938275f201c537e5dc28833645bec58885e3e69d9dc1cd38e611d2977959f405

Analysis

max time kernel
268s
max time network
272s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
31-03-2023 19:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Setup64.exe
Size

8.0MB
MD5

1cb0c517220253564af5702918929487
SHA1

3d95c566c8f773abd0ff18ff73f097d7eb61dc83
SHA256

938275f201c537e5dc28833645bec58885e3e69d9dc1cd38e611d2977959f405
SHA512

400be5903f60a839418c3f9a173604d0b32e0cb741597268288d2e222ada60de1016432a3c3db8e45bad67210c68339056477a91c8c7ee9468624b92b30d51b0
SSDEEP

196608:ffgwOpYPwsTyxbeAi7jmye1fOEfuP++iZpXUg/33JHey:IYPAxCp7jRyfOPiZpXl3JHey

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

OfficeC2RClient.exeSetup64.exeOfficeClickToRun.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	OfficeC2RClient.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	Setup64.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Control Panel\International\Geo\Nation	OfficeClickToRun.exe

Executes dropped EXE 3 IoCs

Processes:

OfficeClickToRun.exeOfficeClickToRun.exeOfficeC2RClient.exe

pid process

4220 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
968 OfficeC2RClient.exe

Loads dropped DLL 34 IoCs

Processes:

OfficeClickToRun.exeOfficeClickToRun.exeOfficeC2RClient.exe

pid	process
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
968	OfficeC2RClient.exe
968	OfficeC2RClient.exe
968	OfficeC2RClient.exe
968	OfficeC2RClient.exe
968	OfficeC2RClient.exe
968	OfficeC2RClient.exe
968	OfficeC2RClient.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks system information in the registry 2 TTPs 8 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

Setup64.exeOfficeClickToRun.exeOfficeClickToRun.exeOfficeC2RClient.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	Setup64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	OfficeC2RClient.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	OfficeC2RClient.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	Setup64.exe

Drops file in System32 directory 64 IoCs

Processes:

OfficeClickToRun.exe

description	ioc	process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700951v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10906v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70036v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120633v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702850v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70006v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702950v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701150v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703151v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10784v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11464v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11659v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120100v3.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700701v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700851v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230166v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10781v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10879v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11209v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700051v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703750v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703251v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700651v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120610v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120665v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120666v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703001v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700150v1.xml	OfficeClickToRun.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10803v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11370v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120626v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10925v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11265v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701551v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222100v7.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120621v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701800v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702050v1.xml	OfficeClickToRun.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db-wal	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10626v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11362v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11502v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701651v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11190v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703150v1.xml	OfficeClickToRun.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700750v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702651v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702251v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700451v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10808v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10940v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120618v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120637v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702601v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703100v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704100v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10822v2.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10924v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11369v1.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120642v0.xml	OfficeClickToRun.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70031v0.xml	OfficeClickToRun.exe

Drops file in Program Files directory 64 IoCs

Processes:

OfficeClickToRun.exeOfficeClickToRun.exe

description	ioc	process
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-crt-math-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVPolicy.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.zh-cn.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-crt-conio-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.el-gr.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.ja-jp.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.ru-ru.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\StreamServer.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppvIsvSubsystems32.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.bg-bg.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.sl-si.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-crt-multibyte-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppvIsvSubsystems64_arm64x.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVScripting.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.fr-fr.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.lv-lv.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-core-file-l1-2-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.nl-nl.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.pt-br.dll	OfficeClickToRun.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll.bak	OfficeClickToRun.exe
File opened for modification	C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.cs-cz.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-crt-heap-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.lt-lt.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.ro-ro.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\officesvcmgrschedule.xml	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\ServiceWatcherSchedule.xml	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-core-localization-l1-2-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2R32.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.hu-hu.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVIsvStreamingManager.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.fi-fi.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\OfficeClickToRun.exe	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\SubsystemController.man	OfficeClickToRun.exe
File opened for modification	C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVManifest.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\msix.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\officesvcmgr.exe	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RHeartbeatConfig.xml	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-crt-locale-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVIsvVirtualization.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.et-ee.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\IntegratedOffice.exe	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\manageability.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-core-timezone-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\offreg.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVClient.man	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-crt-stdio-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.th-th.dll	OfficeClickToRun.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\vcruntime140.dll.bak	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.en-us.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\vcruntime140_1.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVIsvSubsystemController.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVCatalog.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\AppVClientIsv.man	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.en-gb.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.it-it.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\C2RINTL.pt-pt.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\vccorlib140.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\api-ms-win-crt-time-l1-1-0.dll	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\InspectorOfficeGadget.exe	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\MavInject32.exe	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\ClientCapabilities.json	OfficeClickToRun.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16227.20212OfficeC2R66CD7FA0-E2E3-4AC0-9308-DDE43121A12B\SharedPerformance.man	OfficeClickToRun.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 12 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

OfficeClickToRun.exeOfficeClickToRun.exeSetup64.exeOfficeClickToRun.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OfficeClickToRun.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Setup64.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Setup64.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OfficeClickToRun.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	Setup64.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	OfficeClickToRun.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

OfficeClickToRun.exeOfficeClickToRun.exeSetup64.exeOfficeClickToRun.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OfficeClickToRun.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	Setup64.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Setup64.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	Setup64.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OfficeClickToRun.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	OfficeClickToRun.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	OfficeClickToRun.exe

Modifies data under HKEY_USERS 64 IoCs

Processes:

OfficeClickToRun.exe

description	ioc	process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\all\Overrides	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Experiment\officeclicktorun\BuildNumber = "16.0.16227"	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.15 = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.12 = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ETag = "std::wstring\|\"9eS9iD/djgCKvWw/78zdCAPQ8/TyKHLALn+enenWpe0=\""	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.4 = 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	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|6"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\officeclicktorun\Overrides	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\TrustCenter\Experimentation	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSTagIds0 = "5804129,7202269,41484365,39965824,7153487,17110988,17962391,17962392,3702920,3462423,3700754,3965062,4297094,7153421,18716193,7153435,7202265,20502174,6308191,18407617"	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.3 = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	OfficeClickToRun.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry\Volatile	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|9"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\VersionId = "uint16_t\|0"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceId = "0018C00848EB2BF9"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.6 = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry\Volatile\MsaDevice = "t=GwAWAbuEBAAUKFVEGReoCdHdlh1TorgVuqX+P2gOZgAAEP3YKJDTMA+xb1qalxpBYXDgAJ6cHURONPydYgpjH6jSTw9b9schd5LafgtknmFLEYo6YqLmm+sIIjnhXuE/Ew5Mu0QleiZuNJlJF//yuwS+tMfM1TiiqDr2+8KqoxflrZSw22WU8dKVKJiAVRGYc1ZqI9m8/NoH4lTRG+9QcZX1UNfFDrxNY6ZxW/tW2oI0YEKH37AHyGvJMUmo4lEpeNSU6kStpHnHDsNwt2DG+SipX2U6vuaZSEfQ3deLQ+KxVUxiWoVbXrQmXgfL9Mm8vRZR01yWWJ+I8z4sxOCviC/IHqsWSS8mttZafXDGEQANmxpkHQE=&p="	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:"	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceTicket = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.2 = 626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e5573654944697265637433644465766963654163636573735633222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e55736550726976617465417069546f436f6d706c657465416e696d6174696f6e734f6e53637265656e4f63636c75646564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4170706c652e5469636b6574436163686544697361626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4175674c6f6f702e456e61626c6542617463684f7074696f6e73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4175674c6f6f702e557365496446726f6d416e6e6f746174696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4175674c6f6f702e576f726b666c6f7744697361626c65642e5265706c6163654f626a656374576f726b666c6f77222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4358452e426f6f7449646c655468726f74746c6572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4358452e48696464656e466f6e74734d736f466f6e745069636b657257696e3332222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4358452e4d736f2e52656163742e4f6666696365486f73742e4973436f6e6669677572655344584261736550617468456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e43686172742e50726573656e746174696f6e4c696e65456e64696e67466978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e417070564d61785265747279436f756e74222c20225622203a2022696e7436345f747c313422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e417070564d6178526574727954696d654c696d6974222c20225622203a2022696e7436345f747c363030303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e417070565265747279496e74657276616c222c20225622203a2022696e7436345f747c3230303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e43444e436f6e66696753657276696365507265666978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e4368616e6765476174652e557365456e756d57696e646f7773546f4761746865725665746f73222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e436c69656e7444656c74615061636b61676573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e446f72694f6e496e7374616c6c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e446f72695761746368657243616c6c496e74657276616c222c20225622203a2022696e7436345f747c393030303030303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e446f7269576174636865725175657565496e74657276616c222c20225622203a2022696e7436345f747c36303438303030303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e446f776e6c6f6164436c69656e74576974684d534958222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5265706f4d616e506970656c696e65456c69676962696c697479222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5265706f6d616e466c6967687453657454727573744c6576656c4f6e46696c6532222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5265706f6d616e496e7374616c6c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e52756e446f726957617463686572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e53687574646f776e417070734f6e4c6f636b73637265656e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5570646174654c6f636b73637265656e41707073546f4b696c6c222c20225622203a20227374643a3a77737472696e677c75636d6170692e6578652c6c796e6368746d6c636f6e762e6578652c736b7970652e6578652c73656172636870726f746f636f6c686f73742e6578652c6f7366696e7374616c6c65722e6578652c6d736f73796e632e6578652c6e616d65636f6e74726f6c7365727665722e6578652c6f6e656e6f74656d2e6578652c70657266626f6f73742e6578652c67726f6f76652e6578652c6d736f69612e6578652c6f66666963656261636b67726f756e647461736b68616e646c65722e6578652c6d736f6173622e6578652c73647868656c7065722e6578652c61692e6578652c61696d67722e65786522207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5573654261636b75704465706c6f796d656e744f7074696f6e57697468496e73706563746f72546f6f6c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e55736542696e674164646f6e4f6e496e7374616c6c222c20225622203a20227374643a3a77737472696e677c656e61626c656422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e55736542696e674164646f6e4f6e557064617465222c20225622203a20227374643a3a77737472696e677c656e61626c656422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e557365456e756d57696e646f7773546f4761746865725665746f73222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5573655465616d734164646f6e222c20225622203a20227374643a3a77737472696e677c656e61626c656422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5573655465616d734f6e557064617465427573696e657373222c20225622203a20227374643a3a77737472696e677c656e61626c656422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e436c69636b3252756e2e5573655465616d734f6e55706461746550726f506c7573222c20225622203a20227374643a3a77737472696e677c656e61626c656422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e437573746f6d6572566f6963652e436f686572656e6365457870657269656e6365456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e437573746f6d6572566f6963652e466565646261636b446973616d626967756174696f6e53637265656e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e437573746f6d6572566f6963652e486f73746564466565646261636b5461736b50616e65222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e437573746f6d6572566f6963652e497346656174757265537065636966696344617461466f723350456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e437573746f6d6572566f6963652e536173466565646261636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446961676e6f73746963732e4173796e63496e6974436f6c6c6563746f7273456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446961676e6f73746963732e456e61626c6553687574646f776e4f6e526567696f6e4368616e6765222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e414354522e5468726f74746c654361706163697479222c20225622203a2022696e7436345f747c313022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e414354522e5468726f74746c65496e74657276616c4d736563222c20225622203a2022696e7436345f747c3130303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e414354522e557365436f6e74656e74416374696f6e466f72506970656c696e65436f6e74726f6c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e414354522e5573654e6f6e426c6f636b696e67446f63756d656e74436f6e74657874557064617465222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e43617264546f75636861626c65222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e44484352657475726e48616e646c6564446973636172644472616674222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e44726f70536861646f7757696e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e44726f70536861646f7757696e5632222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e456e666f726365444843576964746832222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e466978694f5353656c6563744a697474657232222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e4e6577436f6d6d656e74427574746f6e44697361626c6564466f637573466978222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e50616e65546162466f637573466978657332222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e506f6c697465466f637573466f7257696e3332222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e507572654361726453656c656374696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e50757265436f6d706f6e656e74735265666163746f72222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e5465616368696e675549416e63686f72222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d6f6465726e436f6d6d656e74732e4a53476174652e5573654973526561644f6e6c7950726f70222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d736f2e4c616e64696e67506167652e536861726564576974684d652e416767726567617465644d7275222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d736f2e4f757453706163652e436f70795061746853796e6346697832222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4368616e6765476174652e4d736f2e4f757453706163652e4d616e61676553657276696365732e526563726561746553657276696365496d61676552656e646572657273222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e446f63756d656e744d72752e416767726567617465644d72752e49734c6f63616c4974656d73456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e486f6d65506167652e5265636f6d6d656e646564446f63756d656e7473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e486f6d65506167652e5365617263682e456e61626c65416767726567617465644d7275536561726368536f75726365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4d6f6465726e436f6d6d656e74732e5265656e61626c654d656e74696f6e436f6e7461637443617264222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4d736f2e486f6d65706167652e49734f6e6c696e6553657276696365466978456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4d736f2e4f757453706163652e436f70795061746853796e63466978222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e446f63732e4f44656c74612e53747265616d4d6f6465222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4543532e4361636865457870697279496e4d696e222c20225622203a2022696e7436345f747c37323022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4543532e436f6e666967496444656c696d69746572496e4c6f67222c20225622203a20227374643a3a77737472696e677c3b22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4543532e44697361626c65436f6e6669674c6f67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4543532e456e61626c65536d61727445546167222c20225622203a2022696e7436345f747c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e454353546573742e746573747661726961626c65222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e41766f6964467261676d656e74696e67436f6e64466d744f6e5061737465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e456e61626c6545326f426f756e64734d696e4d61784361636865222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e4644796e616d69634172726179735570646174654368617274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e496e7369676874732e456e61626c65436f6d706c65785069766f745461626c65496e5069766f745461626c655265636f6d6d656e646572222c20225622203a20224d736f3a3a416e79547970657c75696e7431365f747c323b626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e496e7369676874732e456e61626c655069766f745461626c655265636f6d6d656e646572222c20225622203a20224d736f3a3a416e79547970657c75696e7431365f747c323b626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e496e7369676874732e5069766f745461626c655265636f6d6d656e64657252616e6b65725632222c20225622203a20224d736f3a3a416e7954797065	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|12"	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.14 = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "2"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|5"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified\officeclicktorun.exe_queried = "1680299639"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ExternalFeatureOverrides\officeclicktorun	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.1 = 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	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\ApplicationFlags = "1"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "1"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\RemoteClearDate = 0040a7e3a36bc901	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=1033&build=16.0.16227&crev=3\Last = "0"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	OfficeClickToRun.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

powershell.exe

pid process

1480 powershell.exe
1480 powershell.exe

pid	process
1480	powershell.exe
1480	powershell.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes:

powershell.exeOfficeClickToRun.exe

description	pid	process
Token: SeDebugPrivilege	1480	powershell.exe
Token: SeBackupPrivilege	4220	OfficeClickToRun.exe
Token: SeRestorePrivilege	4220	OfficeClickToRun.exe

Suspicious use of FindShellTrayWindow 5 IoCs

Processes:

OfficeClickToRun.exeOfficeC2RClient.exe

pid process

2096 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
968 OfficeC2RClient.exe
Suspicious use of SendNotifyMessage 4 IoCs

Processes:

OfficeClickToRun.exe

pid process

2096 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

Setup64.exeOfficeClickToRun.exeOfficeClickToRun.exeOfficeClickToRun.exeOfficeC2RClient.exe

pid process

4028 Setup64.exe
3716 OfficeClickToRun.exe
4220 OfficeClickToRun.exe
2096 OfficeClickToRun.exe
968 OfficeC2RClient.exe
968 OfficeC2RClient.exe

pid	process
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
968	OfficeC2RClient.exe

pid	process
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
2096	OfficeClickToRun.exe

pid	process
4028	Setup64.exe
3716	OfficeClickToRun.exe
4220	OfficeClickToRun.exe
2096	OfficeClickToRun.exe
968	OfficeC2RClient.exe
968	OfficeC2RClient.exe

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

Setup64.exe

description	pid	process	target process
PID 4028 wrote to memory of 1480	4028	Setup64.exe	powershell.exe
PID 4028 wrote to memory of 1480	4028	Setup64.exe	powershell.exe
PID 4028 wrote to memory of 1480	4028	Setup64.exe	powershell.exe
PID 4028 wrote to memory of 3716	4028	Setup64.exe	OfficeClickToRun.exe
PID 4028 wrote to memory of 3716	4028	Setup64.exe	OfficeClickToRun.exe
PID 4028 wrote to memory of 2096	4028	Setup64.exe	OfficeClickToRun.exe
PID 4028 wrote to memory of 2096	4028	Setup64.exe	OfficeClickToRun.exe

C:\Users\Admin\AppData\Local\Temp\Setup64.exe
"C:\Users\Admin\AppData\Local\Temp\Setup64.exe"
1⤵
- Checks computer location settings
- Checks system information in the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4028

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile "$package = Get-AppxPackage Microsoft.Office.Desktop -allUsers; if (!$package) { $Error.Add(\"Package is not installed\")}; if ($error.Count -eq 0) { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '1' -Encoding ascii; } else { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '0' -Encoding ascii; Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateError.scratch' -InputObject $error -Encoding ascii;} "
2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1480

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
OfficeClickToRun.exe platform=x64 culture=es-es productstoadd=ProPlus2021Retail.16_es-es_x-none cdnbaseurl=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version=16.0.16227.20212 mediatype=CDN sourcetype=CDN ProPlus2021Retail.excludedapps=groove updatesenabled=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.UseTeamsOnInstallConsumer=unknown flt.UseTeamsOnUpdateConsumer=unknown uninstallcentennial=True scenario=CLIENTUPDATE
2⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
PID:3716

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
OfficeClickToRun.exe platform=x64 culture=es-es productstoadd=ProPlus2021Retail.16_es-es_x-none cdnbaseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version.16=16.0.16227.20212 mediatype.16=CDN sourcetype.16=CDN ProPlus2021Retail.excludedapps.16=groove updatesenabled.16=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.UseTeamsOnInstallConsumer=unknown flt.UseTeamsOnUpdateConsumer=unknown uninstallcentennial=True
2⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2096

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Drops file in System32 directory
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4220

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /progressandlaunch AppTargets="root\office16\excel.exe|root\office16\msaccess.exe|root\office16\mspub.exe|root\office16\onenote.exe|root\office16\outlook.exe|root\office16\powerpnt.exe|root\office16\teams.exe|root\office16\winword.exe" ManualUpgrade=False ScenarioToTrack="Scenario:{477E0208-58BD-4F33-978A-09BCC9AA9EB1}@INSTALL"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:968

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVFILESYSTEMMETADATA.dll
Filesize
296KB

MD5
47df99fe851db855c5507328f660dcf5

SHA1
195a33f0b91d6fda50d48c98c8e9bbfacfbf331b

SHA256
15646e0312a8ac15305efb382ce658ca37e6d4e4b73f93387589fd1d8139e3db

SHA512
5de2564d67dbf37ec38d40ac3b2d11fae4318744655941a763a514ed35d38fdf55694852789ca98d9e11c9ead5f997f8091d1413e20d511aba9aef1f8c46d5ea

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVMANIFEST.dll
Filesize
984KB

MD5
18ebc0da472b1efc4e8f6b6627cffc93

SHA1
20a7cf7558d8a7a5bbcc131cbaf4ba75d3f11815

SHA256
624ab9c6838a88550ad5d906e86829778b5a9fce09a55a67eadcbb5806058c98

SHA512
a443da09f063e6ba8711df6ac9c35aa26298356e3dcf819e7784b8641c609fa8fd5d30ec03964493790058b138534f342b65e0688b93e8fcd6d6aa772acd6f6d

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVPOLICY.dll
Filesize
1.0MB

MD5
1c03d1935b5892738a188ba40cd5a223

SHA1
b793c3918203f57468a7baa83e8d9e6e7b775545

SHA256
d656c21853e185feb04c0decc52df277ed9d214e9ffa31b86ed34c682e1b5730

SHA512
f9fa9def40ec3053f3a75ab2bc8e7c68c8b806be5bb80cda726ac8c08e3152c32db84a43a9e5775851bde0067d9ce9c8657a19850887171b0b206685318dbf40

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
Filesize
513KB

MD5
a727a7e91d4cdb5e2c0f929ed39e2add

SHA1
85b98327d12c8cc1d70a1a27a92d981971abfcf1

SHA256
4ca1616e3475c48c4fe46d40e3c347c6b58825872afdaf09f5a65639756dd3c4

SHA512
8b5d36b4b9775f399e80bdfe76b9d8c412315ba1f2c6d09dbaf7842567b6a648587b1fabeb97db47332e831ddc7a99078f12f0a682e5753594deddce1ad319a6

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVCatalog.dll
Filesize
596KB

MD5
cf282ddd8d2cd281b2afb341bbbc7f8a

SHA1
8104ad996680c838c44743b1cc3149353c8bdb2b

SHA256
91cc31c10bac6b042855d8a48c854ba57b8e2085ca427786416f418f3597860b

SHA512
fed8069b200919471a21ac0b1d258f89f206bb6ed172b9b5a17e7d13b78fd825d25a33172adedec55cb89f225756f36daa9eec587eff52bf91df3752c2bd9de3

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIntegration.dll
Filesize
1.6MB

MD5
c01cc0200f3d889c68b503c68049ff62

SHA1
338589ddb1ffb4422f06e75f62f0db1151741f5d

SHA256
326bcb85652c67780d0193d78d5bab30e3668e6bcbcffcff304751b2f4518f54

SHA512
8d072207da418ff170e843f2d97b0e52875b42d2d4b46882d5de08a4e98bf1b7788052c5c591aa70f72813fe2b692541c55920d6dbe22ef15b7ef8a9252da58a

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvApi.dll
Filesize
404KB

MD5
fc0e1d121cdded19e7b98cd995bde281

SHA1
102ebe6eb24cf598d559b305423b38896a8208cc

SHA256
7ccc472997dc3d5080cac6918bbd7ba172a4e674f59b5721e7487cd9b101d64d

SHA512
7077503a5265554f85364744385c4db557cc87f3540688f661c3f139e94cf107ceb2fdac51235a92030ce9dc19a411326ac720ff0925d9d28894afa4b3a0989c

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvStreamingManager.dll
Filesize
188KB

MD5
4d3d26e3dee4398c1127903171ceb1c3

SHA1
95e316fe28d10ab358eaf71cc1bc66e3912d55a0

SHA256
3f54dc6589030ea96e0022e2a36624d9f8aba31a0940db4f2da3773739f5fd3c

SHA512
7241f433e9c970d16658fc3498235804de128564c7be25afce9c3d75d14000e738a9cc8de343c339f47144f243250eb8918f4ddaef783fae1b0dae0a1d5bcb45

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvSubsystemController.dll
Filesize
1.0MB

MD5
c11a2fd58229c692c39030a8247b2d24

SHA1
880ed2315aaa6da88115d601e62ff15343a2dddd

SHA256
e2df35a7d853c4a436cb3c62274f9f47347aa82765bc39d9142c5d7933924f0c

SHA512
0f40eb4c8e29420a04f1f5f3662f57931238e91269692745fbaa979bdcbec9d23360258419aa723081743a70cb4b31dfb25203f6791024832ff7ef4913858956

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvVirtualization.dll
Filesize
569KB

MD5
ce44f80d1b763e431d33588d4b74d1e5

SHA1
95dcdfc80cc6d16e2be3e74bf398598988a2a01f

SHA256
d1cdcde82af468feed1a8ac8826f40cf902d387605367be8437cc6dbbb3ebf6f

SHA512
982faaec67f708db33717efd079f42691de1073ea84f5079e3d0ca2b565feb19b4014f3bd53bed893f81bc99b0bda00d6337b65bc63bc6bed3318a373e3272c9

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVOrchestration.dll
Filesize
828KB

MD5
0884821e75b789d14faa4757a7f31880

SHA1
b837e32188a5673683d02bc62e21a23647308d7f

SHA256
1ebb321cbfeceb8eb13045118f09d43b94bc0172cdd185fbb3dffe58d7da10ab

SHA512
42fe74d5d28c20695d2230d66e0c368059e0726f494a2ecec3e2c8aef4e4a1c570f072564c59362c347e653c46b4f15af4db11fbc9ad0d2babbf8883df032ebb

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2RUI.dll
Filesize
2.7MB

MD5
3ae8fcb45eff75d6395c3834d33db0e4

SHA1
1d437a8c30fbd305a44ad7e97bb2d7c3a6f3e3c6

SHA256
e90685e1f78f37742c2074e1c11f759d92a15046485790d6b53ddd47bd5b87cc

SHA512
34b28dd9de4e62585b817aff859b63a0242d10995d7749257e00910a22d5cbdc770a16fab1691a2ba2a035b2b51fa5d286c7bf05dbe111bac8bb6e9b3962df47

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\CONCRT140.dll
Filesize
309KB

MD5
22a0056ffd1c0b3081ca56f441cec3c9

SHA1
81eaaed525b7c714261f840f7cdb5164e45d734e

SHA256
782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1

SHA512
72cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\IntegratedOffice.exe
Filesize
5.0MB

MD5
180134dd9133b72162d59cd17b25f7d5

SHA1
5b3ef04829c37238530440f0a83bf23c92f972f8

SHA256
d1270a7461f39108d55546f0c1022e218780a1af09927fbdf523152f37766da9

SHA512
432baff52326fb75825b9f9521ed5d134aa4cab9fedf465caafb90e6d040b4ff80823290b54922c976db25130ce157bc49a2c4ceada8af3b25dd65941fd8571e

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSIX.dll
Filesize
2.0MB

MD5
73e5db06d521ae01c73f212066d60e7d

SHA1
4a543443217f83e6e5b5f626ffe1ceda8faa1722

SHA256
51f1ee787de22c43f88fbf10396f656c4fb709c7f42f84a6391a33817fc2d39f

SHA512
e118ba8665ceacf719092713a8b200d6a028160b0cb3cad1a3f4b56c708f22e830cc842e35f9083206a7c8a2555b5a4b8cc5e24a38e1da42339fce70c40d49f2

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCP140.dll
Filesize
557KB

MD5
7db24201efea565d930b7ec3306f4308

SHA1
880c8034b1655597d0eebe056719a6f79b60e03c

SHA256
72fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e

SHA512
bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Filesize
25.2MB

MD5
76bae816a0ecd113e75fa57734e0dc52

SHA1
b24049bbdf3a78bf3793bb175a473b5238c7f77c

SHA256
cdc134165d806c9c8c7d2d2212fa6379edf80ae7952a4d79c8db07dd8b39356e

SHA512
f4171e91d364b42b72bd4d0511834b92254bf1d42854b45a8ca56e01df0e2a9848baaaaf383c5e76b8e84bd13de741e77735ba179ecfb776f09d4008a101092d

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
Filesize
12.0MB

MD5
8ce3e90755f4294ce6a50647a825c391

SHA1
5dd4a107709f467b343692b0d2597f5b0a6ded08

SHA256
a5843ba7aeae5a4aa84b1746610c5530c4fe3557f7dd612a19fdb03ad58ee733

SHA512
b3092b56f814724dacc45f817538ea4295c34afee49d1c05403c9523b9721dc7dba37b3ce1f0aa5003352f4263518d72d2a7639b79d03ce6320b1f770dc6de19

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\StreamServer.dll
Filesize
3.5MB

MD5
1b613559182ea2390ac0ee19acafd197

SHA1
e8c831ab43497dd9de072f9594eac92c608a1ee4

SHA256
51d376409c5b1bd4df2b627badf1847b8fd1e9deae4ca74860aad2d84562ac01

SHA512
c6c47637792e733a3fab5dfb316892ba09ba095c3592a5dfd1b18cb39b10dca1a09d3f6a74840f89cb0eb6fa3ad738e20d011e8663ee4a8530e69c0a899ba02c

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\VCRUNTIME140.dll
Filesize
96KB

MD5
f12681a472b9dd04a812e16096514974

SHA1
6fd102eb3e0b0e6eef08118d71f28702d1a9067c

SHA256
d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

SHA512
7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\VCRUNTIME140_1.dll
Filesize
37KB

MD5
75e78e4bf561031d39f86143753400ff

SHA1
324c2a99e39f8992459495182677e91656a05206

SHA256
1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e

SHA512
ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\appvisvsubsystems32.dll
Filesize
1.3MB

MD5
cc9a7fa30bd51462ebcb900b7ec14826

SHA1
67c3cac4848c518e70e80d9a77db07b1c2fd6184

SHA256
334b83604aebec2edc6c18dcb59a8394627db9fd0c40aa9fcb54a5eeee9dd888

SHA512
cd45ecab0f8ac6783a7f5ab409d6a786948e8082c64bb1244e64a461aa547cfd183db232efc4199b83eddd389c961b824714e199ab424ab33b1b2474ebb105ed

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\c2rintl.es-es.dll
Filesize
53KB

MD5
5289c202a23dbf23688c609129c764e3

SHA1
2d772de4e33b7dbfcc2a13e61664cd23ff221177

SHA256
5be10d5b964721e2e11f142aaec0492b5f183968d681d677747524562fb2a199

SHA512
1a5d1b1d76d9935bf063406ca3cf57ffba35e5eb09b21ac96da16544485415c68b3af03d1807e03623ee55f6455107dc6d3245c3c58c0075068a50fbd89138a2

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\i640.hash
Filesize
106B

MD5
b0c93af78fd5abb4dd6af3aa38814c6a

SHA1
d1469d7b26217dfe8a7ff78e8a5da95577e60d23

SHA256
ce538183d5f54eb61d3165d7db0df539f76f79a8492ea072516e0b2ad2576f03

SHA512
5ab54a762efd1d286cb9b18ab85be582d79c47ddd7e4d1309b4c394492e04ca41eb45dcde820bb4909b3c96f688d27bc176437b74a80f2a49d938b5333949f89

Download Submit
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\repoman.dll
Filesize
5.6MB

MD5
6697ea80326a1b569aedc5909ac02a93

SHA1
d2c5d4576ead4ec0dbda4efcabf97697b48fb1d5

SHA256
38ea68c117d76a5385acb4ff501360698f3d9555d0e4671c589abd294b2146b7

SHA512
810bb64e7c2ccbf1029741e967c38abaeeb9cab35c513c283eb99d5f1881867b2eafb0c63e494691f1662cbb6721738a364132e13a2b00dac0ce4607843831e0

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll
Filesize
513KB

MD5
a727a7e91d4cdb5e2c0f929ed39e2add

SHA1
85b98327d12c8cc1d70a1a27a92d981971abfcf1

SHA256
4ca1616e3475c48c4fe46d40e3c347c6b58825872afdaf09f5a65639756dd3c4

SHA512
8b5d36b4b9775f399e80bdfe76b9d8c412315ba1f2c6d09dbaf7842567b6a648587b1fabeb97db47332e831ddc7a99078f12f0a682e5753594deddce1ad319a6

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll
Filesize
513KB

MD5
a727a7e91d4cdb5e2c0f929ed39e2add

SHA1
85b98327d12c8cc1d70a1a27a92d981971abfcf1

SHA256
4ca1616e3475c48c4fe46d40e3c347c6b58825872afdaf09f5a65639756dd3c4

SHA512
8b5d36b4b9775f399e80bdfe76b9d8c412315ba1f2c6d09dbaf7842567b6a648587b1fabeb97db47332e831ddc7a99078f12f0a682e5753594deddce1ad319a6

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll
Filesize
513KB

MD5
a727a7e91d4cdb5e2c0f929ed39e2add

SHA1
85b98327d12c8cc1d70a1a27a92d981971abfcf1

SHA256
4ca1616e3475c48c4fe46d40e3c347c6b58825872afdaf09f5a65639756dd3c4

SHA512
8b5d36b4b9775f399e80bdfe76b9d8c412315ba1f2c6d09dbaf7842567b6a648587b1fabeb97db47332e831ddc7a99078f12f0a682e5753594deddce1ad319a6

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVCatalog.dll
Filesize
596KB

MD5
cf282ddd8d2cd281b2afb341bbbc7f8a

SHA1
8104ad996680c838c44743b1cc3149353c8bdb2b

SHA256
91cc31c10bac6b042855d8a48c854ba57b8e2085ca427786416f418f3597860b

SHA512
fed8069b200919471a21ac0b1d258f89f206bb6ed172b9b5a17e7d13b78fd825d25a33172adedec55cb89f225756f36daa9eec587eff52bf91df3752c2bd9de3

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dll
Filesize
296KB

MD5
47df99fe851db855c5507328f660dcf5

SHA1
195a33f0b91d6fda50d48c98c8e9bbfacfbf331b

SHA256
15646e0312a8ac15305efb382ce658ca37e6d4e4b73f93387589fd1d8139e3db

SHA512
5de2564d67dbf37ec38d40ac3b2d11fae4318744655941a763a514ed35d38fdf55694852789ca98d9e11c9ead5f997f8091d1413e20d511aba9aef1f8c46d5ea

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIntegration.dll
Filesize
1.6MB

MD5
c01cc0200f3d889c68b503c68049ff62

SHA1
338589ddb1ffb4422f06e75f62f0db1151741f5d

SHA256
326bcb85652c67780d0193d78d5bab30e3668e6bcbcffcff304751b2f4518f54

SHA512
8d072207da418ff170e843f2d97b0e52875b42d2d4b46882d5de08a4e98bf1b7788052c5c591aa70f72813fe2b692541c55920d6dbe22ef15b7ef8a9252da58a

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvApi.dll
Filesize
404KB

MD5
fc0e1d121cdded19e7b98cd995bde281

SHA1
102ebe6eb24cf598d559b305423b38896a8208cc

SHA256
7ccc472997dc3d5080cac6918bbd7ba172a4e674f59b5721e7487cd9b101d64d

SHA512
7077503a5265554f85364744385c4db557cc87f3540688f661c3f139e94cf107ceb2fdac51235a92030ce9dc19a411326ac720ff0925d9d28894afa4b3a0989c

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvStreamingManager.dll
Filesize
188KB

MD5
4d3d26e3dee4398c1127903171ceb1c3

SHA1
95e316fe28d10ab358eaf71cc1bc66e3912d55a0

SHA256
3f54dc6589030ea96e0022e2a36624d9f8aba31a0940db4f2da3773739f5fd3c

SHA512
7241f433e9c970d16658fc3498235804de128564c7be25afce9c3d75d14000e738a9cc8de343c339f47144f243250eb8918f4ddaef783fae1b0dae0a1d5bcb45

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvSubsystemController.dll
Filesize
1.0MB

MD5
c11a2fd58229c692c39030a8247b2d24

SHA1
880ed2315aaa6da88115d601e62ff15343a2dddd

SHA256
e2df35a7d853c4a436cb3c62274f9f47347aa82765bc39d9142c5d7933924f0c

SHA512
0f40eb4c8e29420a04f1f5f3662f57931238e91269692745fbaa979bdcbec9d23360258419aa723081743a70cb4b31dfb25203f6791024832ff7ef4913858956

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvVirtualization.dll
Filesize
569KB

MD5
ce44f80d1b763e431d33588d4b74d1e5

SHA1
95dcdfc80cc6d16e2be3e74bf398598988a2a01f

SHA256
d1cdcde82af468feed1a8ac8826f40cf902d387605367be8437cc6dbbb3ebf6f

SHA512
982faaec67f708db33717efd079f42691de1073ea84f5079e3d0ca2b565feb19b4014f3bd53bed893f81bc99b0bda00d6337b65bc63bc6bed3318a373e3272c9

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVManifest.dll
Filesize
984KB

MD5
18ebc0da472b1efc4e8f6b6627cffc93

SHA1
20a7cf7558d8a7a5bbcc131cbaf4ba75d3f11815

SHA256
624ab9c6838a88550ad5d906e86829778b5a9fce09a55a67eadcbb5806058c98

SHA512
a443da09f063e6ba8711df6ac9c35aa26298356e3dcf819e7784b8641c609fa8fd5d30ec03964493790058b138534f342b65e0688b93e8fcd6d6aa772acd6f6d

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVOrchestration.dll
Filesize
828KB

MD5
0884821e75b789d14faa4757a7f31880

SHA1
b837e32188a5673683d02bc62e21a23647308d7f

SHA256
1ebb321cbfeceb8eb13045118f09d43b94bc0172cdd185fbb3dffe58d7da10ab

SHA512
42fe74d5d28c20695d2230d66e0c368059e0726f494a2ecec3e2c8aef4e4a1c570f072564c59362c347e653c46b4f15af4db11fbc9ad0d2babbf8883df032ebb

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVPolicy.dll
Filesize
1.0MB

MD5
1c03d1935b5892738a188ba40cd5a223

SHA1
b793c3918203f57468a7baa83e8d9e6e7b775545

SHA256
d656c21853e185feb04c0decc52df277ed9d214e9ffa31b86ed34c682e1b5730

SHA512
f9fa9def40ec3053f3a75ab2bc8e7c68c8b806be5bb80cda726ac8c08e3152c32db84a43a9e5775851bde0067d9ce9c8657a19850887171b0b206685318dbf40

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.es-es.dll
Filesize
53KB

MD5
5289c202a23dbf23688c609129c764e3

SHA1
2d772de4e33b7dbfcc2a13e61664cd23ff221177

SHA256
5be10d5b964721e2e11f142aaec0492b5f183968d681d677747524562fb2a199

SHA512
1a5d1b1d76d9935bf063406ca3cf57ffba35e5eb09b21ac96da16544485415c68b3af03d1807e03623ee55f6455107dc6d3245c3c58c0075068a50fbd89138a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.es-es.dll
Filesize
53KB

MD5
5289c202a23dbf23688c609129c764e3

SHA1
2d772de4e33b7dbfcc2a13e61664cd23ff221177

SHA256
5be10d5b964721e2e11f142aaec0492b5f183968d681d677747524562fb2a199

SHA512
1a5d1b1d76d9935bf063406ca3cf57ffba35e5eb09b21ac96da16544485415c68b3af03d1807e03623ee55f6455107dc6d3245c3c58c0075068a50fbd89138a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.es-es.dll
Filesize
53KB

MD5
5289c202a23dbf23688c609129c764e3

SHA1
2d772de4e33b7dbfcc2a13e61664cd23ff221177

SHA256
5be10d5b964721e2e11f142aaec0492b5f183968d681d677747524562fb2a199

SHA512
1a5d1b1d76d9935bf063406ca3cf57ffba35e5eb09b21ac96da16544485415c68b3af03d1807e03623ee55f6455107dc6d3245c3c58c0075068a50fbd89138a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.es-es.dll
Filesize
53KB

MD5
5289c202a23dbf23688c609129c764e3

SHA1
2d772de4e33b7dbfcc2a13e61664cd23ff221177

SHA256
5be10d5b964721e2e11f142aaec0492b5f183968d681d677747524562fb2a199

SHA512
1a5d1b1d76d9935bf063406ca3cf57ffba35e5eb09b21ac96da16544485415c68b3af03d1807e03623ee55f6455107dc6d3245c3c58c0075068a50fbd89138a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.dll
Filesize
2.7MB

MD5
3ae8fcb45eff75d6395c3834d33db0e4

SHA1
1d437a8c30fbd305a44ad7e97bb2d7c3a6f3e3c6

SHA256
e90685e1f78f37742c2074e1c11f759d92a15046485790d6b53ddd47bd5b87cc

SHA512
34b28dd9de4e62585b817aff859b63a0242d10995d7749257e00910a22d5cbdc770a16fab1691a2ba2a035b2b51fa5d286c7bf05dbe111bac8bb6e9b3962df47

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
Filesize
25.2MB

MD5
76bae816a0ecd113e75fa57734e0dc52

SHA1
b24049bbdf3a78bf3793bb175a473b5238c7f77c

SHA256
cdc134165d806c9c8c7d2d2212fa6379edf80ae7952a4d79c8db07dd8b39356e

SHA512
f4171e91d364b42b72bd4d0511834b92254bf1d42854b45a8ca56e01df0e2a9848baaaaf383c5e76b8e84bd13de741e77735ba179ecfb776f09d4008a101092d

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
Filesize
12.0MB

MD5
8ce3e90755f4294ce6a50647a825c391

SHA1
5dd4a107709f467b343692b0d2597f5b0a6ded08

SHA256
a5843ba7aeae5a4aa84b1746610c5530c4fe3557f7dd612a19fdb03ad58ee733

SHA512
b3092b56f814724dacc45f817538ea4295c34afee49d1c05403c9523b9721dc7dba37b3ce1f0aa5003352f4263518d72d2a7639b79d03ce6320b1f770dc6de19

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
Filesize
12.0MB

MD5
8ce3e90755f4294ce6a50647a825c391

SHA1
5dd4a107709f467b343692b0d2597f5b0a6ded08

SHA256
a5843ba7aeae5a4aa84b1746610c5530c4fe3557f7dd612a19fdb03ad58ee733

SHA512
b3092b56f814724dacc45f817538ea4295c34afee49d1c05403c9523b9721dc7dba37b3ce1f0aa5003352f4263518d72d2a7639b79d03ce6320b1f770dc6de19

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\RepoMan.dll
Filesize
5.6MB

MD5
6697ea80326a1b569aedc5909ac02a93

SHA1
d2c5d4576ead4ec0dbda4efcabf97697b48fb1d5

SHA256
38ea68c117d76a5385acb4ff501360698f3d9555d0e4671c589abd294b2146b7

SHA512
810bb64e7c2ccbf1029741e967c38abaeeb9cab35c513c283eb99d5f1881867b2eafb0c63e494691f1662cbb6721738a364132e13a2b00dac0ce4607843831e0

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\StreamServer.dll
Filesize
3.5MB

MD5
1b613559182ea2390ac0ee19acafd197

SHA1
e8c831ab43497dd9de072f9594eac92c608a1ee4

SHA256
51d376409c5b1bd4df2b627badf1847b8fd1e9deae4ca74860aad2d84562ac01

SHA512
c6c47637792e733a3fab5dfb316892ba09ba095c3592a5dfd1b18cb39b10dca1a09d3f6a74840f89cb0eb6fa3ad738e20d011e8663ee4a8530e69c0a899ba02c

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.16227.20212\i640.hash
Filesize
106B

MD5
b0c93af78fd5abb4dd6af3aa38814c6a

SHA1
d1469d7b26217dfe8a7ff78e8a5da95577e60d23

SHA256
ce538183d5f54eb61d3165d7db0df539f76f79a8492ea072516e0b2ad2576f03

SHA512
5ab54a762efd1d286cb9b18ab85be582d79c47ddd7e4d1309b4c394492e04ca41eb45dcde820bb4909b3c96f688d27bc176437b74a80f2a49d938b5333949f89

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\concrt140.dll
Filesize
309KB

MD5
22a0056ffd1c0b3081ca56f441cec3c9

SHA1
81eaaed525b7c714261f840f7cdb5164e45d734e

SHA256
782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1

SHA512
72cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\concrt140.dll
Filesize
309KB

MD5
22a0056ffd1c0b3081ca56f441cec3c9

SHA1
81eaaed525b7c714261f840f7cdb5164e45d734e

SHA256
782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1

SHA512
72cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\i640.cab.cat
Filesize
31KB

MD5
616fb4577917599c0b9e2863d63c8c6e

SHA1
7797523d6ad710ed28c5f2ec27b287b8f91ebe3f

SHA256
233a0214547cf38400b78f22c13d165a2d3c2b0abc0ba12b9363057ebc795189

SHA512
7ef98e8863af535bf8a87d70e59be2e3ff0bbf6939128e264fc2e425e849ad24b497c11719a86ac694033b5ff3a0d1709fb5ef988d8373fcad02aee208dae57b

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\msix.dll
Filesize
2.0MB

MD5
73e5db06d521ae01c73f212066d60e7d

SHA1
4a543443217f83e6e5b5f626ffe1ceda8faa1722

SHA256
51f1ee787de22c43f88fbf10396f656c4fb709c7f42f84a6391a33817fc2d39f

SHA512
e118ba8665ceacf719092713a8b200d6a028160b0cb3cad1a3f4b56c708f22e830cc842e35f9083206a7c8a2555b5a4b8cc5e24a38e1da42339fce70c40d49f2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll
Filesize
557KB

MD5
7db24201efea565d930b7ec3306f4308

SHA1
880c8034b1655597d0eebe056719a6f79b60e03c

SHA256
72fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e

SHA512
bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll
Filesize
557KB

MD5
7db24201efea565d930b7ec3306f4308

SHA1
880c8034b1655597d0eebe056719a6f79b60e03c

SHA256
72fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e

SHA512
bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll
Filesize
557KB

MD5
7db24201efea565d930b7ec3306f4308

SHA1
880c8034b1655597d0eebe056719a6f79b60e03c

SHA256
72fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e

SHA512
bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll
Filesize
96KB

MD5
f12681a472b9dd04a812e16096514974

SHA1
6fd102eb3e0b0e6eef08118d71f28702d1a9067c

SHA256
d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

SHA512
7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll
Filesize
96KB

MD5
f12681a472b9dd04a812e16096514974

SHA1
6fd102eb3e0b0e6eef08118d71f28702d1a9067c

SHA256
d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

SHA512
7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll
Filesize
96KB

MD5
f12681a472b9dd04a812e16096514974

SHA1
6fd102eb3e0b0e6eef08118d71f28702d1a9067c

SHA256
d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

SHA512
7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll
Filesize
96KB

MD5
f12681a472b9dd04a812e16096514974

SHA1
6fd102eb3e0b0e6eef08118d71f28702d1a9067c

SHA256
d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

SHA512
7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140_1.dll
Filesize
37KB

MD5
75e78e4bf561031d39f86143753400ff

SHA1
324c2a99e39f8992459495182677e91656a05206

SHA256
1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e

SHA512
ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140_1.dll
Filesize
37KB

MD5
75e78e4bf561031d39f86143753400ff

SHA1
324c2a99e39f8992459495182677e91656a05206

SHA256
1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e

SHA512
ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140_1.dll
Filesize
37KB

MD5
75e78e4bf561031d39f86143753400ff

SHA1
324c2a99e39f8992459495182677e91656a05206

SHA256
1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e

SHA512
ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
Filesize
5.0MB

MD5
180134dd9133b72162d59cd17b25f7d5

SHA1
5b3ef04829c37238530440f0a83bf23c92f972f8

SHA256
d1270a7461f39108d55546f0c1022e218780a1af09927fbdf523152f37766da9

SHA512
432baff52326fb75825b9f9521ed5d134aa4cab9fedf465caafb90e6d040b4ff80823290b54922c976db25130ce157bc49a2c4ceada8af3b25dd65941fd8571e

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\en-us.16\MasterDescriptor.en-us.xml
Filesize
35KB

MD5
c1c779b9ca255aba26b539ef9445a466

SHA1
466a401e4b5eff813411c7b9bd24792a65937c17

SHA256
1056aa2871a88dfb5127e0a6ac459aa8b131eeb85345d45eac13547e96cd0c3e

SHA512
4959b7d5b18b3f03753666e2fb3da2e188aaca693f41b091171d3fa8fb71bb254bd3b30c5944fee7e0256af9fdabdeafac1e7e1308c7c2fab71c6ade307ed630

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\en-us.16\stream.x64.en-us.dat.cat
Filesize
83KB

MD5
1b4b6f943fbb07819321b9a4da15c160

SHA1
d2680d0e72842b8fba5eb88e3098ff0885272b41

SHA256
d6017722322bed1d58e488b23620443cc20b586ef915b8292e1a07bb84952c32

SHA512
b3575777fbe1dc0c55862e4e40b68af786994f40d3cc5bd0e813215fb5a964d8ffa6c6cdbe83143db6fe02ea53d38b3f1f78c95e818841c07f6591ebb1659ddd

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\es-es.16\MasterDescriptor.es-es.xml
Filesize
35KB

MD5
7672b5051d24ffe48224c7009a667879

SHA1
4a93da40e744fc2fcbfc14becf0f90653b095ef0

SHA256
65d01f4361c1795e2ee73c7a1fb7a16e455fe3476df216b6c02de8ea5b24815d

SHA512
3c076b101b0da6ec26768e246fdfa57c01b3dc3210a5d28a7592759827a30c7f6220a89dc2c49ed74d0964db7d126a949af10fb07fa07d0b7b73a73b3aace3e6

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\es-es.16\stream.x64.es-es.dat.cat
Filesize
118KB

MD5
69a2b6c0b80f9e045e2b5656061eb2ff

SHA1
3891f0538bf4e9ac9ab3618bb2c7095439e90b6a

SHA256
34693df10d7e906cfb7681b0545fb6410c5a3c263bce00b770d285186a4edc71

SHA512
89910cf5c57af00ef7c3cd7da7c5e4e072e3a44cdd1ac2b8cde61ac8a9742f9cf29371bfcf27d6a925ae7742f3efe0f51fb6ac0d602a663536bf64a57a5d0d5a

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd640.delta02.cab_extractOfficeC2R4574DA97-7DA8-4B58-BB7E-25EF1CA5007A\MasterDescriptor.x-none.xml
Filesize
30KB

MD5
ac5a4cce4561ad51c6cf71ce97fda4e2

SHA1
1084468cff76a9460bdb0d1fda383459dc63161b

SHA256
7c55dc5ea69fe8d7265773d7b18954bb07a3e99a21ffe6d963f6e1d28a68292c

SHA512
bfbd99392fa4547e32329e743755807a3cdb4e06a328c62c62c588064a42136b718ef560d8f89cfbca2a6a88889218fe65e3ba7356045b788931f6ceb8022e8f

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd640.delta03.cab_extractOfficeC2R78A5B767-A529-4DC9-8398-3076715876BC\stream.x64.x-none.delta03.hash
Filesize
128B

MD5
65f2c6cbdb3096e9822797d12d357652

SHA1
f75e02d2df2f6198a325345a77fbee5135116c99

SHA256
1203ef788603d7a5ead4306a90ff7aadd2208048edb230f49e5f45e871378d72

SHA512
b07363bcd94e9bd27a2ee1b5e6e495c025fd1c7efdd84ccf08e1ae7f3fbf07a870765efa300bbbca58fefe3df3d2b2c4dee0038451cf8af688ac11d7303aedd2

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd640.delta03.cab_extractOfficeC2R78A5B767-A529-4DC9-8398-3076715876BC\stream.x64.x-none.delta03.man.dat
Filesize
22KB

MD5
99bae3670cc7bd46d91788ac8baa37a2

SHA1
9953d758538fd9ca63949558b1a09d5370d28ed7

SHA256
9b6616b1625622f7d7837d11c90ecdc4924e1f01db213063164d8518b0f60c04

SHA512
07cd2b5d9af3ecf11b33d1ad598aeb594f33bb9a5337db6708015acca8d25054694772db241764171a46e5f0402dbce842ee40bef2249c16d4ced339fc74bab2

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd641033.delta03.cab_extractOfficeC2R3626A220-D400-4AEF-A9CF-289E91ACDE71\stream.x64.en-us.delta03.hash
Filesize
128B

MD5
0f48f1348f30d0cf74e82ab08a19d338

SHA1
46b44da5daafbd77daeb87d046057fea4c26da53

SHA256
f30d9189cc7f746fcac66ae226a5ba59dd626aa01fd258e5d0a017881404ca2c

SHA512
f16e3ab1a1dded4231ae12be3cb72b6748d042d2536ed6a0b0b1d5f0e8bb03858f27b01925b6a4cbdb86a5ea7dfe89223000290b4d00a98580e668c1310ab81f

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd641033.delta03.cab_extractOfficeC2R3626A220-D400-4AEF-A9CF-289E91ACDE71\stream.x64.en-us.delta03.man.dat
Filesize
15KB

MD5
3c4eed0dd3f753d9ee37c7197f55ceb8

SHA1
5788e97ef4a87174f72c61405f92f3fdfb7106be

SHA256
6c5f9f862146da99ba4d565d034a6deb97b256b30a4b8f13cc106930568ec0c7

SHA512
4918b7ff7d7fc3547bb77f3b322bc5c43d4f6f1d14268d321e54250647ad05a79167eb2bfdc2df3f6908b676312ddc73fd787a9128e118762fa57874cfb052ab

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd643082.delta02.cab_extractOfficeC2R5BDA5DA0-9EBA-43BA-BB71-EFB32715AE10\MasterDescriptor.es-es.xml
Filesize
30KB

MD5
888aa66a33f88a5008df3d358f51e59f

SHA1
535104565833431f9d572cf6a17d17c68096450c

SHA256
5b5e40f61f4aa7d2fe20ae965dc737dd5bc40b9685bcc908c04e85ae35f018e1

SHA512
b909b4a3a1c2dacebe3ed291ae2698c483641196dbdc84ae8d1bc3b4c26a1c3bbcf2755842500fafaa2cc990af0edff6dc2001a47d3a6c954e18403a9f17317b

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd643082.delta03.cab_extractOfficeC2R6F3BA3F7-8C0A-44B0-964E-FD3EB5ECC589\stream.x64.es-es.delta03.hash
Filesize
128B

MD5
d058a027b2318969a4cc0caa6277f718

SHA1
490650f4e82c16f1329db21d78a090450a4fff11

SHA256
bf66bb1eb3c88190b55f7fea28c3dff4d0cd6257d68adc0b801dc67c3d675f5f

SHA512
3cc745ae70776dacf717af7f67b4e31d9c51399f1b5a5c2be75d6d1b69d3195192b5472e34e6a35c0f7870bc7b07e87c40089a3dcff02bbbaad95b9c55e6aa80

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\sd643082.delta03.cab_extractOfficeC2R6F3BA3F7-8C0A-44B0-964E-FD3EB5ECC589\stream.x64.es-es.delta03.man.dat
Filesize
17KB

MD5
c39d2d585d70760c83d375031b8b476e

SHA1
a5f2a79df43782fe4a2c6bd7769bbbe29a303e95

SHA256
2b291bd046b74a8fa9ca1053048aab243d6a0ba23ac7d75a38c69181db57843d

SHA512
0a3d83adf8da5c04386c2a3b260ea5fb785b7110b69683424ac42fa8f4180134fd4722337a38c3a9f767032e4c12e1c5175c9971cb99647de5dc844e7e27446f

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\x-none.16\MasterDescriptor.x-none.xml
Filesize
34KB

MD5
7580848101e94260037f3f1807a315df

SHA1
acaa90b5463979e8fe45cbd4bd0f343326336081

SHA256
73a4287963b963cf5088939942c4b7a429dc03b62e871be68c72ded17fb9a7c6

SHA512
60222d8cd4682402ee3c2788e2d87e9c3811135a6c472919bd4321061d163cceea8e59e8b73e677e58036e498c41e195997d2177a8aa481f960df80cb6ce246c

Download Submit
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\00B5C9F9-035C-4E2F-804C-BDDFEF176C64\x-none.16\stream.x64.x-none.dat.cat
Filesize
649KB

MD5
a90ba59a0545795e2625dcaca1f7d667

SHA1
87683ac153613bf699a58f9fe8e69600d9d55b89

SHA256
86410edcc963733bbf02ffd041b397ec356aa411d9ae318159186e88744480d6

SHA512
e7f457b116014e5ce92e6a00d8ab6a057cbfaa10ea071eec1cd64baa36ca9803f55b1219194a2e5674985bf2fb006851cce459c249d5e35afada953338822aaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db
Filesize
24KB

MD5
8665de22b67e46648a5a147c1ed296ca

SHA1
b289a96fee9fa77dd8e045ae8fd161debd376f48

SHA256
b5cbae5c48721295a51896f05abd4c9566be7941cda7b8c2aecb762e6e94425f

SHA512
bb03ea9347d302abf3b6fece055cdae0ad2d7c074e8517f230a90233f628e5803928b9ba7ba79c343e58dacb3e7a6fc16b94690a5ab0c71303959654a18bb5da

Download Submit
C:\Users\Admin\AppData\Local\Temp\OFFICE~1\i640.cab
Filesize
30.8MB

MD5
412bdc5e195ff42081cfecb165356f57

SHA1
8009261500a0349381ada870b5aecaf9e4fb6b33

SHA256
16903cd972d2648358e1c025cb56c2a9a993e46d8570fdc6ae8e5e6cc0f79295

SHA512
b79a115fe7e8186e18fed06b2578d9aaec3b49a2ce69c83e6659b7b85292e0caddeeb2c79a15dade6dd1aa80165973afba6721e5aa56ee640487c17074d7b419

Download Submit
C:\Users\Admin\AppData\Local\Temp\Office.ValidateError.scratch
Filesize
26B

MD5
bd3457e50947d4280734e74b51b5b68d

SHA1
424635c6b5622a6c01a59d290a1c9ab8e593effc

SHA256
23d647979bc5dc186de5ba3e00a222a912ab8e4782eb6407efa70e29e95979f5

SHA512
e83e3615a5e94af288eb1c9b92f55e271765cc43531ec94574371debf63c0c4a58327b6fd8a4775bfba8a3234220cb0396b6d33164309a09a1d826c0689143fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch
Filesize
3B

MD5
21438ef4b9ad4fc266b6129a2f60de29

SHA1
5eb8e2242eeb4f5432beeec8b873f1ab0a6b71fd

SHA256
13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354

SHA512
37436ced85e5cd638973e716d6713257d692f9dd2e1975d5511ae3856a7b3b9f0d9e497315a058b516ab31d652ea9950938c77c1ad435ea8d4b49d73427d1237

Download Submit
C:\Users\Admin\AppData\Local\Temp\OfficeC2R3C5321C7-71DE-47F5-ABD4-DCCFB02F01D5\VersionDescriptor.xml
Filesize
20KB

MD5
2334f0f4687ea9e872b5affaba7f970d

SHA1
03ef8dfec33420dcb3baa881848bba34c9a60e06

SHA256
3eb226b5693743161f9f041c5c82e8d7cf46341a774df8d31ff5fa740e3347eb

SHA512
2aee5746c719a21d61e024bd060db705dab19c61fef4c774c349cbe3a2eff665ac45513b417199599421d85ad9b690136f204e03d64efa1ce74a7ca0bbdd2d93

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_r0fl3mbn.vwc.ps1
Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Windows\Temp\OFFICE~1\d640.cab
Filesize
9KB

MD5
11dc6cc67a26f2d7946b99650b7ae21e

SHA1
f47b0d4e1e8c8377ce76be5aeca934a779dd287e

SHA256
745c043cb1b70ae41f0a52b34ecafad5d2b59a48739d97f2f1c669a16cf9d40f

SHA512
57bfde3b855bd35c54cb6899fc2cb8f6da37dd6648dcf9a6753b2f216be3a8947cfb32e30519e1c8cc469f5f8b647fadeec915470488b6dabe4d0193a1bed9af

Download Submit
C:\Windows\Temp\OFFICE~1\d641033.cab
Filesize
9KB

MD5
09efd19b62dfc6d52f929ac551a9d6fe

SHA1
7b5ee97cc84e1a02a56e5634d6d5a2f0f8369378

SHA256
5149d9dbc9f49b6504ccdc88ecb7eff2a8e9637a411137f5757f502f251bbb41

SHA512
61fe55630aaee4f548e460dcb95e2ffb511710454c580329e28a2861cf60b6ab4db9a7cc2498c09d2df9565b7c6c92b64acd6b4247b7d360e06b5a526f68bff0

Download Submit
C:\Windows\Temp\OFFICE~1\d643082.cab
Filesize
9KB

MD5
537c081b3a048367d6138367d84ccf20

SHA1
7322b095d3612c41945d92dca2d2bf5428a804fb

SHA256
ec0bba49d4635d143a096574ab7a6ef4d1a8c5cb19eeac12a13a026dc15bc1f3

SHA512
e39edb038936a0a46effef828613221f24898b66dad6649fd9412c0e1a62359bfb043271031afba2d54a4d22082fef7a55c122b42b7b0074e873252c01ea45de

Download Submit
C:\Windows\Temp\OFFICE~1\s640.cab
Filesize
2.4MB

MD5
cf6a0d4c12f201f5d4af15d5d6c905f1

SHA1
898de08ffa62d39f6733a68c7ba42bf74267a5e9

SHA256
c58101e122775c40da2440d12ad8702bd2161b818355fe1cdf97354a5ded15b2

SHA512
032aa58a990f3e0809e49ed45194598918b4948cba4dc9d37c34e5c2ee9b0f16745527d95163d4e0b99c4e25723eaa00cfd8dd388ae775e390336b1bd4707b49

Download Submit
C:\Windows\Temp\OFFICE~1\s641033.cab
Filesize
586KB

MD5
e766ea572fbbb6df186db01e38d06f08

SHA1
db3b0c74dd13588b512d1ae094b83506ebd9653d

SHA256
99230d8ad343b1eb0bf7363e39ca0ef5706eaebe2a20d65379330648f7ea1241

SHA512
af8f3ca893ed86068e5ed754a7092ac832ce64331b4be211fd0eb7d75ee8255c0c64c86ee62100ba7fa45a2fe5d372fd4b05ef54fe3b48aae50b920954f23cd2

Download Submit
C:\Windows\Temp\OFFICE~1\s643082.cab
Filesize
548KB

MD5
cf1ac1ece61f241616b9e425e06def73

SHA1
060a04e02f3b538345b6a7dbf6cbf6676d814783

SHA256
27245d861cddff92bde7f21082d70879209d07b7052c8629a69b8795948d2eb5

SHA512
d2e486100b3997a1fdba22a65fa7c19475eb35989893a33a11b2d15893d847d894c7fb4c8de5e44e742dbb3094152a2cabc5bfc775bc2e8d5d380b25373c5b90

Download Submit
C:\Windows\Temp\OFFICE~1\sd640.delta00.cab
Filesize
1.3MB

MD5
627b3e137195d0781d31681c78826f75

SHA1
5dd3fe2c5b11c5aab22e0eb1fbb8e75560d07c18

SHA256
4938615a464f64c3784e1a25fa7c29045f9b28ca883eff87d0d4d1dbddb11f6f

SHA512
4f6bcce7d848f452adbce4e01546046a42a096425d341e2bbf72f3ac67ac395a09c590b95f01e2299010226f4f158791e44d2bd3879288e1f3de3526cdadc70f

Download Submit
C:\Windows\Temp\OFFICE~1\sd640.delta01.cab
Filesize
33KB

MD5
5d1cb7bdbe56594c41c975f6adc5b553

SHA1
fd97698442fa60b4d7e284d3dce93b7f4ed7de95

SHA256
80f40a02543f23df3a1852fcfae9cc09bf3135a8610cfcd00fd78bde6b7140ab

SHA512
d730c204df0a14a4c13b7a40d5684b4ab13d6a0a8392585ab749abd76a6b1bad06b15bef1ed24e569c1f0328de66ad46d4971f0aeaa201c7ca0f59603180294b

Download Submit
C:\Windows\Temp\OFFICE~1\sd640.delta02.cab
Filesize
33KB

MD5
7401fd13db493e22d2c5b01e57adee5b

SHA1
717577050c7f61ce43f35343885ae10c4603f8e9

SHA256
53029067fdd215f2033f782791135842659608465d5ed41feb54153e0cd18285

SHA512
ae4f699a0052c8f47a094c79ad8e6faed432e746afd05d13e8e0ecb3fc41c8f44bb84ed9f8e1bd3a52ae9f94a662d7776313923f8406400e4d51bd9c209652b0

Download Submit
C:\Windows\Temp\OFFICE~1\sd640.delta03.cab
Filesize
33KB

MD5
a4d88314227b12fda7160b20498f795d

SHA1
0730e31c6adecc723fba81bfa8dad7a8e1249bd8

SHA256
07ab56b0d6c0c9691f0b1b4a0eaf19ce5686e7c5f71fdd395e46f7a08cbbcec8

SHA512
6d24d4f2753e1e077777d1208cbacf3d17c0e9256a4fa6cbebbfc6a7ac77c2b3d593a009af9e7c3919df5e7247c70561d79bc4ef18f53c8048d467c403f0c923

Download Submit
C:\Windows\Temp\OFFICE~1\sd641033.delta00.cab
Filesize
242KB

MD5
1ddf60985e8107c72d315a838405a8c7

SHA1
deef78b49adfd9501f26c1dc9b0fc9c5c915c7aa

SHA256
9af2fa49461665e1aee8e740a117f767e6b52181344cfd8c6fca11b48dc4f48b

SHA512
059808135e0cdfe3786af85dbd19b203bded37287580da6172a2cfb0b3635d43152df36a02b636664540f678a3aabcc8932557562831b16afc49e67eb301c67c

Download Submit
C:\Windows\Temp\OFFICE~1\sd641033.delta01.cab
Filesize
30KB

MD5
3d756cee5d3b39b8f6fab832faba580a

SHA1
e924a9c6f8d16acc8f19bb3f39eeb659b284abb5

SHA256
2ec31c7f9a110629143a99d3427b9ecb55413dcd09488310b1014ef638992a34

SHA512
d99057e7f848e6d7cf91513c486be528f73f1803755fac239defbf78b66ca35cc98d0d8feab96a80f93c21c11924fdaeb63c39c579f7a95a522d6e8f74beb9dc

Download Submit
C:\Windows\Temp\OFFICE~1\sd641033.delta02.cab
Filesize
30KB

MD5
c1670a2986f197f4b7a2d9eedd12809b

SHA1
86f2ff38a9b545ade97ab3e719397ebfcbeb3595

SHA256
e3831f25f30713e08b2ab6580057bd5db60099a2e9d51d06e2a4daff1bec34bf

SHA512
113a78f54a07a6df74ea09ded7351b90f8c1d9121048292adea75c52aa91206ceed157035a76eb99a0ef7c54d1cfa2132aefb92f3c55353d2390b119cda6fb30

Download Submit
C:\Windows\Temp\OFFICE~1\sd641033.delta03.cab
Filesize
30KB

MD5
775c17811a2de2435e2bc4a903192270

SHA1
198614ac4f783cd78cbae11a7ff3326c4a56e11f

SHA256
e528bf65d4cc9e922dae08a1e8c1a8888e2a9ad41adf827812c1a96c7b007264

SHA512
53142ce9d22b52f480597b4903a6bf7a82f05570d69aac707df4dbb29951ff443368ee5fa71b4cafa106f72910f22ce47e87481b8fc23c95f155096a6d87892a

Download Submit
C:\Windows\Temp\OFFICE~1\sd643082.delta00.cab
Filesize
263KB

MD5
95ad5173811ff888951d9d7b53201756

SHA1
4056f3e7f570eeed889d50711fb9ec9f89986ce3

SHA256
ed3042044aea02aba13bfb772db7222d3eb2f9c85050eaa20c430057ea7a8ce5

SHA512
c5f6d05ac607c201699e47a4975c5c1c4add01b4bf4a888e887a80208b91cdd53b741494ce277597f68fdc9e8c13c4e2b91f581467c3dca6492a26c5b2940b16

Download Submit
C:\Windows\Temp\OFFICE~1\sd643082.delta01.cab
Filesize
31KB

MD5
21099d2192940242fd591bf82223f4b2

SHA1
1515e8370078ea6cd30d27647cd472e979307f3c

SHA256
3c7c73adb3bb8cea13612160edecb4d78d1c7cd66cfaf295e789ae0072b37b71

SHA512
279b5ea552c241b774fe99980869b0a8a87c5ed006445b362d0cf5ca2a39bff3222cddbdad4e6ed1685852a18c963a1f1e3275aa321850ce1a32830261311115

Download Submit
C:\Windows\Temp\OFFICE~1\sd643082.delta02.cab
Filesize
31KB

MD5
0310df6f1fc8360a7f6569630e2a0d99

SHA1
e95b73efa0027e629558062841443b7b222eb6e7

SHA256
ce69fba42d956fb7595b9848c9e46538d480f480824927493b2c4ab872877da5

SHA512
80d3825d561d11843d5b3433de2d7976d0f0627016c26b1af9127635e9223f1eab1f4b1dcfae9adffaceece48ab64d0b49f5fa1582f0706ed8ef50b7549b4f5b

Download Submit
C:\Windows\Temp\OFFICE~1\sd643082.delta03.cab
Filesize
31KB

MD5
c7f6b079b915833036f99ac6c1860df5

SHA1
5fe6b636849a8b1264fb0de76122a6bc964e6364

SHA256
4b46cc9f2565cbed8aa0f68affe09f55458f205b90f11c9b672178df627be2e1

SHA512
2a55dfe8cda3e81a23098396e816f90324da47575e69138fdc0cc2807e956becdbcf1fe8ddc64f17b88f6d4535021f04cf47d4fa3baddf947b0baeaf911f00db

Download Submit
memory/1480-175-0x0000000007D80000-0x0000000007DA6000-memory.dmp

Filesize
152KB

Download
memory/1480-174-0x0000000006D90000-0x0000000006D9A000-memory.dmp

Filesize
40KB

Download
memory/1480-137-0x00000000058D0000-0x0000000005EF8000-memory.dmp

Filesize
6.2MB

Download
memory/1480-139-0x00000000014B0000-0x00000000014C0000-memory.dmp

Filesize
64KB

Download
memory/1480-140-0x0000000005810000-0x0000000005832000-memory.dmp

Filesize
136KB

Download
memory/1480-141-0x0000000006070000-0x00000000060D6000-memory.dmp

Filesize
408KB

Download
memory/1480-172-0x0000000007B30000-0x0000000007B4A000-memory.dmp

Filesize
104KB

Download
memory/1480-147-0x00000000060E0000-0x0000000006146000-memory.dmp

Filesize
408KB

Download
memory/1480-152-0x00000000067D0000-0x00000000067EE000-memory.dmp

Filesize
120KB

Download
memory/1480-171-0x00000000081B0000-0x000000000882A000-memory.dmp

Filesize
6.5MB

Download
memory/1480-170-0x000000007F090000-0x000000007F0A0000-memory.dmp

Filesize
64KB

Download
memory/1480-136-0x0000000003170000-0x00000000031A6000-memory.dmp

Filesize
216KB

Download
memory/1480-173-0x0000000007CF0000-0x0000000007D06000-memory.dmp

Filesize
88KB

Download
memory/1480-138-0x00000000014B0000-0x00000000014C0000-memory.dmp

Filesize
64KB

Download
memory/1480-169-0x0000000006D90000-0x0000000006DAE000-memory.dmp

Filesize
120KB

Download
memory/1480-157-0x00000000014B0000-0x00000000014C0000-memory.dmp

Filesize
64KB

Download
memory/1480-158-0x0000000006DD0000-0x0000000006E02000-memory.dmp

Filesize
200KB

Download
memory/1480-159-0x000000006DFE0000-0x000000006E02C000-memory.dmp

Filesize
304KB

Download
memory/3716-661-0x00007FFBCEAA0000-0x00007FFBCEB3B000-memory.dmp

Filesize
620KB

Download
memory/3716-662-0x00007FFBCEA00000-0x00007FFBCEA3A000-memory.dmp

Filesize
232KB

Download
memory/3716-672-0x00007FFBCEA00000-0x00007FFBCEA3A000-memory.dmp

Filesize
232KB

Download
memory/3716-671-0x00007FFBCEAA0000-0x00007FFBCEB3B000-memory.dmp

Filesize
620KB

Download
memory/3716-670-0x00007FFBCEB40000-0x00007FFBCEB55000-memory.dmp

Filesize
84KB

Download
memory/3716-660-0x00007FFBCEB40000-0x00007FFBCEB55000-memory.dmp

Filesize
84KB

Download
memory/3716-669-0x00007FF608140000-0x00007FF608BD9000-memory.dmp

Filesize
10.6MB

Download
memory/3716-658-0x00007FF608140000-0x00007FF608BD9000-memory.dmp

Filesize
10.6MB

Download