37e2ab0905a
SHA256e7728d7980a489204508edfc7b50f74a3de04f4f1af775db25fe6f4b6863a536
SHA51284f6c298aa29b185d25b01136e3d34b1a28028bbcaa10c124c782935e5f2153fe2dadf7661ead1748f6e95a33c779268b461cfed134960daa7c7fc4d2863f1b3
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120627v0.xml
Filesize404B
MD5411ec3673dbb5cf26baeded68b675eca
SHA1b3d6486f7c4a0eb1547fae214ded099ddf8ce77e
SHA256c3b74b1e0d59339a651d84b05b2a79644417f2332ba6852642c0c748975b942e
SHA512aac41904fbc8d8a3085e21ebbd7367f00e257ecff02dbcfbd04067be57d9a86631fd229fd82ce348269accbca5b6e20f88775275c4e40e916c896201a2f6ab67
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120628v0.xml
Filesize468B
MD525c27ed53d6d421963cd37bdc98eee91
SHA15ac31a912972c2bc05d9a5de50c28313ebff0d55
SHA25615ec75e7f5f5993841c18d52cbb5fea9f4cf6ef77de311d1084290ca9acc5820
SHA512d1f38bb08078f3fba05eb5488a2efabd69b7a739afd75e9e9ca95c80cfc3a157190a6593863f0ae0a48957275b287dddad3dce16322e53198f8b9e59c353188f
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120629v0.xml
Filesize428B
MD53735afaf756fe3189909adc73066f9a1
SHA17bf32593c709edaf37691184b8fd3f4a928f5d82
SHA25641567c5c9045645c8fc5aa54065d85511c0a4505163524ddbc7b8d41754c398c
SHA5125b3d15f9d403d0087d5915855e1806bee24faaf9c32f15ba0bafe85db90471eb879cc1d9d96cdb1d8a9a78810725c24b1987762d9678344a2f5c011d199d94c2
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120630v0.xml
Filesize499B
MD54978bcd2401992f672cea2946d376262
SHA18907908a3aae72b5ea55467cc8c6423dfdcba333
SHA25682856bfeb2f9c9139688f0c392152e2368ac4cf2a3dc9621ddd399c9c0d8e0a2
SHA512b8ab0e75a270ed273d50cdf13c0d4a2e4c4c928a7b7582e9879622ac61b7364b42c37c7ff6fb86699d3e03b4007538f0219a06594dcd6b751b3d1e0cb54898a6
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120631v0.xml
Filesize415B
MD516d5852fd0aa027e853a30a49dcf9b8b
SHA1389a4cf81ffd1d436137be746ccb97f8f459fb6f
SHA256bb5d176b4e024749f026e5b35dfb21267449259cf0e8c41f5d5292fb2ae3b92c
SHA512395617271d7f2fcbfebc835c84eae9adb060df8e63f75abb20049a6f2743ecf1b31ac5c580000a593541cd21c289d854a5af5d941e5b5439883b3023552cfea2
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120632v0.xml
Filesize471B
MD5fd063e71cd88cd69cea5a82364e32c1c
SHA19866136524e2205095c02c3d16e6f88ed0f7dc7d
SHA256b3c68f525e80c9aa6bc200f56247d165eb4766f05ebe9db863a309fc822c6e34
SHA512ace4a01e0b24d77bfac0454851bcd116557b6317c4ca042c93e5db2ea61e71d718744915959a3dec0e9b545728c8a045bd94018258c5afa1b1286530b7b5d011
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120633v0.xml
Filesize419B
MD5ab36f17b005173ad4cd46a1f48b72bf2
SHA11ecdbb125e4630642c60ebffc6d4e775974aa274
SHA256c4963a37434402d4a8b2abd4bd8490926d2536f2160216e769c937497ac6f842
SHA5129821f430e28b0a5cfb5600f6145b0f2dd3fa7f9cef05d577d5c323cfe40f3c584d16e09f8d8e1d9d97e8b2fe463bebcdf8c3bde43dd5fbd8e47160570152cdbf
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120634v0.xml
Filesize494B
MD53e31eafea1b6e27180b59e2efed7cb75
SHA1dd176a70b99645b99d866e349784206425a0a1b4
SHA2569b709dbdb473d0c7b6318d5f367b31b1286c03688e7641d0255c578944924601
SHA51275d244e47b1676e3d664e0902879409a3e2125feb518a96df2d36ef01c90d946c07307740e8879d99d44e3f2a6de5b2d65ac6339103e68e3d20c7d62dfc44ab2
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120635v0.xml
Filesize420B
MD554afb8b9b142a42277ec609a6307c934
SHA113c892e709deb06105ed12a33f78be22ef5163b7
SHA2565f0cb6069bb5d3d66305aa19bf1b84712413eb82bfeaa173377d27cde772c63c
SHA5126a5a98afb6e57c6a41635eb41d53ed57690031172784ddb662d986ee008f24e64841d93dafb603a8fb7268153299827f177086d1753f9aff4f62bd6ad840815c
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120636v0.xml
Filesize472B
MD5e90b86c58e6fb35a30335803c6b80f79
SHA1e270b0d44b7e10533f9f1cae5942df0fd9b3f8b6
SHA256e95b55f3d2c9340e29b2bd874b5f4eaba7ff9c4e4aefda83e5e5badbf5c868cf
SHA512719e7cfe0c48afbd74e87d3c84b6fc3d7048fe34f57f8b234348acc965ca6fbdf9a050c29424bc32743e1b7628fd24859bce5641e3d5eed2d483138a7dce035c
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120637v0.xml
Filesize427B
MD55f044868ce3e8fbd74d406634a2ff763
SHA147789a17c5fe522e7fd4969a7f293b53a9cdd650
SHA2560e7a2a091d39ea7478fceee5a66fd0aa21417855690c99a0d5d2e1903db8684e
SHA512982c02f4a8dcf93b545d1a4a5e11fb5192d69a3396ddce5434bdc488a12816d1450b02d08df3a1b1c939fe5d5e2cc4c72bf750faa3600aeb1e1253003f59a650
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120638v0.xml
Filesize486B
MD58a9be9d7dacc255db7394af6b79d20b1
SHA1e57d81907eb5c4fece324fc81a0fdb7711d95896
SHA25687d64938f6762373cdda222cec72c3f50145648f30eaea85a258ec14fac06f78
SHA512d826e1c300b19cf87ffc281bb1300b3a0b5f7fdbf109c27863659f8dde74f0a85f436c552f1733ca18072a051fded4899fb5576fe247a786bbc94b9f0edc26fe
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120639v0.xml
Filesize423B
MD54b295d5470f496f29d2c52feeba79ed8
SHA114b986185353a7bcf635e105ca35c70e8657f059
SHA256319a0632a6ede04763907ba38d4423acec9f12726cb9a563b1e967d2d85ff720
SHA5122d0dd1cd375f048d290f71ac1eaebb3d9bf5f5862e8aba127d77155b5305b3fca608120d5557f15bd817dd1405dcf0d61a2d61343cc7e101ec494786d30ff306
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120640v0.xml
Filesize478B
MD52d6b0293ee80cb43907724e94f185c28
SHA1daa30acc96c908d02559176a69c00b586c564adf
SHA2566e4c5d3dfc97d41f8badc7ba82f039fd433d55d52c91ed48aa15f49fd969bda5
SHA512405d937b6be96c23ef8eeb279290c0995e59dc1f162824506cf403887b6ca37e3ece223f0f4044ac06c14a9d3a1cdc583ef528425a60816592582b09e3da4b75
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120641v0.xml
Filesize404B
MD5e50c676e010c4c25f3df33e8f247437d
SHA1eee0acfd87ed7c53a12a906a42790df57a5cfe03
SHA256e61abe10929a4f96761509841be26efcba6730dd00732e3cf3e14619abc3b96f
SHA5128e378af59bad0df43582f265aae7af18a482581db258a19cac62fb998536fee806bb75102718224e52957b394a6df58a48cf5f4c1a35844a60c2afb28a88f7b4
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120642v0.xml
Filesize468B
MD5ac0a6e93e09b469702cd66c761747de7
SHA129adf660ba70741c2992193071bbde978381f177
SHA25653f275b0e5a18c4b8a8c6551e3a211ab4793fb8943fa9a5537838620ac20000b
SHA51271d16ef40fbaf4d3e6c330f255b06c6d0d91419de3ea9f0467c0e43f6f5b8b33cb3000f8edbc9657918071e593ffa7581789cbe3a70a41ddd510f405c717e3c9
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120643v0.xml
Filesize400B
MD59db5cb77ba7de796e81019462ec0db37
SHA16a2c3416701ae2f2727e63c7bc845b7f761d5bed
SHA2562c0b481147750c05604dc320d9a3f0d1621461bb0416adef276308049dfd30d4
SHA512ffaf6f7abc0c8eded749d2f2a98877a4a52a9577b4f4e90e86b2bfd37372011ff6360aa69f01e1f11287ff787196ba15ffa26d7d2918777d8f14fc7f1c1ed4b4
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120644v0.xml
Filesize479B
MD56c055a6754a961f63c7003aec639a99a
SHA181210239d400a5011f6166b752d1353035a15ec8
SHA2562a00a590b48e218a361996803e519c65d990151adf507df4e39aeedff0d903b6
SHA512c02da83445f5658bb26ae07b9b13ef84e23ce2cb92b4aca1ac2692a70d0b93738ce69e7428ff90f2fb9a9b84daaf65e165f8e30353e36f8c4966e49f6842efee
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120645v0.xml
Filesize425B
MD51515da2c7cc93120926b502d623b6bf9
SHA1b673f650d2db82a7ffefc072d2a85a5b0b17b489
SHA256308e4cb10a6f190878aa0928a1a2eee946223b9e4a0a48da04e0a3a52f05418a
SHA512e5217341a2c6064bace1cc54df69af4ae274c94cfa61fb8d65b9e7ed9661a8d5218d27a90a2085bd65f6a42f3e93c82ec31b728e1763337d66e90ef4a496a6b9
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120646v0.xml
Filesize475B
MD518ab3810bef10da625ac81fdd57eb65d
SHA1589597e340db17be605f14aef566f74c4f791bc4
SHA25618727322b8d8aa7d0aec214ade35596f720634b4e1002f48db06213ab6cc6ef4
SHA512751d7cfb0c4c724da71b9820fc8b23e076817aa44cd499b59a903e7401eff0d61047969f0e2ebd4804e3533a5022c83c50c32a50c22a69e7bd743677bc6bf209
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120647v0.xml
Filesize448B
MD5b332203a493a4d88b1b3ef3a6cafeaf0
SHA1df184dcd9375b8e72ae51830396bc8472c2a0f26
SHA2569174da3dfc37f0d9e92738c64dfda0a2554fef1c932a0ca80015c98a882948d5
SHA5128e8017d9ded316dbefb7ed609ff0e9587c3cfeeb43e0fd8ea2d0bf923656488c977e379ba7021e931a4f59a93c659d28e9f5540b1d9de87d96ee410b47ea953f
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120648v0.xml
Filesize491B
MD52b35163b6a3a9b5ff5f931447992e703
SHA1badfba1a087bfac6b4768ca04eeaf4ed6fe047c7
SHA2560913f859a573ad476a5bee82b6231650c89b4ec56e55f82bbaffedeade2736e6
SHA51294dc7d79316e1130d1a7ed880eb3c76250420a19a659d4567a586f79970cf710bab7a869d9fff3f559d501e74d4db0883b22607712d34fbd5d3fddf13c3917ce
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120649v0.xml
Filesize416B
MD5a314ebe153a7f4bd8a56080cd48a3ef4
SHA1b55cc7d110efb218ae05799e536c9e6cf84c0ae8
SHA256fbae81eef789e1f78eca8df869411798d4a52dbff247745b79ea6b0ca7f4aeda
SHA512ca0ea7722157321d8b226da021352f3d3e5b654ba3a056e484e1896de23498b4e3279f886b3c348bb5c035a10a7024841face5e8eef9d58d182f9c6e2cd08f98
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120650v0.xml
Filesize479B
MD5df9557aae4565d7927f9cdcd7e90a494
SHA1cd3b00c87016657783b2d4ced680d651a9619732
SHA2566c842c808bf1280adc50f85f3e3c43282354137a1a513876b8886e94a0589dc3
SHA512070f2a7722a7a6425d2a804433b52dfbab1dc96bf8e6a3c23fc9fe008056bcdf9ee2aa4888eb0b573e13c52e2418a06e37e7d874c971b8836010772984825399
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120651v0.xml
Filesize415B
MD524667591781d1f0c30e98b50d48350fb
SHA1eb5e204f7918d1d9236981d90add32bf79a13093
SHA2561532a12d3a8afe43f87141cf7c73560ce0efeebd1b884102d9a0318ca708b719
SHA5127d3c81a879c8ca3c11b4622bdcc0034ebc36520fc2b757c028df499263074bf8f097b631f440ccc9b2c618bfc9704d100363d056c49873e73f2ae0cb4bfaec11
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120652v0.xml
Filesize471B
MD59e11516ac7dc54b071823ae12a977b16
SHA11377808c61a9d440a72841d42fb92722fe7d7d45
SHA2568255649db3a32fbb00ee752b4c54149a0c2cc4ab592665c482ec6428110fc6cb
SHA51265742fdd11f967ac7c56c6ca7646f52bba0b8c9993dc66296a8b7a4ded1063ac94e6db3c46c8d953829128003e2d45ed14b30b8e9d5ec6e8d6121b5d3226ef60
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120653v0.xml
Filesize419B
MD5ae3b7d18cb0cc19c2075579b5796a847
SHA16294ce0303b2b0da1b4b5b0d7d31df70b8c77f69
SHA256ac25fd85f2869e83cb8c50d54fe986b410d3a542e29f3d4223d486d5b970ce25
SHA512d1007397b60794834144d6031033da8d6f36987b61b8a3cbe1adf7131897d85aed6c0cb7be7cf64d11361ba75d5402c1e0be2b07b3b5bf0c79eed9320ee4e240
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120654v0.xml
Filesize477B
MD578a287af715faeec6ba01ed001e54469
SHA1bff59d4c878d88ab38bf8f54083c44df8e4f9f15
SHA2569bb8407301e6abd7229f403714078a56e63de010f14b2f7a118e9095d9ee6c38
SHA512cae804a20e463f22b40c532f5e606eb2f73cf6752fb7995896d464ed85c86c417fb05223064055792b0c19e3c5abce584c6b125bdfef9e110ef566c268f9371b
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120655v0.xml
Filesize419B
MD55f7faf2ccb03b71f0ee90023105aa94a
SHA1e923f3cf3b6fb2682e74aeee16ffe354670844a9
SHA256df5165323176802ee5a518f955136e2e859dad32a89e716c838fe0fda7c3444c
SHA512a3cc066c2acad5e01fa890f6f67282696c6acd66a65eac37cc95ddae5b81ccaad82bee07e881fb3b2487d2a9bba852d1c8778c10d34e47d825bdbf06962e7e14
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120656v0.xml
Filesize477B
MD59daa41ca55ef2423d33df3a73ffe870e
SHA11ca6a998f4ee339121c540382f1d730d85eee787
SHA256da9c71fd54deb49bf2206996d275d4e6afde18d8ab698ac4c6dfabba5cea0337
SHA51231565b3901ce8c4e13cc30a2437e915487a9e4f0b3e4d3e940239a619c5689637365c4fc592b541859c9de80e3da372d06fb413573cdfa54e4930c595f3bcbe1
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120657v0.xml
Filesize419B
MD59cf7b09cf41c752a59c938b776b728a2
SHA1e7f058c83c3f1afd333b6242b109f6c645c39b58
SHA25636cd7ad5ea7ac1f104d4a8952702cf9f692928992116d74305bd0941fef2bd89
SHA512d45ab56cccabc542bb2d70b6bcd650e82ddfbf9b35275c6d6235b6c1e1d4bd48b44e361e69ddb6643a8e063cbad80d776f6aea0eaa5ffcd951d405e238cc9e12
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120658v0.xml
Filesize472B
MD5edf4c94f3b6e0ad566d390aff31169e0
SHA1d50bf5843f4d969116b64cc3099210e6013506cf
SHA25698d84762bb1d113abf860a5bdf398c95cb1ab7315f49170ef2a12876f56f64b4
SHA512b95da94e7158229fa243b0afd82bafa03548acc24b0e0fa886bbdd83d2f7d141e733f984ff9e25432ebc0eb6bf103205f8a6b107a59ffb71f2adf42cbf5cfe54
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120659v0.xml
Filesize468B
MD5dafd6e857d2dcf68634a917f56f68a51
SHA120ccb674ef5d6a3b858fc9cec56d9b2124b6b301
SHA2561c55f5f26dbf107abae808392a40e8c16b99901a4a56e759064f4e61f8cbada4
SHA512ff66ca196259d34fd18794999fd0797856c3d7bca7824f43ad2dec1dfa00b73ae797870214a10254777ceff6d687211e8b2929eb50be8aa4a9a5291d445f4398
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120660v0.xml
Filesize485B
MD5a7f89a7c4dbc84ecab76c5d76b2d51de
SHA18479df655a201fd586c117e49040d6679aa03ed8
SHA256f402e84f3217aa0b260fc88acf6b879b2162fe2aad5537965146819f6420b7c0
SHA5120fe8eaa0eaa41a7b75ed2d0345d6b7dfb7185d5a0825c7b66f81c5f0c56072222945d69d9175d795abc917cbbce247ed4c416145e80ab0a9a459a231ef3ca890
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120661v0.xml
Filesize411B
MD585a1e8e46ac473f5b94a6c81998f8d61
SHA10da869f0229a54a8afaa8d55e986c55714d1e257
SHA25614fe19bf78e347ae057492ce11db23fe616c7648745aa9d3a1968afdff6cdcfd
SHA512cac84b2caa522560c3f58734f39246b09ec0b82f6e836168ac04dd05e0f9d7618c41c5daf03797a6f0a30ad75d0a66267d651e34718844f2024b4c41087ffb6d
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120662v0.xml
Filesize470B
MD56e37b82083d71e4a27201328c82968bb
SHA1622a4043f6e6b85386588553241ad0ebed74ca7c
SHA2564e0b2dac0bd68bbbb0413702fe7833aaa66032692b935bd8ff0200c77fcdbf88
SHA5129e71e9a62aa34f55591e707fca14c48d13edf3922f9f885ccbd8955e216df653da360faa2fb31de53b48eabfe4c533624445bd232e1e20eb7f772a565e2f3d78
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120663v0.xml
Filesize427B
MD52e2968317c1e4ef44ab304964c2afa4a
SHA10617639628541ac891f4416bd73d02e820ba94ab
SHA25671e31db9506a489fe9cb06598bf7cd59468be51cce54d27056453aebb7634e37
SHA512e4184add85d9abe9ae6a0ad0e1627f239563f972d908ab47d4944a5bfbf26c807e6b2800712f670f0cc8d6ecd155f193870386d064b6de92cca5a818e0bcc7a2
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120664v0.xml
Filesize502B
MD5fad3d1c814d3f9d1e2a7d1bfeca725be
SHA131a0c6ee1c0a7a4bfbc132821677efd6ab1afe55
SHA256cb870b2e53871014f3440cd237235dd38510400b464309536390d4fad2e9aacc
SHA512e18f6099e3378cffd5362fb017e1151d8547e49c199eef2ee46ec08e31ed60e33d4db67c9532708b28da0268f9c68f2cb0577f2896e58eeafc13f82e0973c515
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120665v0.xml
Filesize407B
MD55b3c0cd2fc514c2950554a174985700c
SHA15ba63743a0e1dad4818d5283e62ee4b796413587
SHA25612a879ba41373ac7f5f2bc8295a6597936e5dad8a1425a7115dac3a33fab301a
SHA5125d6c358f46403aa348521de06c7d4a76fd8f8694b4a0b704cffb619a1b92694be16ba1a7e48ab5c6c465dc044c61a2e6772e55a9f923264d854189a6d9f0fbc7
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120666v0.xml
Filesize474B
MD55a516fde41d2930574d65f234b404ecc
SHA1c02ad1c725c07825819a963c1b52f7219ba9b3a8
SHA256747d9f3601d5bf9766715257d414c1d0ccd3b51bf3a97c1988ff575c05f94eb3
SHA512fef2aecfac7c02c6d4dc14067f301179b3c23de5270358bed1dce0e5c58f4910d04838dc07d9912d02fa27a9ea40eebc5a7cdb41a707a775632a59baafb5b36b
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120667v0.xml
Filesize408B
MD533f3963bdbd176e8762f3db3801cd297
SHA103fc669d831e5883725c44f0f9909b3b9bad46b4
SHA25676a04e4110849b61ac74f14ef1ec493ee4243825e7de3de0b24e9be5190f29f4
SHA512ddf23cf586445dd1214a5fe7878432d69d7169cd642762ba095cc036e7366f9d738b673c606d757ed5cf71f1510e92f225cd13b69c0ac60e116bfff0cf3c153e
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120668v0.xml
Filesize469B
MD583d9b0a5e1b15aa7237eb615db2a852c
SHA13006712c8c14a50cc89be92d8f022b430e851be1
SHA256a1684ee60ddcde1e1d724c86b01e8bbba3375ffadb72daf11dce7bc7bef7784b
SHA5129b4d7150b1915029c0aaa925f070e338a4c2cb992ffa134b817cf9535418b203dd7f001dd8de9636118280c34c4343bab2f09ce2e0c1bca40ec209a8bbb8a3f1
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120669v0.xml
Filesize416B
MD58169635ff9a5f334d1b2efafc4e3cbe4
SHA1f097b010c66f21094fe20ba284c58404bf802450
SHA2568fcfa8e66d2661db81cc571bbaf5c337a91dafac59fc9834352991cd65f8bd3c
SHA51210c84528cab0fb933bc05acada91d0c85ee77b3f0928f2133fd02da88b1f3bc55740f74c703f97995fe71394ef0fa4e4428dbe3dad8bd10c9da2db3ad019d167
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120670v0.xml
Filesize472B
MD53e886d6bd392e2996bdbc669ba406b2f
SHA12830210a783b293942d4b3eeee8cc24de7f70f8a
SHA256546a1df6286020e2a3e87f646c3d4c31af1a5891dac20acf7b889c8d9e7d85d3
SHA51273e6374936ba2cc5d132d7b845cb2eb0990f19e2ef3b8285e6654dac337deeade7b490e35dbac3c8f30550427685debe2c1a675c97ddefb759443cf5913275db
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120671v0.xml
Filesize432B
MD5703c4d769c4bf217479980984ea97645
SHA1991c8c9f110a03fa63a0255774101b48525410ed
SHA256fb35eec41140268446411f6151cb0ad5670898168e2b0c7fa15aea93da4c08f2
SHA512be56c2f3006007ee3ae63418a036a0db0fbca58d294ff1ac16912cd4a0f7abe0624f262457787810622f8b32b7d3258c0e88f27067794f673954f97017213909
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120672v0.xml
Filesize475B
MD55b7bf842de7e8e5980ff0f91778ece0b
SHA1086eecd9c046ce57eed62c817184d51aedf6f5f7
SHA256cd772bcc49e793c69cef374ae238776d39de2825884fb32ed419ab12d7b4cf57
SHA5126a86ecc19260320e22ef7246bc0ae522e2692b2a7ed666be0fa07a3fcf047fe9eada6f495ce6f8a8a03ded52a5db971047aa8f2791b80f8f6cc344d0b3483060
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120673v0.xml
Filesize427B
MD54767115173943eb68644dc040e07ef40
SHA1b61055f3168b45774491d24a00bee71d721fc21b
SHA256245e77eb98201e073fc03419f84ba8b7b4d821d1570767e1796ebe72f7e5607d
SHA5123f5100f58b16b967a35822c5c020ec69aa958bc6fdac0a7c7b53c15543fb0e31ab96ac0dfa06d96821a96ec170f66f7f5bcf00d588b771f3bda4f044f3b7224d
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120674v0.xml
Filesize474B
MD534eba99054bfa520c1dedf2498b8373d
SHA1b42a8358bd46b3651abbc27ddb927dc3d89b8cae
SHA256bebf9ff61e0842274bd8aa2088caf237a92c93860ef7a0fcd93e91c94336b005
SHA512adcdb05250ada33b4542d0c763823f9cafead7d13673b5ac8d4ac05d6948f8763d478eea3492a39586e939a67b9055977d4eb6372b8f4ae91b59bef844c3a266
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120675v0.xml
Filesize419B
MD594de4578a05be71694d9d13878a99b7d
SHA1cc8939ff1f505338bdcfbaaa9ec4a739d4805f43
SHA25634f72b7c34b0840cc6f952401f707c10bd85edf2d509e6c6965759d39d5215ff
SHA512a487d94f22cb490da7903c087e169386ef900ca84d8266fd7ff9ee3febff23f196ac1087d45c1d40bafb2b8f53c376a4af3fb6f876612205821fe7d1a7a3e57c
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120676v0.xml
Filesize472B
MD5ac9d62b7835b857ed44864d209f82355
SHA1fdaa5f47f52d3cdd7d94b7b30308b13b9f3e50f8
SHA2560e1a6a341afc507d019fef3dc917b166a2c1b8f495b43aff216e7e1f64bdb3ae
SHA5127fa370c819ec377f80c609266360911bb7f5b3f43a9ce1f06634ac1c7e8453598d205e11074e4df3ee4bffac3f93c696af379202836a384bc7fd163214cdabd0
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120677v0.xml
Filesize405B
MD53476e008932212c063c2d5e44f35c4ca
SHA185d68031b07592b7029c3effd6baf980ddb3e711
SHA2561a8759ff98f85fc810b1bfb7b0bfcdc50f192b1d5a2e11b568aaa6b8315f20ca
SHA512988ca4fe580b0d014b07c7a16958f20b00123e5ef1d57970bfc4c8b04341c96fe3199b727b709ee0c787858d3d0d3c819524e1e9132c0e53b814ae879b034305
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120678v0.xml
Filesize468B
MD5136cfeb91dd15cd05c78c2de2afb74ab
SHA107a4b27dd21f62b1c420c8d899c64e9386369533
SHA256d5567dfc647996f15ba0800b2fdb4197e52044d5f18902564232b090f8e9ebc5
SHA512c51d3ca91ba8a4d0bd5a49585860e2826d30852f905969e7e6733299d42296b7d683e51dac43d3c024c42511181b2bb08902539b732e47bb4d4615839f8a3426
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120679v0.xml
Filesize174B
MD594fe6326eab3f4dee432a583ba357bac
SHA170c6d21217d74070a0bf984a5932505fd778efd9
SHA2565e6d95642b701df9992e2fde0d2761dba15b092e4068095fba5e24f7d63cfbac
SHA5129965f3f2b61a04e7c37b4291feff8e4146aed65e1f437ca8977e0c736c7f5cf324d1ae4b2aa2a1705945a4911ec5665a3af2015ebde7998efdd3ec427dacec00
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120680v0.xml
Filesize1KB
MD5a7952f2718ecc58c970eb1484524d7dc
SHA1ca90c932c676e5f849e17538b3d2fed1ad304e72
SHA2560520533ca401ffda3d43d198d8ab13986067765a1c2e55898ead345ef229492e
SHA51252f4884045b2c39b7fce1ca50456de17abd5cdbda607d4565a648294c7706ec90d65f9f8e824d2c142eda9ff0f0946b9e19e280f5925d18e05a261c915576e6a
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120681v0.xml
Filesize958B
MD516f3c009907ce6eec0d5fd0d9816df51
SHA1233be9093af7352ee368421238bf78a3c51faa43
SHA256ec4de29e9db291920912ecad3b7c7569c6a0908e9426e1806fd688d2025c5b13
SHA5121e9152a9613525a57bea73d5a3b683e7e02474a9c2ac0107f6b9ad183cf0dcb4039b9fb7726853c01991f54aeefff2caffecda102c02a462ac4c250315c9145b
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120682v0.xml
Filesize501B
MD5165fd3eb0489063edeacaa8fb77e1fcc
SHA17e0bdba22fd7aa49d185408f1faf082e3ecddd3b
SHA256c1ab807cdfb87f4d7cc7e9c16f7f16fdffa0e5dce50459d7cb25c9b226576ba7
SHA512a822639417dfc96f7158af15f36a92518335932d627e5f0802dc3ecef405224b4452c37fc5c3fb5e0d5cb84a9a252c73e4ad7db465e734a93a76e4c06cc9d90a
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml
Filesize1KB
MD501bdec61af8a91f0974fa2877635c522
SHA165bcd305418e0f394bf8a480cb312c2dd2006b2e
SHA256cb9affbb94de8a990e1c1fe1f108947d0be197c7d95483c774a758dbc594c677
SHA51298fcaa668198a45b741c849137d0af8c8da2eb0409d9a47b86520cf7f14b7ceb78d9ba88b7f26f0d873cc036925fb52720a91582fd04889d5790cbd0d5e9b635
-
Filesize
9KB
MD558eac13f9e7f37c5a9ba0fe1447a52e1
SHA17005970baa5f758e004899c5ff8f4902a9fa1c0e
SHA256c1c6dd3bde24d9f39c0a2fa5728cc6c41dde947209346ca366e60b4d85182aeb
SHA5127ef312de949a49f65d559a9a078e195f4e37a80748e8dd87e239f75195e764e43ca72fe737cd561a2cfea932ed0307d5f15f54681cad8b158d8b1a4e405ce0bd
-
Filesize
9KB
MD5a10811724a6765a194ae08106233eb5b
SHA1727865443d2181107b0815eaa130d23917e5e19d
SHA2568b89271038932a290917af34f2ab9cb57847441c93e16bacba5e1e65307afd7a
SHA512b56ce0cf402021b3cd64f83484aef89e7ef7c5933935370925c823d82a12b452397de2ceb5d11722d73c9cb6485339c5223e4a31e34d69f99f9ffbfa0f05f8ac
-
Filesize
9KB
MD571dd67ebf021ebfe8da5cef6f2ec41b4
SHA1495bf866c231535042286f0fe452d371ff3d8276
SHA256a4ffdc29415eb31ae5703486bdc2965cbe485a224adc581ed8826de3a633dea6
SHA5128822e899fbabfe85bc7af0fd2c64fb85cf402ef8ee818d518a9b1dcf78575a20b6423cf7561297316e95d8236f9c76f23f0c887f2fcd9c83a31545b1f8be2583
-
Filesize
2.5MB
MD5041ac2f2bea28b1955d27e580c4afc24
SHA1163a54d23e901679bfad76992854983da2502855
SHA2569b84f19c38ff60e62663894c18fa12aabd0531a8263054bab861772169d49d21
SHA5127218f83c94d38a437a378eb5d852be6d64cf77ea0d01d349025c814e1c0cfc541403ffeade23e47c88e441e32965aeaafaa25030fd985aae1d56954ac23cd71a
-
Filesize
610KB
MD57fa4dfcc280da02528a4d138904af81b
SHA153631829d42f311e07fcdd0ef02fad1b45d11a27
SHA2563d44c2713e3cbe34a6feea4ffda56168f3d10d451a52b9353bba24777a6d3e66
SHA512b9fe091bf906ecb0790725063f6f29cc0434490a7cbe68a421c2fd4c9bc940e02fc10bd5010380a79b6c893ebafa52c16845491780b8be4d305ef37ea88a8d4e
-
Filesize
573KB
MD50d76061fdfd89952b815198214b2959b
SHA12f44baedad416fbfdfc16a6c645e32cb208d7381
SHA256a3ed70c0ce443c9276c91a8685fd954a6ab03ad640538e24007f632107f9e8d1
SHA5120961958b0148fbe38c227de7019c8d067b1f7dc769f69e8db9abb5840d013cf629eb9238ac6978cc0dbd436858053bb4963cbc8273251539406edd43eea3fffe
-
Filesize
1.4MB
MD550aee05ce54e74d073b9384c48ac26be
SHA17d6f6b44e0410ed864e913ebc9024b8e31e0b669
SHA2562e9e3d6aecbfa3d0c6e629e768a63770d3f092e46e614e629f2d7e8443172aac
SHA51297db003cf35ee9859db4c5d7b72c83da4750e44450562c345abf3ba027f88fd803d6f71d470bbc33162180e11d65f36151a9a95a14ee6ef4f351a17da65d7f0f
-
Filesize
33KB
MD59e4c261c52e4642294206c5a8c0ba888
SHA190245367c8bc7110bbc5972ae1ed2c9b7b5bcc8c
SHA2565557d22f99f982610f138f6b90c0e04210fd0fa0f569712b6009cf42f0c89225
SHA512ba9f522d0634c68bdf3d24913448102d0ee9707c1598bedb80afbfc322a808b82307ab468446555fb2f2568ae46231dc80f4ec96f379108eb396c8fe7e4d733a
-
Filesize
33KB
MD5b74e045ea3cc652179cc419c796d41a3
SHA173aa2865f05b32c4e10dd2f47f8a4245e2bbeb6f
SHA25604399601b2515d632879dbeb3d193e027d60c4e3b953541d4a31612deefead8d
SHA512e24102028101ded505573f3e6096412ca093973d9cced25e2bd0f19db622df33e0031cfade41e6967601a0fcf105b58d920e389590a5a976995aa400e4123d51
-
Filesize
33KB
MD5fb4a1a3e0a55083bd40ba96f5a9ab438
SHA1a5a2c538c615e7508ceefc595fef0bb354b71188
SHA25617b69b2854562773df1d4604a36dadac266f0e0263691e75253d2b9cf7646d09
SHA512daec01bb20faab87c2741ad1a5eb45e4290f93b99aafe69ec1774b4d20cec5a1ac2be3ba73060387a73def9b9f3167504aa754226fdff6ab41f646246a7d49c9
-
Filesize
259KB
MD584ec4b5717a2c9067064dab729ddde84
SHA1202b10f0799057a9b763b8c0af92cfc8d14ed27d
SHA256ccd21b31b5e2a4c3de9899e1f759c878b11c1c9848a351d80c10016c0ba2c25c
SHA512377d542c8987d57c4d7369a942ee835caf4b010f9fc82b7ea0997b8900a092a4e47597ae602ca78dca04baef5021a5e1aacf2122e2ed9057b7e1d4fb5a40e957
-
Filesize
30KB
MD5a1e17096f82410709e32d89feb14b100
SHA1413a56228c57dce84a81aa83255393dab1bf9aaf
SHA256e0c22759213d16c3ee61f1c5984317376e4d1885fdff14af436c83928e68c453
SHA5126c9ae65dbb7ac79e822bf397926b988cf6e8aa018c5f1c43f6c3235ef8b33d34225d0157f970854929fb6e3214cf070f43e1b7fc0315ffa8a2ad04ef3c3a672d
-
Filesize
30KB
MD5f5a15a2ac1fca2d86dea6d6d00ba28fb
SHA1cd39becd208cc36a3e5935ce024fc598792b18a3
SHA2567267aa175dcf3c668c863778ae731f674aea0e40cf085cf37925770f5e230f1f
SHA5125c52d34af18528c2f806fcd790427fb82ff75e7c786657a986166081afffc83c0782c28341d3e06f86c3b04cd3b2ddb8ed972fa4ee42aa21a3c9c76cadb03753
-
Filesize
30KB
MD55d0e0fde2fb2afc779bd5af7c3500b55
SHA1f3b003d7b18161eeac861a45be206df9ceb14efa
SHA256a845a1f5d69c1239a3f0c1e79cb9f05dd489ee74f834f69fa5a542b46cff011a
SHA5120a454893949f35277fc7c4e270f4cce351255e8c7ba1173500bb3da487a68ebdc6735756aba52c7b8ce86abe435c497a35a0a3ab126b029a0273321d90f7c791
-
Filesize
281KB
MD51d867a2ced9edcf8fe4f7ab21fc860d4
SHA1892c94ab07b8202169ca47b89976d46b4bb69a8b
SHA2564102691991c6a335cd2a444121f30f60550b60b69c306c18ed4ff9eaf5f22c2b
SHA512f3e82ce17dc945d7a7a9ac32c29aca9a016c2cffa2bc8b233aa0ed84f640cadeb031aeac56a0ae894587b05060c3c831ea88af363bc8104b14c9952f046a00df
-
Filesize
31KB
MD517ba0c4e6f4beab5b3865d6f20083f2d
SHA182c2042bde53044b7bb252af045df9b5f6d1fac9
SHA256fe727e2502fe141e65d5434468fecb4a682c6183f12d188d138c11fe77ee9444
SHA512506d3d9fe032e2512a02860dee60df1cf8e26f21d60c947e6d66ab9a6f03fb8e926bd52fb6af85f98007eba9881f8a96638b167582e20fefafd5f9ff392637fc
-
Filesize
31KB
MD599cb3735ca81caaec8fcd2d97c654fbd
SHA142c6402bef8b221be3a9734debbe07d1e96916ac
SHA25667f7f4b78eedc9c25c0e0fe6585cda314e4189f47e015b278f895a32fbdabd17
SHA51260e57580d9058267741aa8e501a9776dd30680c4971b905d29af3bf1af641607e4c7acbe60c4f3954b95e6864ee692244068ff039933588914c2037658fa8105
-
Filesize
31KB
MD50b14dc05cd2d5e189680ff7272f5561d
SHA1c28cb7e623e8eb3d9c3946e83c00c63e67b7f7c5
SHA256c48fb0072fce0ab94f00df7bd9172a38889529d5fbe13b3a65c693bc323e3f44
SHA512a3616bbf82141d0108e2448028a8382b68787d2acb3ae9da11e2a757de6db45fd1d04eb94d376e9c9df87d1497296edccb86adf17b1f4ae47077c5b6036a1576