Analysis
-
max time kernel
416s -
max time network
412s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-es -
resource tags
arch:x64arch:x86image:win10v2004-20230703-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
22/08/2023, 02:17
Static task
static1
Behavioral task
behavioral1
Sample
OfficeSetup.exe
Resource
win7-20230712-es
Behavioral task
behavioral2
Sample
OfficeSetup.exe
Resource
win10v2004-20230703-es
General
-
Target
OfficeSetup.exe
-
Size
8.0MB
-
MD5
6f941c5bedcbd6136ad7654db656f242
-
SHA1
5387ac8faae7cee44fe3c944b84496cbdb23a0da
-
SHA256
412f7d65592bb0da18f7e7bc5c7f89c917b4e1f3f8ad525b1ad9bc62768b0a0d
-
SHA512
5976cac68076ed34fb23a29de91cba73d1bfd92ba393410fe7f5b0df35aa86436d7b8aba5a8fcd3fdd318db9df215b723ec2f0f80d29523acdb3972331f8d976
-
SSDEEP
196608:8qHkoqMYaCdxYmmiy442ufAoVyyGFvp3hTMDbaHeyv6q:OMYTxYtiy4ZufARFvp3AGHeyv6q
Malware Config
Signatures
-
Executes dropped EXE 3 IoCs
pid Process 1980 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1888 OfficeC2RClient.exe -
Loads dropped DLL 34 IoCs
pid Process 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120613v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700400v2.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702501v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230162v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230161v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702150v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700750v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703051v3.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704001v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703301v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule226009v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10625v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10784v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11446v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702900v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704051v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701951v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10881v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120612v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120625v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120658v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11187v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11514v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120618v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120656v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702951v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703651v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703050v3.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702600v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703300v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704151v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10902v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule12019v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222043v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10880v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11710v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11950v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120652v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701500v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700001v2.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701851v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704200v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11794v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120661v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120675v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701250v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700701v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701850v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10882v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11362v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120601v3.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700501v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701350v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700900v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703601v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230168v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70025v2.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70028v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701751v1.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230171v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10879v0.xml OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11265v1.xml OfficeClickToRun.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\ADDINS\PowerPivot Excel Add-inv16\Cartridges\sql2000.xsl OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\HomeBusiness2019R_OEM_Perp4-pl.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\ProjectPro2019R_PrepidBypass-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\VisioStd2021R_OEM_Perp-ul-phn.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.Themes.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\AN04134_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\ProfessionalPipcR_Grace-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\ProjectProVL_KMS_Client-ul.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\Word2021VL_MAK_AE-ul-phn.xrm-ms OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16626.20170OfficeC2RA0F6460F-427D-48B9-90EC-5035A34669A5\api-ms-win-crt-time-l1-1-0.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0099159.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\TR00494_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\HomeBusiness2021R_OEM_Perp4-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\ExcelR_Retail-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\Cpprest141_2_10.DLL OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\BL00098_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\Word2021R_Retail-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\CRANE.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\HomeBusinessR_Grace-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\ADDINS\PowerPivot Excel Add-inv16\Microsoft.ReportViewer.WinForms.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\DD01434_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0106124.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0233992.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\NA02389_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\Professional2019R_OEM_Perp-pl.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\CommunicatorContentBinApp.xap OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\BS01638_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0285822.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\ProPlus2021R_Trial1-ul-oob.xrm-ms OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.16626.20170OfficeC2RA0F6460F-427D-48B9-90EC-5035A34669A5\C2RINTL.ar-sa.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0187881.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCONTROL.DLL OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\O365HomePremR_SubTest5-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0285792.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\BL00148_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\VisioProCO365R_SubTest-pl.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\ProjectPro2021MSDNR_Retail1-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\VisioProVL_KMS_Client-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0105496.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\PowerPoint2021VL_MAK_AE-ppd.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\ProPlus2021R_OEM_Perp3-ul-phn.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0107300.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0239997.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\O365HomePremR_Subscription5-pl.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\ADDINS\PowerPivot Excel Add-inv16\Microsoft.Office.PowerPivot.ExcelAddIn.tlb OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0099199.GIF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\SY00132_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\O365HomePremR_Subscription4-ul-oob.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0341645.JPG OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\MSIPC\et\msipc.dll.mui OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0101864.BMP OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0185798.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0198020.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\PersonalR_OEM_Perp-pl.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0175428.JPG OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\J0187825.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\SO00373_.WMF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\CLIPART\PUB60COR\WB01304G.GIF OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Licenses16\PowerPoint2019VL_MAK_AE-ul-phn.xrm-ms OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe OfficeClickToRun.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies data under HKEY_USERS 64 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\RemoteClearDate = 0040a7e3a36bc901 OfficeClickToRun.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|13" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000\SessionHash = 15ab21785ba8d34eb5c62e9c987c6379524e5fdaefd03dbb4c2a6e12e645a2af OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000\SessionHash = a425dbc420f4e3674eab811e77340c2004b4f0b2b476f7c691fef432aedbdf39 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|11" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSTagIds0 = "5804129,17110992,7202269,41484365,17110988,7153487,39965824,17962391,17962392,3462423,3702920,3700754,3965062,4297094,7153421,18716193,7153435,7202265,20502174,6308191,18407617" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified\officeclicktorun.exe_queried = "1692670780" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000\SessionHash = 03eb53da290545547ee145b30ad55d547eae32006c2d763308e206ed63e8c6e5 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\SessionId = d0201758577c884881c388faa60df7fc OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.1 = 362d322d332c502d442d313033303833342d322d332c502d442d313033303833322d322d332c502d442d313033303833302d322d332c502d442d313033303832382d322d332c502d442d313033303832362d322d332c502d442d313033303832342d322d332c502d442d313033303832322d322d332c502d442d313033303831392d322d332c502d442d313033303831362d322d332c502d442d313033303831322d322d332c502d442d313033303831312d322d332c502d442d313033303831302d322d332c502d442d313033303830382d322d332c502d442d313033303830362d322d332c502d442d313033303830332d322d332c502d442d313033303830312d322d332c502d442d313033303830302d322d332c502d442d313033303739392d322d332c502d442d313033303739382d322d332c502d442d313033303739372d322d332c502d442d313033303739362d322d332c502d442d313033303739352d322d332c502d442d313033303739342d322d332c502d442d313033303739332d322d332c502d442d313033303739322d322d332c502d442d313033303739312d322d332c502d442d313033303738392d322d332c502d442d313033303738372d322d332c502d442d313033303738362d322d332c502d442d313033303738352d322d332c502d442d313033303738332d322d332c502d442d313033303738312d322d332c502d442d313033303737392d322d332c502d442d313033303737372d322d332c502d442d313033303737352d322d332c502d442d313033303737332d322d332c502d442d313033303737312d322d332c502d442d313033303736392d322d332c502d442d313033303736372d322d332c502d442d313033303736352d322d332c502d442d313033303736332d322d332c502d442d313033303736312d322d332c502d442d313033303736302d322d332c502d442d313033303735392d322d332c502d442d313033303735382d322d332c502d442d313033303735372d322d332c502d442d313033303735362d322d332c502d442d313033303735352d322d332c502d442d313033303735332d322d332c502d442d313033303735312d322d332c502d442d313033303734392d322d332c502d442d313033303734372d322d332c502d442d313033303734352d322d332c502d442d313033303734332d322d332c502d442d313033303734302d332d332c502d442d313033303733382d322d332c502d442d313033303733372d322d332c502d442d313033303733362d322d332c502d442d313033303733342d322d332c502d442d313033303733322d322d332c502d442d313033303733302d322d332c502d442d313033303732382d322d332c502d442d313033303732362d322d332c502d442d313033303732342d322d332c502d442d313033303732322d322d332c502d442d313033303731392d322d332c502d442d313033303731372d322d332c502d442d313033303731352d322d332c502d442d313033303731332d322d332c502d442d313033303731322d322d332c502d442d313033303731312d322d332c502d442d313033303730392d322d332c502d442d313033303730382d322d332c502d442d313033303730372d322d332c502d442d313033303730362d322d332c502d442d313033303730352d322d332c502d442d313033303730342d322d332c502d442d313033303730332d322d332c502d442d313033303730322d322d332c502d442d313033303730312d322d332c502d442d313033303639392d322d332c502d442d313033303639372d322d332c502d442d313033303639362d322d332c502d442d313033303639352d322d332c502d442d313033303639332d322d332c502d442d313033303639312d322d332c502d442d313033303639302d322d332c502d442d313033303638392d322d332c502d442d313033303638372d322d332c502d442d313033303638352d322d332c502d442d313033303638332d322d332c502d442d313033303638312d322d332c502d442d313033303637392d322d332c502d442d313033303637372d322d332c502d442d313033303637352d322d332c502d442d313033303637332d322d332c502d442d313033303637312d322d332c502d442d313033303636392d322d332c502d442d313033303636382d322d332c502d442d313033303636352d322d332c502d442d313033303636342d322d332c502d442d313033303636332d322d332c502d442d313033303636312d322d332c502d442d313033303635392d322d332c502d442d313033303635362d312d332c502d442d313033303634322d372d362c502d442d313033303630302d33392d372c502d442d313033303531322d312d332c502d442d313032393238392d342d332c502d442d313032393234332d312d332c502d442d313032393039372d322d332c502d442d313032393039362d322d332c502d442d313032393039332d322d332c502d442d313032393039322d322d332c502d442d313032393039312d322d332c502d442d313032393039302d322d332c502d442d313031383637382d32312d342c502d522d313039393536322d362d382c502d582d313035323931302d312d332c502d582d313032303532392d312d332c502d522d313031363533392d382d352c502d522d38323437332d312d342c502d522d35363631382d312d332c31393167353730353a3338363637362c7065696e703639343a3234363834392c502d522d36313731382d31382d332c502d522d33333639362d312d352c502d522d33393931322d312d322c502d522d35303338302d31382d31382c502d582d3131353136362d312d332c70753436393a3334303233332c502d582d313039343437352d312d372c502d582d313034353236392d312d352c502d582d313031383131372d312d352c502d582d313032313138372d312d332c502d522d313034303537392d32362d31342c502d522d36333333382d31382d31312c502d522d35383235312d31382d31312c502d522d33333733372d312d342c32363838333239333a3432323534382c38623061313234353a3332323031332c6a757374696669636174696f6e6f746865727769746873656375726974797761726e696e673a3237323535322c33363832333632363a3238393336352c502d582d313039313538392d312d332c502d582d3131363238362d312d332c502d582d3131363038352d312d332c502d582d3131363037382d312d352c502d582d3131363036352d312d332c502d582d37383534352d312d332c502d582d37343233342d312d31312c502d582d37333731382d312d332c502d452d32393636322d322d332c502d522d313131313632372d382d362c502d522d313038393331382d322d362c502d522d313038353339382d322d372c502d522d313035353439352d322d382c502d522d313034393532362d322d372c502d522d313034393533352d322d372c502d522d313034393335322d322d372c502d522d32393330332d322d31392c502d522d33333932322d362d31392c502d522d32393330372d322d31352c502d522d35323138392d322d31352c502d522d32393033312d322d31392c502d522d33363331362d362d32302c502d522d32393139372d322d31372c502d522d33303239302d362d32322c502d522d32383938322d332d31382c502d522d36333934372d31382d322c502d522d36313336312d31382d32362c502d522d35333235362d322d31312c502d522d34383633342d322d31342c502d522d34373234322d31382d31312c502d522d34353535302d31382d34362c502d522d34323531322d312d322c502d522d34313534392d31382d32302c502d522d34303532312d322d31332c502d522d33353430372d342d332c502d522d33333133342d322d31372c502d522d33303239322d342d372c502d522d32383634342d312d342c502d522d32343033372d312d362c502d522d32333434352d332d362c502d522d32333433342d332d372c502d522d32333430332d332d382c502d522d31383531332d312d33302c736d617274616e646c6f6f706c696e6b63616c6c6f7574656e61626c65643a3431383435302c73686772613439383a3232373730372c73686772613630313a3138343038302c73686772613335353a3230383034392c73686772613530323a3138393932342c73686175743539363a39323130372c73686772613734373a38363637372c73686963723331373a39343532312c502d582d313130373037302d312d332c502d582d313039363332302d322d332c502d582d313038333432372d322d352c502d522d36353031312d312d332c502d522d35303534312d322d372c35366769663833373a3431363736332c6a336237333236373a3431363736312c6a683861623434373a3338303633332c502d582d37313536382d312d352c502d522d36393233322d33382d31322c502d522d32333638312d322d372c502d442d33323530322d322d332c502d442d33323530312d322d332c502d442d33323431352d322d332c7461656e613537363a39303236352c502d582d313131323735352d312d382c502d582d313032373136332d322d31312c502d582d313035393231322d322d332c502d582d3130393636322d312d31372c502d522d36343531332d31382d31302c502d522d35313931362d38342d33312c31343831363436383a3431363336392c6f74656c657564623a3332363832362c35343637393634363a3336333131312c74656172693335323a3233333737342c502d522d313131393031332d312d332c502d522d313130393638372d312d332c502d522d313039373437332d342d382c502d522d313039383739362d312d332c502d522d313039343538392d322d342c502d522d313039343434352d312d332c502d522d313035383634332d352d392c502d522d32333734362d33302d34322c502d522d313037323031342d322d342c502d522d313037313736312d312d332c502d522d313036393736392d322d342c502d522d313036383131352d312d332c502d522d313032343037362d342d382c502d522d313032343037342d342d382c502d522d313034353131382d322d342c502d522d32353236392d31342d32312c502d522d313034343430382d312d332c502d522d313034323833332d312d332c502d522d313033373838372d312d332c502d522d313033373837392d312d332c502d522d313033363239332d312d332c502d522d313033363239322d312d332c502d522d313033363238392d322d342c502d522d313033363238382d312d332c502d522d313033363036382d322d342c502d522d313033353933332d322d342c502d522d313033353134392d322d342c502d522d313033333831372d312d332c502d522d313033333632342d322d342c502d522d313032383535302d322d342c502d522d313032383136382d312d332c502d522d313032373533352d332d352c502d522d313032343037312d322d342c502d522d313030363839362d312d332c502d522d313030363839342d312d332c502d522d313030363536322d322d342c502d522d313030303036312d322d342c502d522d3131313638322d312d332c502d522d3130353733312d33362d33382c502d522d3130343433352d31332d31352c502d522d3130303239342d312d332c502d522d39393633332d312d332c502d522d39383932392d322d342c502d522d39383932362d312d332c502d522d39383235302d312d332c502d522d39343535362d322d342c502d522d39343239392d312d332c502d522d39333037372d312d332c502d522d38383330392d322d342c502d522d38363131382d312d332c502d522d38303531372d362d382c502d522d37383835322d332d352c502d522d37383131322d342d362c502d522d37363931382d322d342c502d522d37363732312d312d332c502d522d37363235332d312d332c502d522d37353434302d322d342c502d522d37353433362d312d332c502d522d37353433342d312d332c502d522d37353433332d312d332c502d522d37323434392d372d31302c502d522d36383036392d322d342c502d522d36363937352d312d332c502d522d36353536372d312d332c502d522d36303630322d322d342c502d522d35333330392d312d332c502d522d35323633332d312d332c502d522d35323137312d322d342c502d522d35313932312d382d31302c502d522d35313235382d362d382c502d522d35303735322d322d342c502d522d35303638312d322d342c502d522d35303539392d342d362c502d522d35303539362d342d382c502d522d35303535332d312d332c502d522d34393539372d332d352c502d522d34393435382d322d342c502d522d34383533302d352d372c502d522d34373934382d312d342c502d522d34363538302d332d352c502d522d34363438342d31302d31322c502d522d34363132322d312d332c502d522d34353835382d322d342c502d522d34333936362d322d342c502d522d34333530322d31392d32312c502d522d33383234382d31382d32322c502d522d34313433302d312d332c502d522d34303735312d382d31302c502d522d34303237332d342d362c502d522d33393233382d352d372c502d522d33383638322d332d352c502d522d33373538382d322d342c502d522d33343335352d382d31302c502d522d32363236362d342d392c502d522d32363833342d332d382c502d522d32343636322d31362d32322c502d522d32373437392d362d31312c502d522d32363035362d372d31352c502d522d32373030362d372d31322c502d522d33303333382d332d372c502d522d33303137382d37382d38302c502d522d33303035332d372d392c502d522d32373435382d312d352c502d522d32353832322d31362d31392c502d522d32353038332d362d392c502d522d32343639302d33372d34312c502d522d32343638392d322d352c502d522d32343636362d322d352c502d522d32343636332d362d31312c502d522d32343635392d372d31302c502d522d32333734342d372d392c502d522d32333733392d372d392c502d522d32333733362d31342d31372c502d522d32333733342d372d392c502d522d32333733302d32312d32342c502d522d32333732332d31302d31322c502d442d33323538382d312d332c502d442d33323533342d312d332c502d442d33323532342d312d332c502d442d33323531382d312d332c502d442d33323531322d312d332c502d442d33323530392d312d332c502d442d33323438362d312d332c502d442d33323438352d312d342c502d442d33323438342d312d342c502d442d33323430352d312d332c502d582d37313939392d332d31312c502d522d313037353139392d362d342c502d522d313031333933302d342d352c502d522d34373630312d31382d31332c502d522d33333931362d312d352c502d522d33333538302d382d392c75637368613636303a37363535382c502d582d313037343036392d312d352c502d582d313037343035332d322d352c502d582d313036343937332d312d352c502d582d313034393230312d332d31312c502d582d313035373536362d322d332c502d582d313035313736332d322d372c502d582d313030303436352d312d332c502d582d3131373430302d312d332c502d582d3130353639372d312d392c502d582d39343937322d312d332c502d582d37313731322d312d352c502d522d313131313938342d342d342c502d522d313130353531302d342d352c502d522d313033353932312d342d342c502d522d36313432362d31382d372c502d522d35393432362d312d332c502d522d34363931332d31382d382c39623136663631383a3430383338372c62376768643630353a3430383338362c39356167673335373a3334323230302c656e64706f696e74706c7573746f6b656e733a3338383631302c36366a66383838343a3335383430342c6d65636f6e74726f6c5f7765616b7074725f696e746567726174696f6e5f656e61626c65643a3334303935362c7578666c753233343a3330343731342c75786d656469756d69636f6e6c756d696e616e63653a3335333435352c666c75656e746261636b7374616765726566726573683a3234363431322c7578656e613130313a3238383831382c636865636b6f75746465766963656f6e7061696e743a3132323131302c502d522d31393236322d312d31322c502d582d313130393138372d322d332c502d582d313130333334382d322d332c502d582d313038333937312d312d352c502d582d313034323237352d322d332c502d582d313033373139362d312d332c502d582d3130373631392d312d352c502d582d313030363435302d312d352c502d582d3131353136372d312d332c502d582d37373138342d312d332c502d522d313130393338332d392d382c67613639673735383a3431363637302c68336764343532393a3430363436332c6c6f6f707374796c6573636f6e746578746d656e75656e61626c65643a3431383434372c67316836623639323a3333343638322c34663366623834333a3239313233392c776f6675733934373a3333333632342c776f77696e3839353a3335373435332c776f3338303735343a3334313531302c776f636f6c3933363a38303033312c502d522d313039383431322d312d352c502d522d313039313236372d312d32312c502d522d38313732302d312d322c502d522d35383430362d312d352c502d442d35303639372d322d342c502d442d32393731392d312d312c502d442d32393731382d312d312c502d442d32393539332d312d36222c2022434322203a20227374643a3a77737472696e677c5553222c2022446566436f6e667322203a20227374643a3a77737472696e677c6f6673683663326231746c61316133312c6f666372756934797664756c626633312c6f6668706578336a7a6e65706f6f3331222c202245787054696d6522203a2022696e7436345f747c31363932373133393137222c20224554616722203a20227374643a3a77737472696e677c5c2243487744636d3651734b4d6e495369377043356b53764835746456694f7431694c785953553432457a494d3d5c22222c202246434d617022203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e4163636573732e4368616e6765476174655f446f6e74547275737456424156617269616e74446f75626c6556616c7565222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4163636573732e4368616e6765476174655f446f6e74547275737456424156617269616e74446f75626c6556616c75654e6577222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4163636573732e4368616e6765476174655f4e6577556e69636f6465496e556e697175654964656e746966696572436f6c756d6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4163636573732e4368616e6765476174655f556e69636f6465496e556e697175654964656e746966696572436f6c756d6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4163636573732e4368616e6765476174655f5573654265747465724964656e697469747952657472656976616c4d6574686f64222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d696372 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|4" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.12 = 6572666f726d616e636541637469766974795c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224175746f6669745368617065546f54657874436d645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f704c6576656c456666656374447261775c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224372656174654269746d617046726f6d506c6174666f726d4269746d61705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e6b496e70757453757266616365426173655570646174655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250617468576964656e657246576964656e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2250617468576964656e657246576964656e53696d706c65506174685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224776697a536d61727441727450726f7065727469657354656c656d657472795c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243726561746544657669636544334431305c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22537065637472655472616e73636f646541637469766974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22496e73657274496e646976696475616c4d6f64656c334441637469766974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224c6f61646564496d61676550726f706572746965735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22496e736572744d6f64656c334441637469766974795c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c22537065637472654372656174655363656e6541637469766974795c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c224d6f64656c334452656e64657241637469766974795c22203a207b205c224576656e74466c61675c22203a203438383936207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4964656e74697479222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c22456e7375726550726f7669646572496e697465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574506572736f6e50726f66696c6553657475705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224964656e74697479536e617073686f745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657450726f7669646572466f7241757468536368656d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225472794964656e74697479506172656e744d617463685c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22526f616d696e6750726f7879496e69745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22536861726564437265645265667265736846726f6d53746f72655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22526561644f6e6546726f6d43726564656e7469616c4c6973745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22435265616453796e635461736b52756e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f6d61696e4a6f696e65644f72436c6f7564446f6d61696e4a6f696e656453657373696f6e735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224765744164616c416363657373546f6b656e46726f6d4372656450726f76696465725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574536572766963655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574436f6e666967546f6b656e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574426c6f636b696e67536572766963655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22506f70756c617465536572766963654d61705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657441757468656e74696361746564536572766963655469636b65745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22526566726573684964656e7469746965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224765745365727669636555726c466f7246656465726174696f6e50726f7669646572416e616c797369735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225365727669636555726c5374617475735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2241637175697265536572766963655469636b6574466f724144414c5c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c2253697465735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e496e736967687473222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c22496e73696768747350616e655c22203a207b205c224576656e74735c22203a207b205c22415c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22445c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2248746d6c5072656665746368526571756573745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22535c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436163686546696c654e6f7456616c69645c22203a207b205c224576656e74466c61675c22203a20323536207d207d2c205c225375624e616d657370616365735c22203a207b205c224f66666963655c22203a207b205c224576656e74735c22203a207b205c2253797374656d616c69645c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c22496e7369676874735c22203a207b205c224576656e74735c22203a207b205c22496e73696768747350616e655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e73696768747350616e65305c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e73696768747350616e65725c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2253797374656d5c22203a207b205c224576656e74735c22203a207b205c224163746976697479715c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224163746976697479735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d2c205c22536d6172744c6f6f6b75705c22203a207b205c224576656e74735c22203a207b205c22415c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f7079466561747572654761746573315c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f7079466561747572654761746573325c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573315c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657446656174757265476174657331305c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657446656174757265476174657331315c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657446656174757265476174657331325c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657446656174757265476174657331335c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657446656174757265476174657331355c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573325c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573335c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573345c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573355c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573365c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573375c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573385c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22476574466561747572654761746573395c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224d5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22535c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2248746d6c5072656665746368526571756573745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c225265667265736843616368656446696c65735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22446f776e6c6f61645265736f757263655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2241757468656e7469636174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22526573756c7447726f7570546f52656e6465725c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2253656e64576562536f636b6574526571756573745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22576562536f636b657450696e67506f6e674c6174656e63795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22446961676e6f737469635c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c2238564d65686c6c5c22203a207b205c225375624e616d657370616365735c22203a207b205c22356b69614b3747426b7a505746675c22203a207b205c224576656e74735c22203a207b205c22373139305c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c22385c22203a207b205c225375624e616d657370616365735c22203a207b205c227a424b387872415553554e52497859484e4b55415c22203a207b205c224576656e74735c22203a207b205c22393133335c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c224f66666963655c22203a207b205c224576656e74735c22203a207b205c2253797374656d644d617463685c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c22496e7369676874735c22203a207b205c224576656e74735c22203a207b205c22536d6172744c6f6f6b75705c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22536d6172744c6f6f6b75705f5f5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22536d6172744c6f6f6b75705f5f5f5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2253797374656d5c22203a207b205c224576656e74735c22203a207b205c2241637469766974795c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2253797374656d68633863674f6a46515c22203a207b205c224576656e74735c22203a207b205c22383635335c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d2c205c22556952756e74696d655c22203a207b205c224576656e74735c22203a207b205c22437265617465576562536f636b65745c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2250726f636573735265717565737451756575655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22496e74656e745365727669636550726f78794f6e436f6e6e656374696f6e436c6f7365645c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224f6e436f6e6e656374696f6e436c6f7365645c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4c6963656e73696e67222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c22436f6d70617265427573426172735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6963656e73696e67427573626172416374696f6e5c22203a207b205c224576656e74466c61675c22203a203439343038207d2c205c22487244697370617463685375625461736b53746172745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22517569636b56616c69646174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2253617665416c6c536b75696473546f52656769737472795c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2257616974546f52657472794865617274626561745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22536561726368466f7253657373696f6e546f6b656e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224e554c56616c69646174696f6e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2256616c696461746553657373696f6e546f6b656e5c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2243616e52756e4665617475726543616368655c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c22506572666f726d4c6963656e73696e674e6f74696669636174696f6e735c22203a207b205c224576656e74466c61675c22203a20323536207d207d2c205c225375624e616d657370616365735c22203a207b205c224c5655585c22203a207b205c224576656e74735c22203a207b205c224e6f456e7469746c656d656e74735c22203a207b205c224576656e74466c61675c22203a203439343038207d2c205c224e6f456e7469746c656d656e74734578706572696d656e74547269676765725c22203a207b205c224576656e74466c61675c22203a203439343038207d207d207d2c205c224f6666696365436c69656e744c6963656e73696e675c22203a207b205c224576656e74735c22203a207b205c224c6963656e7365436f6d706c657465645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c6567616379416374697669747953756363657373436f756e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224c656761637941637469766974794661696c757265436f756e745c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c22436c69656e745c22203a207b205c224576656e74735c22203a207b205c224653686f756c6441637469766174655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d2c205c224865617274626561745c22203a207b205c224576656e74735c22203a207b205c22577269746543616368655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225265616443616368655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22517569636b56616c69646174696f6e5c22203a207b205c224576656e74735c22203a207b205c224c6f61644c6963656e73655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2246756c6c56616c69646174696f6e5c22203a207b205c224576656e74735c22203a207b205c224c6f61644c6963656e73655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2250726f706572746965735c22203a207b205c224576656e74735c22203a207b205c224765744c6963656e736543617465676f72795c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22546f6b656e697a654c6963656e736543617465676f726965735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174654c6963656e736543617465676f726965735c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c224272616e64696e675c22203a207b205c224576656e74735c22203a207b205c2247657441707056616c75655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2247657450726f6475637456616c75655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2253686f756c645573654d6963726f736f66743336354272616e64696e675c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d2c205c2254656e616e745c22203a207b205c224576656e74735c22203a207b205c22496e697454656e616e7449645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224e756c5c22203a207b205c225375624e616d657370616365735c22203a207b205c22466574636865725c22203a207b205c224576656e74735c22203a207b205c224765744e756c4f626a656374466f724964656e746974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2246657463684d6f64656c46726f6d4f6c735c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c224765744c6963656e73654665617475726573466f724964656e746974795c22203a207b205c224576656e74466c61675c22203a20323536207d2c205c2243726561746552657175657374426f64795c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224d6f64656c5c22203a207b205c224576656e74735c22203a207b205c224765744c6963656e7365 OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\ApplicationFlags = "1" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=1033&build=16.0.16626&crev=3\0\Properties = "1" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Experiment\officeclicktorun\BuildNumber = "16.0.16626" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|0" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.3 = 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 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|10" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\Common\ClientTelemetry\Volatile OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000\SessionHash = 6003370e6f453a3e2714a5d441d7fe914334845e36e1aa3159f38a0892a87902 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\all\Overrides OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "1" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=1033&build=16.0.16626&crev=3\0\EndDate = e0f0f24931d6d901 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs OfficeClickToRun.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\FirstSession\officeclicktorun OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\RestartManager\Session0000\Sequence = "1" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\Overrides OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|5" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.10 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs OfficeClickToRun.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4476 powershell.exe 4476 powershell.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeDebugPrivilege 4476 powershell.exe Token: SeBackupPrivilege 1980 OfficeClickToRun.exe Token: SeRestorePrivilege 1980 OfficeClickToRun.exe -
Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 3708 OfficeSetup.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1360 OfficeClickToRun.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3708 OfficeSetup.exe 3032 OfficeClickToRun.exe 1980 OfficeClickToRun.exe 1360 OfficeClickToRun.exe 1888 OfficeC2RClient.exe 1888 OfficeC2RClient.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 3708 wrote to memory of 4476 3708 OfficeSetup.exe 81 PID 3708 wrote to memory of 4476 3708 OfficeSetup.exe 81 PID 3708 wrote to memory of 4476 3708 OfficeSetup.exe 81 PID 3708 wrote to memory of 3032 3708 OfficeSetup.exe 95 PID 3708 wrote to memory of 3032 3708 OfficeSetup.exe 95 PID 3708 wrote to memory of 1360 3708 OfficeSetup.exe 97 PID 3708 wrote to memory of 1360 3708 OfficeSetup.exe 97
Processes
-
C:\Users\Admin\AppData\Local\Temp\OfficeSetup.exe"C:\Users\Admin\AppData\Local\Temp\OfficeSetup.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3708 -
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile "$package = Get-AppxPackage Microsoft.Office.Desktop -allUsers; if (!$package) { $Error.Add(\"Package is not installed\")}; if ($error.Count -eq 0) { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '1' -Encoding ascii; } else { Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateResult.scratch' -InputObject '0' -Encoding ascii; Out-File -FilePath 'C:\Users\Admin\AppData\Local\Temp\Office.ValidateError.scratch' -InputObject $error -Encoding ascii;} "2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4476
-
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=es-es productstoadd=O365ProPlusRetail.16_es-es_x-none cdnbaseurl=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version=16.0.16626.20170 mediatype=CDN sourcetype=CDN O365ProPlusRetail.excludedapps=groove updatesenabled=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.UseTeamsOnInstallConsumer=unknown flt.UseTeamsOnUpdateConsumer=unknown uninstallcentennial=True scenario=CLIENTUPDATE2⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
PID:3032
-
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=es-es productstoadd=O365ProPlusRetail.16_es-es_x-none cdnbaseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version.16=16.0.16626.20170 mediatype.16=CDN sourcetype.16=CDN O365ProPlusRetail.excludedapps.16=groove updatesenabled.16=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown flt.UseTeamsOnInstallConsumer=unknown flt.UseTeamsOnUpdateConsumer=unknown uninstallcentennial=True2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1360
-
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1980
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /progressandlaunch AppTargets="root\office16\excel.exe|root\office16\lync.exe|root\office16\msaccess.exe|root\office16\mspub.exe|root\office16\onenote.exe|root\office16\outlook.exe|root\office16\powerpnt.exe|root\office16\teams.exe|root\office16\winword.exe" ManualUpgrade=False ScenarioToTrack="Scenario:{477E0208-58BD-4F33-978A-09BCC9AA9EB1}@INSTALL"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1888
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
297KB
MD594d6fb63e0fcc7db6ce26674e61a06f6
SHA134d019f759db4649d89f584437804597b5d02395
SHA25653090adc6e512a6cc52fdd7640736b9352537e757520db7b808857f179bfb3a3
SHA51283a4a927a10fa5210f54908c43c6d68a09ef1aae0aaac40538b4f9252bc01f7b2e3f3e56fe2ee89f0f739918f2559e6af63f58af914f68ba97927245324d7843
-
Filesize
985KB
MD5b992640abf4ea6cdac53d8b38076f845
SHA1ed480fe74fb663e0192098c99a822022b380481c
SHA256f945dddd970b1bd95c6f713f3a1797a2f0772bbaaee0803f43e39fd748d4502a
SHA512a3b1beef8df9a0f14eda0cd6d01895bd17c346fd930284806cea6657b3c73df8899c699484742a45753dc0cd85b4b92e7e5b6d31b4f94ccc9865959f28fbc0d9
-
Filesize
1.0MB
MD520ae1459b18c035d187ebd44d6fe23c2
SHA19fd7012e099ab2c8a39341e7260f050e6c997a6d
SHA256f694caa849ce8b91e5ff374af38c8fc13af15b477b6f3401a13056da11d6f818
SHA512978ab47b667ca96cb16c02a19692433d1dd46f1209a4fc17e6ebab026b3a665b98298ef1df877faf77d3fd460f052da80c2e6d1ed40cbcb2da97bb648700e585
-
Filesize
530KB
MD548878f80cd4703a79b787a6717d266bd
SHA19c338cf237f267c643bef14ee7abd4a0129e1be0
SHA25683e989a439c5b6042465a6af067293b343fcf85d683c17d977afc487fa1870fa
SHA512036d6e09a811cab844057fbf763854925da636360c11273081896f0ccf6a4c8b9bd661578fbc28d626c9ddb63d74c57bbcd49f6810947243a090d49b5fb3eaec
-
Filesize
597KB
MD5647a0967315ed80dd590fe111f38bed7
SHA1f311845d591fcab6c9b086f519e6f83b52ba960d
SHA25695a069ff97824a004d4fada58a23c78b775db72de5570a05977355149df67cb6
SHA5120178a3f488e6972ca87a56fcb4bad16679df88149ae265e29c8a2aac3bea75de1cce5e82575de0eef4303bfdbab2593d96e5074f10a7561c83cde22972590d7e
-
Filesize
1.6MB
MD5df8403e03a06679d9077a4161849671e
SHA16635f842092ba46af0520ce0fdb978c6b12a7be7
SHA25649738cd60073b83e07957faaf57ac2fee48fb44eb9a69d9a96591b9fb045d06c
SHA512433a869ba671361f7a72601cf9f47dd560aff5abdb69557ae8cf9d7572646a762e711e7f3dba32f5c04b2e8865c8bc29227cd5197a7cb0762131e8baf4ec8b18
-
Filesize
405KB
MD569d9cc8fcfb951ec44c7d9f26bcb3499
SHA1243b233b74a96d2676a0a2c3dec02904944c97cb
SHA2560167466a80c29b10f0cfda34c745930d96a1117d6a9b7838efd6ae77156df495
SHA51218c588224cd6e5a3b82d27c98f6f92bcf6efb111b11f0c6695ecd9ea1b0dfebf1e5575a4d0fa1e193890a3d7409a041fa5f1322262da095a9f16e5b284a48eab
-
Filesize
189KB
MD55cb3f3f7d8d9afe46bf220b1076f7272
SHA1f6ba4dd48e9deddf6094c9f5fb1bcf761e9e31d7
SHA25697119e4ac0b990aabdcb218dce06c2752bf4e37ad7139390cbfd466b1b67889c
SHA51242f8813eb73e1757e200d18e5ae7ee381000466cb9eee11d11993b81ff9b2364995dc293e3109f7e1cb35a2081b0ccc46942afcd03ba24cccbdac61313187f1f
-
Filesize
1.0MB
MD5c9f1a48e9594a1e00a754d0bf50fa6cd
SHA1c07ac2f5d10c007e33a76261dd4b9f5a7ca9a67e
SHA256b9ce70c3b1a73efe80753a05d93d1f84d43456095e1f72358a7cc5c48444d0b3
SHA5123a1edfdce7884558a9ad728e897ef0b3268c18f68b79441fe6eaa4505cbb9ba757b9907ece46781d09e57e32c949e64c973e4ac848bfe9b88c53777e0c05bbff
-
Filesize
569KB
MD515f5792844af082587747a09f1123a0d
SHA1558999ff58818971f96dfff4f433afa596794ba7
SHA256e5188cf139c4af572588fe794b7392479a0bf59aef86666a0a22db121e41da9d
SHA5127de7f740bab5dcafb9f502853963547c7e50993404535dbcd39b88a586a2bf31b50f1eebe4682ee5fa458a00948af44dc104daa0b595c2c02d6901a81beab24f
-
Filesize
829KB
MD5ddc59d3df358f9372708531b977848c3
SHA1e1a0f9b58dc5579bbd5845bb6d3a7da3b5d8b7da
SHA256fedc8cf10ab72e7a0ec3a493356157028fe16d2ae97f73dead28fffde1b7c935
SHA5124b75fe159eeadd71fea2e3b569796ce547808bff5c183d271e3d2aed7ef11311121f7ec768bcbc1c0354b771f971aa2b46836a8a6c2b0c1d2f8b21922943dbd3
-
Filesize
2.7MB
MD50d18e470c0f7c180860ec1813712c3ab
SHA1bdf3de383e6b0d224cfec4c1d5e28b02eb14ba93
SHA256c86bf499f2de7af9f6471323ef1d56bfe82dd6cba329497c98f82b4a5426f6ff
SHA512713a38c9fdbb857523c6953dfb80558f9e721093a816d035237815536c85208b682046610dff479347d65e956c4fb82aca6f261484cbc9c97b93d656634327ad
-
Filesize
309KB
MD522a0056ffd1c0b3081ca56f441cec3c9
SHA181eaaed525b7c714261f840f7cdb5164e45d734e
SHA256782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1
SHA51272cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b
-
Filesize
5.0MB
MD5ec8f9a6b7bee15028c0fe58426735b91
SHA1f8f4d4ebb1e990b321a27276106af3e7e90bbac9
SHA256a723349cec47aabeeba964e5a4b44b25832193260f1c7c35e84a8b741f0760cf
SHA512bd54633f77457c96934e7e32e98efd60ad22f25ea26915919d42fd77ce3e6daa3bc57cb292a9a317e28c6de408157a89bf3604888035963f1afb822b138b2289
-
Filesize
2.0MB
MD5d9dceb4051c1b63d749051a1ae05734d
SHA1832e9a1ae113e08e985388aecb4d8bcaef623720
SHA256943a4b157f49b877ce2e44c6f1921754e4175ff784f9751ac7bf25af45ea0a44
SHA51299a5e19c8e8353505ba32cf2468dc383829b5aeac815c1ea53040e317354cef780cde5dd9db892ce92b0aa69af3b244ec0d5a55ddee72ec249b0c197cfcaae8a
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
25.4MB
MD5080e7502f5fcfa6f5b67b8d2ca75ac68
SHA10d8d6c41e874a467705284e60c5a21d6e1460769
SHA256ac8de3f23b548d5b573025bf34e3cdd9492b3521eeba24056099f68c167273d3
SHA512be65b2ea6ac635bbad7f73b128c23b15eb7d5b54a4f8d9ed9ccbf88d537553641595b74e3b084bf18c0b16a65c4bbbbfa7a023d9963c27eff7ca73c029275de0
-
Filesize
11.3MB
MD5283a5bbb33472e437d43d2e89b86b59f
SHA16d47a1dca1d43786e5612b5a4162c9e1633e99c2
SHA256a3430e4c9af289130178ff093a0d6b2047da55890eb5693ea0b5ba47609f5979
SHA51291121068304201f3a3d5e5b0f2c3c3c4b8113500d79a82f8a95759ee8458cab3cd52736337089806388025e13d11f91046d395e41816b07b8b15b7828d7caaa2
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
1.3MB
MD575e832bb1529d87a88ef49034e381930
SHA19b8a52c3c9b3a88c3bdd3b5f5aeb0aecc3df67e8
SHA2564a7ac11ff22d5d842c47be8df6ca98f99c7d48e7ab2f638ccd01eae253e424b0
SHA5126e285a0484d57f6de0ca78a24fb46d9626741d764356d12e2ea6fab32e00a3f285ea0722b89b5a63c11179a5d1ed2a065f97b9399f63f67981fad01967ae654e
-
Filesize
53KB
MD53d9b6f8d5dea750e4bd6c09b7c5178b4
SHA14ac8f545f5f2a478a2a81118ef19792eba348098
SHA2562f644b4017158cfce0546fbe809824d4cf159b41804632ced433fcf2bf94009f
SHA512021aa657df1c8c0228d78c34f2a91a00d4df90d4a229195d2ba1f01f31bf16b8ca5307b9e92aea39dc77216edee1794523950d2592d77d64027d939d74f3d396
-
Filesize
106B
MD593b859ccfdf0494c8288184a3a37538a
SHA1ab87cd8ad8eda2d24bd131515e6fd1377bcc6261
SHA256d9565862710c149091e0b52f8c230183ccd8041e35c52413272b8b8b1da9592a
SHA512c34f5b8a4b4a621ba7760c10b0b39ff5d3be5de16df896a6edb4494ae72b4189910721692925c1376219394362c561e7aec8f8ff7d8240c538b951f3a010019f
-
Filesize
5.6MB
MD53d64d114f83965d62d6c0bc50e7108f9
SHA124fa13c1d489f49d49e752b2220adacef81e4f73
SHA25640c0685693522e8210f5399d8f0bdb383d5293e55518fcee1017fcc11e77348c
SHA512e3fec6fc3c8aca77edc7c48801bb8fe765c269054dd74b1d8d669e1cf478dce526804e2df87a6f13ce7d61ae7303d161f9087668484ba8c109a262b4b022a0d0
-
Filesize
530KB
MD548878f80cd4703a79b787a6717d266bd
SHA19c338cf237f267c643bef14ee7abd4a0129e1be0
SHA25683e989a439c5b6042465a6af067293b343fcf85d683c17d977afc487fa1870fa
SHA512036d6e09a811cab844057fbf763854925da636360c11273081896f0ccf6a4c8b9bd661578fbc28d626c9ddb63d74c57bbcd49f6810947243a090d49b5fb3eaec
-
Filesize
530KB
MD548878f80cd4703a79b787a6717d266bd
SHA19c338cf237f267c643bef14ee7abd4a0129e1be0
SHA25683e989a439c5b6042465a6af067293b343fcf85d683c17d977afc487fa1870fa
SHA512036d6e09a811cab844057fbf763854925da636360c11273081896f0ccf6a4c8b9bd661578fbc28d626c9ddb63d74c57bbcd49f6810947243a090d49b5fb3eaec
-
Filesize
530KB
MD548878f80cd4703a79b787a6717d266bd
SHA19c338cf237f267c643bef14ee7abd4a0129e1be0
SHA25683e989a439c5b6042465a6af067293b343fcf85d683c17d977afc487fa1870fa
SHA512036d6e09a811cab844057fbf763854925da636360c11273081896f0ccf6a4c8b9bd661578fbc28d626c9ddb63d74c57bbcd49f6810947243a090d49b5fb3eaec
-
Filesize
597KB
MD5647a0967315ed80dd590fe111f38bed7
SHA1f311845d591fcab6c9b086f519e6f83b52ba960d
SHA25695a069ff97824a004d4fada58a23c78b775db72de5570a05977355149df67cb6
SHA5120178a3f488e6972ca87a56fcb4bad16679df88149ae265e29c8a2aac3bea75de1cce5e82575de0eef4303bfdbab2593d96e5074f10a7561c83cde22972590d7e
-
Filesize
297KB
MD594d6fb63e0fcc7db6ce26674e61a06f6
SHA134d019f759db4649d89f584437804597b5d02395
SHA25653090adc6e512a6cc52fdd7640736b9352537e757520db7b808857f179bfb3a3
SHA51283a4a927a10fa5210f54908c43c6d68a09ef1aae0aaac40538b4f9252bc01f7b2e3f3e56fe2ee89f0f739918f2559e6af63f58af914f68ba97927245324d7843
-
Filesize
1.6MB
MD5df8403e03a06679d9077a4161849671e
SHA16635f842092ba46af0520ce0fdb978c6b12a7be7
SHA25649738cd60073b83e07957faaf57ac2fee48fb44eb9a69d9a96591b9fb045d06c
SHA512433a869ba671361f7a72601cf9f47dd560aff5abdb69557ae8cf9d7572646a762e711e7f3dba32f5c04b2e8865c8bc29227cd5197a7cb0762131e8baf4ec8b18
-
Filesize
405KB
MD569d9cc8fcfb951ec44c7d9f26bcb3499
SHA1243b233b74a96d2676a0a2c3dec02904944c97cb
SHA2560167466a80c29b10f0cfda34c745930d96a1117d6a9b7838efd6ae77156df495
SHA51218c588224cd6e5a3b82d27c98f6f92bcf6efb111b11f0c6695ecd9ea1b0dfebf1e5575a4d0fa1e193890a3d7409a041fa5f1322262da095a9f16e5b284a48eab
-
Filesize
189KB
MD55cb3f3f7d8d9afe46bf220b1076f7272
SHA1f6ba4dd48e9deddf6094c9f5fb1bcf761e9e31d7
SHA25697119e4ac0b990aabdcb218dce06c2752bf4e37ad7139390cbfd466b1b67889c
SHA51242f8813eb73e1757e200d18e5ae7ee381000466cb9eee11d11993b81ff9b2364995dc293e3109f7e1cb35a2081b0ccc46942afcd03ba24cccbdac61313187f1f
-
Filesize
1.0MB
MD5c9f1a48e9594a1e00a754d0bf50fa6cd
SHA1c07ac2f5d10c007e33a76261dd4b9f5a7ca9a67e
SHA256b9ce70c3b1a73efe80753a05d93d1f84d43456095e1f72358a7cc5c48444d0b3
SHA5123a1edfdce7884558a9ad728e897ef0b3268c18f68b79441fe6eaa4505cbb9ba757b9907ece46781d09e57e32c949e64c973e4ac848bfe9b88c53777e0c05bbff
-
Filesize
569KB
MD515f5792844af082587747a09f1123a0d
SHA1558999ff58818971f96dfff4f433afa596794ba7
SHA256e5188cf139c4af572588fe794b7392479a0bf59aef86666a0a22db121e41da9d
SHA5127de7f740bab5dcafb9f502853963547c7e50993404535dbcd39b88a586a2bf31b50f1eebe4682ee5fa458a00948af44dc104daa0b595c2c02d6901a81beab24f
-
Filesize
985KB
MD5b992640abf4ea6cdac53d8b38076f845
SHA1ed480fe74fb663e0192098c99a822022b380481c
SHA256f945dddd970b1bd95c6f713f3a1797a2f0772bbaaee0803f43e39fd748d4502a
SHA512a3b1beef8df9a0f14eda0cd6d01895bd17c346fd930284806cea6657b3c73df8899c699484742a45753dc0cd85b4b92e7e5b6d31b4f94ccc9865959f28fbc0d9
-
Filesize
829KB
MD5ddc59d3df358f9372708531b977848c3
SHA1e1a0f9b58dc5579bbd5845bb6d3a7da3b5d8b7da
SHA256fedc8cf10ab72e7a0ec3a493356157028fe16d2ae97f73dead28fffde1b7c935
SHA5124b75fe159eeadd71fea2e3b569796ce547808bff5c183d271e3d2aed7ef11311121f7ec768bcbc1c0354b771f971aa2b46836a8a6c2b0c1d2f8b21922943dbd3
-
Filesize
1.0MB
MD520ae1459b18c035d187ebd44d6fe23c2
SHA19fd7012e099ab2c8a39341e7260f050e6c997a6d
SHA256f694caa849ce8b91e5ff374af38c8fc13af15b477b6f3401a13056da11d6f818
SHA512978ab47b667ca96cb16c02a19692433d1dd46f1209a4fc17e6ebab026b3a665b98298ef1df877faf77d3fd460f052da80c2e6d1ed40cbcb2da97bb648700e585
-
Filesize
53KB
MD53d9b6f8d5dea750e4bd6c09b7c5178b4
SHA14ac8f545f5f2a478a2a81118ef19792eba348098
SHA2562f644b4017158cfce0546fbe809824d4cf159b41804632ced433fcf2bf94009f
SHA512021aa657df1c8c0228d78c34f2a91a00d4df90d4a229195d2ba1f01f31bf16b8ca5307b9e92aea39dc77216edee1794523950d2592d77d64027d939d74f3d396
-
Filesize
53KB
MD53d9b6f8d5dea750e4bd6c09b7c5178b4
SHA14ac8f545f5f2a478a2a81118ef19792eba348098
SHA2562f644b4017158cfce0546fbe809824d4cf159b41804632ced433fcf2bf94009f
SHA512021aa657df1c8c0228d78c34f2a91a00d4df90d4a229195d2ba1f01f31bf16b8ca5307b9e92aea39dc77216edee1794523950d2592d77d64027d939d74f3d396
-
Filesize
53KB
MD53d9b6f8d5dea750e4bd6c09b7c5178b4
SHA14ac8f545f5f2a478a2a81118ef19792eba348098
SHA2562f644b4017158cfce0546fbe809824d4cf159b41804632ced433fcf2bf94009f
SHA512021aa657df1c8c0228d78c34f2a91a00d4df90d4a229195d2ba1f01f31bf16b8ca5307b9e92aea39dc77216edee1794523950d2592d77d64027d939d74f3d396
-
Filesize
53KB
MD53d9b6f8d5dea750e4bd6c09b7c5178b4
SHA14ac8f545f5f2a478a2a81118ef19792eba348098
SHA2562f644b4017158cfce0546fbe809824d4cf159b41804632ced433fcf2bf94009f
SHA512021aa657df1c8c0228d78c34f2a91a00d4df90d4a229195d2ba1f01f31bf16b8ca5307b9e92aea39dc77216edee1794523950d2592d77d64027d939d74f3d396
-
Filesize
2.7MB
MD50d18e470c0f7c180860ec1813712c3ab
SHA1bdf3de383e6b0d224cfec4c1d5e28b02eb14ba93
SHA256c86bf499f2de7af9f6471323ef1d56bfe82dd6cba329497c98f82b4a5426f6ff
SHA512713a38c9fdbb857523c6953dfb80558f9e721093a816d035237815536c85208b682046610dff479347d65e956c4fb82aca6f261484cbc9c97b93d656634327ad
-
Filesize
25.4MB
MD5080e7502f5fcfa6f5b67b8d2ca75ac68
SHA10d8d6c41e874a467705284e60c5a21d6e1460769
SHA256ac8de3f23b548d5b573025bf34e3cdd9492b3521eeba24056099f68c167273d3
SHA512be65b2ea6ac635bbad7f73b128c23b15eb7d5b54a4f8d9ed9ccbf88d537553641595b74e3b084bf18c0b16a65c4bbbbfa7a023d9963c27eff7ca73c029275de0
-
Filesize
11.3MB
MD5283a5bbb33472e437d43d2e89b86b59f
SHA16d47a1dca1d43786e5612b5a4162c9e1633e99c2
SHA256a3430e4c9af289130178ff093a0d6b2047da55890eb5693ea0b5ba47609f5979
SHA51291121068304201f3a3d5e5b0f2c3c3c4b8113500d79a82f8a95759ee8458cab3cd52736337089806388025e13d11f91046d395e41816b07b8b15b7828d7caaa2
-
Filesize
11.3MB
MD5283a5bbb33472e437d43d2e89b86b59f
SHA16d47a1dca1d43786e5612b5a4162c9e1633e99c2
SHA256a3430e4c9af289130178ff093a0d6b2047da55890eb5693ea0b5ba47609f5979
SHA51291121068304201f3a3d5e5b0f2c3c3c4b8113500d79a82f8a95759ee8458cab3cd52736337089806388025e13d11f91046d395e41816b07b8b15b7828d7caaa2
-
Filesize
5.6MB
MD53d64d114f83965d62d6c0bc50e7108f9
SHA124fa13c1d489f49d49e752b2220adacef81e4f73
SHA25640c0685693522e8210f5399d8f0bdb383d5293e55518fcee1017fcc11e77348c
SHA512e3fec6fc3c8aca77edc7c48801bb8fe765c269054dd74b1d8d669e1cf478dce526804e2df87a6f13ce7d61ae7303d161f9087668484ba8c109a262b4b022a0d0
-
Filesize
106B
MD593b859ccfdf0494c8288184a3a37538a
SHA1ab87cd8ad8eda2d24bd131515e6fd1377bcc6261
SHA256d9565862710c149091e0b52f8c230183ccd8041e35c52413272b8b8b1da9592a
SHA512c34f5b8a4b4a621ba7760c10b0b39ff5d3be5de16df896a6edb4494ae72b4189910721692925c1376219394362c561e7aec8f8ff7d8240c538b951f3a010019f
-
Filesize
309KB
MD522a0056ffd1c0b3081ca56f441cec3c9
SHA181eaaed525b7c714261f840f7cdb5164e45d734e
SHA256782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1
SHA51272cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b
-
Filesize
309KB
MD522a0056ffd1c0b3081ca56f441cec3c9
SHA181eaaed525b7c714261f840f7cdb5164e45d734e
SHA256782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1
SHA51272cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b
-
Filesize
31KB
MD593228c793ed128d30d6eb812d9ae1e65
SHA1cdc1a42202ab7046cd9164f86daaff5a97b0062a
SHA256bbf9e45ba2ec57b2d4b152b480a58bc5387c621eb914362c56ceb95cc03ff3ca
SHA5129972fb68de4b6a3a0d442601ae6b5ca89116cd9719f43001c5851b165183f664b8df52bac4365f3d9017de2ee581af514dc434619e711d74de1526bb9e1b24d1
-
Filesize
2.0MB
MD5d9dceb4051c1b63d749051a1ae05734d
SHA1832e9a1ae113e08e985388aecb4d8bcaef623720
SHA256943a4b157f49b877ce2e44c6f1921754e4175ff784f9751ac7bf25af45ea0a44
SHA51299a5e19c8e8353505ba32cf2468dc383829b5aeac815c1ea53040e317354cef780cde5dd9db892ce92b0aa69af3b244ec0d5a55ddee72ec249b0c197cfcaae8a
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
5.0MB
MD5ec8f9a6b7bee15028c0fe58426735b91
SHA1f8f4d4ebb1e990b321a27276106af3e7e90bbac9
SHA256a723349cec47aabeeba964e5a4b44b25832193260f1c7c35e84a8b741f0760cf
SHA512bd54633f77457c96934e7e32e98efd60ad22f25ea26915919d42fd77ce3e6daa3bc57cb292a9a317e28c6de408157a89bf3604888035963f1afb822b138b2289
-
C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Client\concrt140.dll
Filesize309KB
MD522a0056ffd1c0b3081ca56f441cec3c9
SHA181eaaed525b7c714261f840f7cdb5164e45d734e
SHA256782910b23f8a65ec477f886f7bcbdc67103354af263bd30c0dccabbfbc506ba1
SHA51272cc4c4625555fd2fb2276a0a062d39ff2ac7b55a212ce6f58fbd7f58ca5a4a0d69e43a7b72bdafa803c84bc400afb5c274e455e5846c83d35d3f9bce88be41b
-
C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Client\msvcp140.dll
Filesize557KB
MD57db24201efea565d930b7ec3306f4308
SHA1880c8034b1655597d0eebe056719a6f79b60e03c
SHA25672fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
SHA512bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
-
C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Client\vccorlib140.dll
Filesize326KB
MD525a304a65ab778e0170f46d54f8cb566
SHA1d2e3570f5e021c90da834ea81ce130bef4bf9252
SHA256c6a8856d3eedac7b032e7a8730faf22707c9e23c2e289d500daac0dfa5de39a6
SHA512d4ea79d54e40a0e0dedcc21905556a8e98a28559b281ea35c54f2d08998f49e98c41048d3886c9df383b6aa7dc931971588c0ddbb1e19847b4784cdf512bd5e5
-
C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Client\vcruntime140.dll
Filesize96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Client\vcruntime140_1.dll
Filesize37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\root\Office16\UCRTBASE.DLL
Filesize1.1MB
MD59cd0aff3e05fca90bf9a227c94669df6
SHA12330e02db78010c44838f5c542edc7d4e1be00c8
SHA256fbed69a52fdcf571dd37fe4cc63cb86ed3732b5b998807f14968788027c00754
SHA5121f29aaf87dcea351f146121a812794ec51b5ad9b0373ad6872d34a51c2c4cc2a16a6ee3b3945a4ad885918d108ce4742f12d3e0c5dd9aaa5c5a4ce310e4cc08b
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\en-us.16\MasterDescriptor.en-us.xml
Filesize35KB
MD5d9146f4847fe248a4ded4f8814e9e810
SHA11d519c27eca820c0e9c0d0cdad8fadd50b6c62b3
SHA256f64cd5357647b33bac217f3b58eb7d3a78992db2f6e14d453dc5411eb7d74a16
SHA512dde997a594af288f38321886e77b95bf399c002007fa20ccb5de3354a0600e97561306dfb33d3f7e9165e2f85593aa1d6f291f2d7eb366ab97fb59a3f101d949
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\en-us.16\stream.x64.en-us.dat.cat
Filesize78KB
MD545df535ed9188a1963138325c9be1125
SHA18a17ce5e77675248ce368e42403c5feb479f8bc2
SHA2567a3d08ccae0fc05686cf9f29a8501b23cfd3d20fd0e3b656759ac78381b1092c
SHA51241b1b15335ad57c426972063260d0e4495eed38d4a455f2fe9c7e0bb7255c785b22886d3d4647a7f5e34b4365f7c2115902f95e9af674e94bc74a0d486e8b09a
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\es-es.16\MasterDescriptor.es-es.xml
Filesize35KB
MD5f6025d7799d132614a6dff35942cbb0c
SHA11a95111c3bada4f49ecbd274c6576ccedc2257cb
SHA256f013af267d940daa08b3329d03fcd34c40426a25a452be489ee3674facb6188a
SHA512acae0e6c486902e4f9b2fb1d14abe11699286288343d6d64111ff94a65491d466ae2ed382c4d2db80d08325844362b832862a7a9a710ba87a39684a178856201
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\es-es.16\stream.x64.es-es.dat.cat
Filesize113KB
MD566f4b43e39da8d719d391dc40154ba9a
SHA1ff9f1a0a1a022ecd0e4a9f299163c2fd67e8f82b
SHA2569a5f72debb3c735b462bf795aef737d6ffd1405b637b4f0f612f1786af3c5b27
SHA5127611daf81e63067af6a8c0d06c31a869d9d85abe7fa66170b1ea4674aa89ff24d2c5a14c606ec08fe2fa1f0354973159e3b16f68981fd736d1af08090c7f32ea
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd640.delta02.cab_extractOfficeC2R98CF3558-AFFF-4F80-BB92-E5B102765AA3\MasterDescriptor.x-none.xml
Filesize30KB
MD5989efee0b56433c8ed87cc68a0f33fc7
SHA1689d1e910cdb438647d1b4029b794844547ad557
SHA256d9f4c44fb57679af0a940792fd32eea97ecbf6fff60eb79d7478ee0969ce85cd
SHA512db939e95b3ab2339fc17da477bbd1941865b2db84e35b7ef285e1944674079e142665bf210a4e92ef8ba9255d90cbc2ff7bc976191ff97ecfbe00edc13d6c9ea
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd640.delta03.cab_extractOfficeC2RE8E0CE24-3E2B-46CE-A1F8-EFD28BB21BB5\stream.x64.x-none.delta03.hash
Filesize128B
MD5ea1179b7fac8bd5881d7da7a28bc27c9
SHA1d9520d9cfce29aca5044248a3ef9b8fc5d939d98
SHA25654f903c3a5cd55dabf52d5894ca9d1adf9ae340842b4c2266828d28289e941ab
SHA5129ae626fadac20fbdb0620c15bb30a260b033c4599fe6d21db0aa72991dab5de244b7e6528ebc8ac9330bde43ab2635d6ded0a74c33450c660af786de0adb0961
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd640.delta03.cab_extractOfficeC2RE8E0CE24-3E2B-46CE-A1F8-EFD28BB21BB5\stream.x64.x-none.delta03.man.dat
Filesize22KB
MD5ea28ab787284aec7d81681ad0f65b67f
SHA11fc262ee657cf8e3b37b4144acd9356c71e7f3e6
SHA2564d6930c7a127675d9c251b8ef0c140fa26225b167e8f072aff1cdf66e56d2be3
SHA5125d77b74e6c8be55f6d1180aef467cd9f3ab2f32c900677723f73993a0cb948c2e509421b6c8378c01f585be90b574a7a3d7848f35c316d03dc150890d08cf741
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd641033.delta03.cab_extractOfficeC2RCEB8D7EB-C580-48CD-8900-B4C3E06F3478\stream.x64.en-us.delta03.hash
Filesize128B
MD54fd20317694dc5ec390a110c19e6ab3c
SHA101f126283cc6c70d0d893426ddebdc0dc07e69ae
SHA2564db644cce6abce8a3a6963dec38a77f97d0c304ea321143f29f176b7eac3cc91
SHA5128f9fa4b61ebfac2eb3107f38b9584dc0fcadc71967eb5b4817ae547fdc35ef7a41266047e91aa023f6044becb1c45a7a78cc7d7a84bb0dc0663262131f8c4d65
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd641033.delta03.cab_extractOfficeC2RCEB8D7EB-C580-48CD-8900-B4C3E06F3478\stream.x64.en-us.delta03.man.dat
Filesize15KB
MD5f7ba21f94c1ec76f4d933648ef1c3b81
SHA1fb94aa2b6366379b74957353e27d7f2b5e0a6d0a
SHA25614be350d9aafc7d804687e78234a57a285ce4249fbb923ac4e30c588971999e3
SHA51251208db9a8de93010ec9659d936b7492094a16ee96d4272c4bb40a70e09167f3269f1a6d08b9daf04c4e6df5533277b2ef38a908a4bfcd02fd4e38fa0b7ad7d5
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd643082.delta02.cab_extractOfficeC2RBC0D38A8-CD83-42B2-B0C1-A2B416196F93\MasterDescriptor.es-es.xml
Filesize30KB
MD5472a11300c031048271767f795e4a2b6
SHA105c44dd010a8a89ad5e1e0ba33b275c81ff85287
SHA256ccd14f4eda9f02a3727e5488c9a2cb50e9f8ec5eaef50431319746cf0a697225
SHA512d4d82319643ec62a6aa3b22085dfe566fded35d7174bd5a4921df762f1af09fc67b299cfa375a23fcf8ca9ed0ba723f2c024bda24bfa9c192a6ede6a1e3d1279
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd643082.delta03.cab_extractOfficeC2RC6028DCB-198F-467B-9D7C-65CF7EF8730D\stream.x64.es-es.delta03.hash
Filesize128B
MD559c3bbf0d51111733230b451399a5f3e
SHA1c21cddf274df3f71dc67d8f7bc3b5365d04a4de0
SHA256ddbceb1165d734cd86c187c9b011bde48d432c4418ea918ebafe030fbe60d434
SHA51272434caf3550a4d90b7a1510c8620a43067346e75c74b538d7bb3faa17d6182146b81c01639d3aae3ed598d7ef85c0b60f074f4b128ef556b7e5b084a03154d3
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\sd643082.delta03.cab_extractOfficeC2RC6028DCB-198F-467B-9D7C-65CF7EF8730D\stream.x64.es-es.delta03.man.dat
Filesize17KB
MD5acc1a212a3221e9a85beeeb323edf147
SHA1c9c58032c2152787650f51ea54e2c0dc658fe512
SHA256735774f04c3b2a1d134807f0fa10f0dcd0df9fa073ccf01400ef326a069b850c
SHA5121c24f7111ffffb18198ee31d0ea2ffd0478fea1f43d76803ef56846ac7b4591cd302fdb9f7d8c5ad1e18bbec6ce9e8dc5ecfd50536e94dfcae65f5ccda73dfc2
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\x-none.16\MasterDescriptor.x-none.xml
Filesize34KB
MD578023d9e86e8b45769cf07ed4315b0a6
SHA1f3333572357e787d0cff88a0d547ac8efb68004a
SHA256e5acb1c43184ace76b5fe27e9fb54d68e6ac505c4f8cc7b19127753aab32378b
SHA51269f0f7bdf87fb5cc07a90ba9eb5e81a706ad77f8f24f47a8d68f5cf7c1e88868d22d067d32036b6a434d758eaf74f5c84d72a876c517ef86ca527f8574f6d6d5
-
C:\ProgramData\Microsoft\ClickToRun\ProductReleases\94473EE2-A299-4CCD-9BF2-DFD3D33E5A43\x-none.16\stream.x64.x-none.dat.cat
Filesize646KB
MD532144f42bac2f181c92c1ae05dd575fe
SHA1721fd6bf8949ed982a6d7219a8a9c8dc0525328b
SHA25637aa47ecbd057b6cff822912da332b5d3437084c7eda4495393d81ea4d936c98
SHA512028cada51e398e6936363690fced4bfc288b498d1413f5a5469efd5dde277a3fd2671df79d626273c7dcef0d616d5186dacdb84f78521111e3a870cbd263cca0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
Filesize471B
MD5d262b3058710340c2b22afeff16986e8
SHA1e66bd553e0df2b57ddce2fd3e6e26e5723bb3fb2
SHA25602be9e9f41865f121ceee1d1f85c79ceced3844f82f016bdc9b46237ed6aadb0
SHA51286ab6fa5e5c409ce651f7d6c56d68bda133be6186f4a22d92a1534cc7f84dc6dcf4dd353c95ad2f1e88a8e5729f22090ffc7b27ac1296aac6a2efb67d11efde7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
Filesize412B
MD5d7a09f23b43ba68f03abf475acd1d850
SHA17f5afd8d14120dd188c72a52404d5077cadb7af2
SHA2566acdc523efa612886e462ec60bfdbd62ba3ed17da0fbda3a6f1e226e994fec62
SHA512532e190801b2e79b4f112e5005145caf843edb762591b522e166475097cf8b1711f5ad2ff03fdceee00bb64bf79e9a815826ddbdda953ac2b6119c386dffcf7d
-
Filesize
30.5MB
MD5bcfae6fb7a742d12c6307dbbab69d3c5
SHA10ecdbd621d5c572a5a8263f1a998c49d40eeef63
SHA256eef1a9de001d190b03147ab1dbcfa0e8943f62a4e886ff43ba9d7e0403b12be4
SHA51263506ef11ab9d577d2d229c9d8d969c571c26304d955f2130db1d68e3730a9f7e2435df57325f806215ddb3e45ff788790732daa78d960d2f7dc56dff888baca
-
Filesize
26B
MD5bd3457e50947d4280734e74b51b5b68d
SHA1424635c6b5622a6c01a59d290a1c9ab8e593effc
SHA25623d647979bc5dc186de5ba3e00a222a912ab8e4782eb6407efa70e29e95979f5
SHA512e83e3615a5e94af288eb1c9b92f55e271765cc43531ec94574371debf63c0c4a58327b6fd8a4775bfba8a3234220cb0396b6d33164309a09a1d826c0689143fb
-
Filesize
3B
MD521438ef4b9ad4fc266b6129a2f60de29
SHA15eb8e2242eeb4f5432beeec8b873f1ab0a6b71fd
SHA25613bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354
SHA51237436ced85e5cd638973e716d6713257d692f9dd2e1975d5511ae3856a7b3b9f0d9e497315a058b516ab31d652ea9950938c77c1ad435ea8d4b49d73427d1237
-
C:\Users\Admin\AppData\Local\Temp\OfficeC2RCA6B8F7E-4AC8-4D05-AB41-0D06D2BDD55DOfficeC2R9E47E253-0CAA-4FAD-A544-76D4FBCCD9A9\v64.hash
Filesize106B
MD56027588e6b4bdb434936841cf5d804d7
SHA1d9655053541abee21590689b6cdcce5b02f7de48
SHA256af609e7856ab0fa717d48ca04e415be3af9a5aeed181b9f0510606c484c17559
SHA512235122b9e72673d24f81c18c5b8f8832b8142b14841cfbda51ef09cba37321af910c1e5ff30067c86d9bcb24dfd04f7e3663dc499ae2c8226ce81a17bc7cfb66
-
C:\Users\Admin\AppData\Local\Temp\OfficeC2RF346CF53-2276-49C5-8CCB-F46D40D0390A\VersionDescriptor.xml
Filesize20KB
MD59068f98875c3e14e7d4ebc9ef0507bda
SHA11b3a5045b11d5a6ed52996056f1978104211a433
SHA2568c150664b687a0afbb82ad708f64ea7019f9c551264cb6647264204b6e8247ba
SHA5125c13df1eeeb575b10054bede2da3dd329a2108cf42d0d838af9eb9d746375bf1b5aec2b04b0e739132e6eddd3af9852f50f435f3b34155878fd22df0407b2198
-
Filesize
60B
MD5d17fe0a3f47be24a6453e9ef58c94641
SHA16ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA25696ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA5125b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
-
Filesize
9KB
MD56efebf7ec7c6736ecb82ce8059cfc9ca
SHA1b6c377784e3772e4b0110679ce5c8fd124210db8
SHA256d66982fb16effac84e2e7cdacb6a85d3b3356d50b4cf27c6b8cf9216a0bdd7ec
SHA5125a31548b8c1303d4db3445c15fddab9872c694ddf0850833dddece54fdb4379c41743984fc02ea8eb0a5a6827e5b6830b9783651693e1684a7873f1d34c8429f
-
Filesize
9KB
MD5eda52e4845c8e29be052fb1548c96a37
SHA1001ebbb80ea446183d41627aa39d47dbc8671e69
SHA256af929d64f35ef331c90202ef42a37905f37ee7005303ea230e810e260b49983f
SHA512eb54717e84c04ac686b532fff3e795bc1e9d6b0c960177146117a98e08463e4995a4fee33c62c54d8c160308a6472e0be5ca40d6a6e15fdf4c464f9520dde157
-
Filesize
9KB
MD52cb7fbf64dc79e613fb83d910fc8c8e5
SHA1cd1685081a67c148d2bfe49daa76e6a338f17c1b
SHA256cb3841c815a62aec7434d7e08e84ad8843e49a8662f6a036600f57c78f03590d
SHA512b60bc256b8880284df53fd461b9441e564181219c48ada05f6d450c4f79e9c4aeba8a1e0fdafce88313c5eec99b4b7326bb2d2c7bb2244a667ac9f9e772d7c75
-
Filesize
2.3MB
MD53a7a875e1aec98bf3a617a57e0cd208a
SHA15b97c749dd8117f54d38279f4ab8e18575a79892
SHA2565d9216f7609ae2dbdc6fb1d1b3818fd339963b7cbd924d852dd357e498e0808b
SHA512616fe8ba0cbefe1301833e49aa1aa972a63a5cf691c03cfbef2ba77dda2cb635f94e604943d65617015c8ff3e15e688dfa5bd573cd97c3836ed3347e68a093ac
-
Filesize
655KB
MD56878e81d3236b0fe54330404593fd87b
SHA1d02828114c59401423deede0995b3c51f183cab8
SHA2568a46c5c23b11d01e835b5ae8415fd59bfac57ad98302c8aea6199737051f6c5c
SHA5124fd0ef3cccc339139afd060643660cd29cf46f54901143bf794b798713d812da5895b12e4ff66a4c2e6aff9691aee58a0adca57b646be24f5ea4df40b7cb6058
-
Filesize
829KB
MD53dbb6dda6e9f8908a079b88452a3cfd9
SHA1e8c7cb8d395035e47a34dd4b79f5fcbb350f3545
SHA256c8ad2b8d3636fcfcd527032169ccaae3111fa978ddac6a2039a83599aa27d9ec
SHA51244a1fe3bd71844d059d2e03bd9d1ec0d6637b25852a8fe5d5004bbe1e1578a01f0754bdc40d08a15c0335130da1a153f27b518ae4ba3b64e575b0d9acc48b6bc
-
Filesize
1.4MB
MD5c12df1c5fa1b9f4faf707f0b20550f73
SHA1f446250c29b672a4217ee37373ba2611ac684039
SHA256c6c99cddb1914346b6fc78bd7f7dd96508fcdf97f141baf311350d6d2b0c12bd
SHA512dc35401209ff3194ca7710faf794a823337ff11a19dbb43709b435569eb85aa4f8a9ccb6e69ed9a9865aad75ae45d8829297ebdfcc01f9df79dcc44b16f4c64c
-
Filesize
33KB
MD5feed14268e9f3ed7a5313a2db0f2e67a
SHA1f84a38533f5ab7974ab61b07287603d52810189f
SHA25617a77ceab20a33b49a40c45d556c4a0db6b479582b4653f11486bb60456608c6
SHA512c24e193b4f5b0e19a2f7317ac4bfe1e4df9debdc433df451d8120c6b61ba2fe579c3f1c05dcccb784714f9128e5b59f0b74eb99dcc751e6e3bdf03ce31a5b89d
-
Filesize
33KB
MD5a440b4cc39b89b1506472bf8f8d0fa77
SHA168d53eac9ab2cc7c50888b2795edadd250157050
SHA25650947c0d6aa03bbcd214066c285a1e4ee17ae03ad0f038728d4e466b0642f747
SHA512ea2701489845f6899e91dd10d2ba984212bb4f6788c0e016cca3019b514bfa430480bf7baa3109addb9327bd1ee65c620fbf7ad7b649a7a99c5f506cf163ef76
-
Filesize
33KB
MD5f4d46c07b32d52776e5e9c7426546209
SHA1c0fb9a70140bd001c01e56d0a82db4b3c3223bb0
SHA2560eeaf6178bd4463b49126555269b2afd8bd243ce6bf0001043146c1ea16846a6
SHA5120b41bce178d75785023350d08b7f27237d1e46b38234484abc91c3645a6f6ee68de1f7243cbef5135d1895468c812fe9d0a0833fe349d75f7be08f9237dbdd4f
-
Filesize
312KB
MD53dfcc07c61bcaa2e435336af43c03376
SHA19de44d0a156cdcfa46d1bb92bcf6e841402b3762
SHA2561d12a9cc21dc0d02dc5d643bf657f98ad9ce4984a1c1d4e7941afe757500e3fa
SHA512e66c769601fd6a371ea5677362b0bae75d08bcd8d9a0da325d2fe36d42268bd7cf994e13b2c08b1775980ed3d59e1057151cfd5344ad7e036d85dd4442d8c078
-
Filesize
29KB
MD567730921b49f141d76cd273f9a742d2e
SHA14d1313d4e6dc68356fb0d1851d000fb054c588cf
SHA25698973e1eb322f0debb7290a8d98c5877dfbd4f9b5d6be272731ec21a30e38cf5
SHA5121b131457ad4adafd5c21edc5ac7531d235ad689a959fa704112c9d67fba64fad81518834e04d782e65193d6913745b1272e0687fe76a43b22bc8057aabd45007
-
Filesize
29KB
MD53be94c75cc19422c7a5bcb59570582d8
SHA114b6f0117220602ff0754b7c912f24536970fc7a
SHA25665f5a3b9f14b700aab3e2da732f0caa44d4708c25b6bf66a7b968d9fac7e8c61
SHA5121f5e42c58ec747a58f9cf87f0a3e69df2ffc6024224f3893bc109071ba89daf78266adadc6de6f871f01dbe88e5195c608bae4d5f290da5f527295f6cbe0d5dd
-
Filesize
29KB
MD58a8c4a70e13f22b03eab6c177b746f8f
SHA1be61065567495083bdd8994f576526a9a89ab7fb
SHA25687366ae8f7d54105ec2cecf4fcf45079a5dc08ab8761f9b998135714aab8b5c2
SHA51206dcf739309b7fc9172a5756de5c9d0b71c7d9c0518de3ab3d7df67770ed9293eb4a1aa849e883e3ba77c4196e13fed4775525d9e93854c4256a467dae429d45
-
Filesize
561KB
MD59d3d6d7d39b022592009959b8cb114a6
SHA13cd296125b7c1ec8fa76d2952b1246e4a84f26fc
SHA2561f860a4f08c93e3ecce8876962f221552cd43912034f4acf2b92747607ea210b
SHA512533f078656303ac09b04f4bbe5e5de1421850c27301b64d5c7b8474141f95cd2b62c617f6249b4a7c36f1c617db9a6c12c4e5fbcdfd12ddf7446b768c651c85d
-
Filesize
30KB
MD55dba5e12b1d697c8ae90752319c0acd3
SHA124ab205011a6d71a1bca99bdc36c90f02015d486
SHA256d6345cf29cb282d71695593913143d8461a4dedebb99b0d3bf5a2a0b482cfd62
SHA512849592da5450c13076ae5245ba1e4ab770c470b9fa4cb683016ca3c7be44140c369c67f2c7ceaed3ef08cd640cd512eb56b6b52e46371ed98dd8d1dfb1a59926
-
Filesize
30KB
MD5003ef8c9c33441a2d9886fcf75541700
SHA114951fa76efe30f9b187e7e171cee8f8ba316eee
SHA256c355e70f5846f7c86be8554ba9bfa968ea7fe097357c0d2abeb3db25ad7c8537
SHA51278f301a7dc1aa29169a9e48cfdf5f55f3cf5835e70c0ec8100b92a50223466bdd0a50f845e0375e180f2ed44bdb174b3ad99086377c32a0618a71f4c14f1c3fd
-
Filesize
30KB
MD5dfe0b904b664cbe12287ab16a47db47e
SHA19dcd10cffd0c27ef9ec33907420f50e5dff0a048
SHA256dbc9b257c629440b28565c48e11e4612d90d9dae35516eb1a7061b44d1a2fc39
SHA512faff64e4257ba58c75745145585451ca294cff3c7bab2c830d628311c2bc4418fb891c0ce98212881ff6a7abc5d6ebf9191e85bbe101465da573afdee8bb2e71