734403a96fad68cb2ef2b340adddd9cadd5894007aac703dcdb4a4cb8326c538

max time kernel
1663s
max time network
1173s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2024 21:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eeeeeeeeeeeeee/Malware_pack_2/Malware_pack_2/Security Central/[email protected]
Size

904KB
MD5

0315c3149c7dc1d865dc5a89043d870d
SHA1

f74546dda99891ca688416b1a61c9637b3794108
SHA256

90c2c3944fa8933eefc699cf590ed836086deb31ee56ec71b5651fd978a352c9
SHA512

7168dc244f0e400fa302801078e3faec8cdd2d3cb3b8baaab0a1b3c0929d7cf41e54bfbe530ad5ce96a6b63761f7866d26aaae788c3138c34294174091478112
SSDEEP

24576:bnQv6Dyxn2Qx0KHizHWKxHuyCcZFyXR1tG:2OE2QtCzhh/7R

Score

8^/10

persistence spyware stealer upx

Malware Config

Signatures

Modifies Installed Components in the registry 2 TTPs 64 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Executes dropped EXE 2 IoCs

pid	Process
3600	Security Central.exe
1624	Security Central.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

UPX packed file 57 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral26/memory/212-2-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/212-5-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/212-7-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/212-6-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/212-19-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-23-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-24-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-25-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-29-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-43-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-54-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-55-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-56-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-58-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-60-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-61-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-63-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-64-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-65-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-66-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-67-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-69-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-70-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-71-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-72-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-73-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-74-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-75-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-76-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-77-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-78-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-79-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-80-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-81-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-82-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-83-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-84-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-85-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-86-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-87-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-88-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-89-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-90-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-91-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-92-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-93-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-95-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-96-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-97-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-98-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-99-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-101-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-102-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-103-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-104-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-105-0x0000000000400000-0x0000000000A35000-memory.dmp	upx
behavioral26/memory/1624-106-0x0000000000400000-0x0000000000A35000-memory.dmp	upx

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Security Central = "C:\\Program Files (x86)\\Security Central\\Security Central.exe"	Security Central.exe

Enumerates connected drives 3 TTPs 29 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\K:	Security Central.exe
File opened (read-only)	\??\P:	Security Central.exe
File opened (read-only)	\??\S:	Security Central.exe
File opened (read-only)	\??\F:	explorer.exe
File opened (read-only)	\??\D:	explorer.exe
File opened (read-only)	\??\I:	Security Central.exe
File opened (read-only)	\??\L:	Security Central.exe
File opened (read-only)	\??\O:	Security Central.exe
File opened (read-only)	\??\Z:	Security Central.exe
File opened (read-only)	\??\D:	explorer.exe
File opened (read-only)	\??\F:	explorer.exe
File opened (read-only)	\??\G:	Security Central.exe
File opened (read-only)	\??\M:	Security Central.exe
File opened (read-only)	\??\U:	Security Central.exe
File opened (read-only)	\??\V:	Security Central.exe
File opened (read-only)	\??\E:	Security Central.exe
File opened (read-only)	\??\Q:	Security Central.exe
File opened (read-only)	\??\W:	Security Central.exe
File opened (read-only)	\??\Y:	Security Central.exe
File opened (read-only)	\??\D:	explorer.exe
File opened (read-only)	\??\J:	Security Central.exe
File opened (read-only)	\??\N:	Security Central.exe
File opened (read-only)	\??\T:	Security Central.exe
File opened (read-only)	\??\F:	explorer.exe
File opened (read-only)	\??\R:	Security Central.exe
File opened (read-only)	\??\D:	explorer.exe
File opened (read-only)	\??\F:	explorer.exe
File opened (read-only)	\??\H:	Security Central.exe
File opened (read-only)	\??\X:	Security Central.exe

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 3828 set thread context of 212	3828	[email protected]	92
PID 3600 set thread context of 1624	3600	Security Central.exe	94

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Security Central\Security Central.exe	[email protected]

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 64 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Capabilities	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ExternalFeatureOverrides\officeclicktorun	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.8 = 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	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|8"	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.13 = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSTagIds0 = "5804129,17110992,7202269,41484365,17110988,7153487,39965824,17962391,508368333,17962392,3462423,3702920,3700754,3965062,4297094,7153421,18716193,7153435,7202265,20502174,6308191,18407617"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\officeclicktorun\Overrides	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\TrustCenter\Experimentation	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.11 = 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	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\Expires = "int64_t\|1710152768"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.4 = 696173222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4e6f7277656769616e426f6b6d61616c456e746572707269736547726f757031222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772617068496d706f72744865647769675558222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772617068496d706f7274496e73657274416c6c4f626a6563747356696577222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e47726170686963732e4368616e6765476174652e5570646174655461626c65426f756e6473466f72547970696e67222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4967782e456e7375726545326f4d6f6e696b65724166746572456e7375726545326f222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4e6577456e737572655549444c6f676963222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4f6666696365496e7369646572526567697374726174696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5043582e416c6c6f7746696e6450656f706c655573616765496e41744d656e74696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5043582e4175746f436f6d706c6574652e46696e6450656f706c65537570706f7274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5043582e4669784e6f6e526566436f756e7465644d736f506572736f6e6173222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e4261636b67726f756e64576f726b436f6e74726f6c6c6572427567466978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e427567466978466f7250686f746f41637469766974794c6f6767696e6752656d6f76616c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e436f6e746163744361726456324f766572666c6f774d656e7573506861736532222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e46696e6450656f706c655573616765456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e497350656f706c655365617263684578656375746f72456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e506378417072696c323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784665627275617279323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784a616e75617279323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784a756e65323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e5063784d61726368323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063782e557365506378436f6e74616374496e666f4c697374222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378417072696c323031374275676669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378436f6d6d6f6e436f6d70617265427567466978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378436f6e746163744361726444706941776172656e6573734275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e506378436f6e7461637443617264466f6e74486569676874444450494275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063784a756e65323031374275676669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063784d61726368323031384275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5063784f63746f626572323031364275676669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50656f706c655365617263682e436f6e7461637453656172636849676e6f72657353796d626f6c73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50656f706c655365617263682e50637848616e646c65734175746f446973636f766572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50656f706c655365617263682e526563697069656e744175746f436f6d706c657465537570706f7274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e50726f6f66696e672e4175746f4d616e616765722e41637469766974696573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e536d6172744c696e6b732e416c6c6f775265636f676e697a65536d6172744c696e6b73496e7369646550617261677261706873222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e54686573617572757350616e652e41637469766974696573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5472616e736c61746f722e456e61626c65466c6f6f6467617465537572766579222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e5472616e736c61746f722e466c6f6f646761746553757276657944656c6179222c20225622203a2022696e7433325f747c3530303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e576f72642e46574153686f756c64426c6f636b53656c4368616e67656446616c73654576656e7473222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e576f72642e53656e6445646974466c6167546f4e6f4572726f724576656e7473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e576f72642e57726974696e67417373697374616e63654372697469717565466f724347415049222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e57726974696e67417373697374616e636555492e50616e652e46697857726f6e67436c6f73654c6f676963222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e436f6c6f72466f6e74537570706f7274456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e46696c6556657273696f6e696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e48696464656e466f6e7473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e4f4172745465787456616c696461746552616e6765564544222c20225622203a2022696e7433325f747c3322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e52696368456469742e416c6c6f774475706c696361746555696d557064617465222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e52696368456469742e436f7079506173746548544d4c222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e536861726564546578742e5472616e7363726962652e436f6e666967436865636b44697361626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d657472792e417269614d617854656172646f776e55706c6f616454696d65496e536563222c20225622203a2022696e7433325f747c3222207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d657472792e566f6c756d65547261636b696e674d61784576656e7473222c20225622203a2022696e7433325f747c3530303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4169725370616365222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c224261636b656e645c22203a207b205c224576656e74735c22203a207b205c224c61796572486f7374496e697469616c697a6174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6d706f7369746f7253657373696f6e547970655c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c225375624e616d657370616365735c22203a207b205c2257696e33325c22203a207b205c225375624e616d657370616365735c22203a207b205c224c65676163795c22203a207b205c224576656e74735c22203a207b205c22416e696d6174696f6e50657263656e74556e64657233304650535c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22416e696d6174696f6e4176674650535c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243726f737357696e54496d654f6646697273744672616d655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224176657261676550726573656e74735065725365636f6e645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e4368617274696e67222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c22436861727445326f4c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436861727445326f536176655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224368617274696e67456e644c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e436c69636b546f52756e222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c225363656e6172696f5c22203a207b205c224576656e74735c22203a207b205c22446f72695461736b5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c225570646174655461736b557064617465646574656374696f6e325c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174655461736b557064617465646f776e6c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174655461736b557064617465636c69656e74646f776e6c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225265706169725461736b46756c6c7265706169725c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225265706169725461736b52656d6f7665696e7374616c6c6174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e7374616c6c5461736b436f6e6669677572656c696768745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436c69656e747570646174655461736b436c69656e74646f776e6c6f61645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e7374616c6c5461736b53747265616d5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22496e7374616c6c5461736b437265617465776f726b696e67636f6e66696775726174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225570646174655461736b55706461746566696e616c697a655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c225461736b4c61737452756e4865617274626561745c22203a207b205c224576656e74735c22203a207b205c225461736b4c61737452756e4865617274626561745c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22556e6976657273616c426f6f7473747261707065725c22203a207b205c224576656e74735c22203a207b205c224170706c69636174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22457865637574655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c656374506172616d65746572735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22436f6c6c656374456d6265646465645369676e61747572655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c2243616c63756c617465506172616d65746572735c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22436c69656e744361624d616e616765725c22203a207b205c224576656e74735c22203a207b205c225461736b557064617465436c69656e74446f776e6c6f6164446f457865637574655c22203a207b205c224576656e74466c61675c22203a2032207d2c205c225461736b436c69656e74446f776e6c6f6164446f457865637574655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2253747265616d4361625c22203a207b205c224576656e74735c22203a207b205c22446f776e6c6f616453747265616d4361625c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c225472616e73706f72745c22203a207b205c225375624e616d657370616365735c22203a207b205c224578706572696d656e74616c5472616e73706f72745c22203a207b205c224576656e74735c22203a207b205c22436162735c22203a207b205c224576656e74466c61675c22203a2032207d207d2c205c224576656e74466c61675c22203a20323536207d207d207d2c205c225472616e73616374696f6e616c46696c654f7065726174696f6e735c22203a207b205c224576656e74735c22203a207b205c224170706c794368616e6765735c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22457865637574655472616e73616374696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d2c205c224576656e74735c22203a207b205c2250726f636573734b696c6c657253687574646f776e5c22203a207b205c224576656e74466c61675c22203a203438383936207d2c205c225472616e73706f72745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c22446f776e6c6f61644361625c22203a207b205c224576656e74466c61675c22203a2032207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e446961676e6f7374696373222c20225622203a20227374643a3a77737472696e677c7b205c225375624e616d657370616365735c22203a207b205c22436f6c6c6563746f725c22203a207b205c224576656e74735c22203a207b205c2253746172745472616365436f6c6c6563746f725c22203a207b205c224576656e74466c61675c22203a20323536207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e54656c656d6574727944796e616d6963436f6e6669672e446f6373222c20225622203a20227374643a3a77737472696e677c7b205c224576656e74735c22203a207b205c22536861726564436f6d6d656e74735f447261667443617264556e6d6f756e745c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224544502a5c22203a207b205c224576656e74466c	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.6 = 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	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\TrustCenter\Experimentation	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.3 = 656e73696e672e44617465546f5573654d6963726f736f6674333635466f72534d42222c20225622203a20227374643a3a77737472696e677c323032302d30342d32315430303a30303a30302b30303a303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e456e61626c6547726163655769746857414350726f6d6f427573426172222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e456e61626c654d6f6465726e41464f222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e486561727462656174446179734265666f726545787044617465222c20225622203a2022696e7433325f747c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e4e6f456e7469746c656d656e747353656c6653657276696365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e4e6f456e7469746c656d656e74735472794275794578706572696d656e7454726561746d656e74222c20225622203a2022696e7433325f747c3222207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e53686f77564e6578745369676e4f75744469616c6f67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e5573655265666163746f726564436f6e666967446570726f766973696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4c6963656e73696e672e5573655265666163746f726564476574557365724c6963656e7365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4d616e6167656162696c6974792e436c6f7564506f6c6963792e4e6f6e5075626c6963436c6f7564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4d616e6167656162696c6974792e54656e616e744173736f63696174696f6e4b65792e4e6f6e5075626c6963436c6f7564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4d616e6167656162696c6974792e5573654f637073563255726c496e57696e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4e616e63794f66666963655465616d2e7a686574616e34313232303231222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e416c6c6f7741626f7274517569636b436865636b45777353657276696365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e416c6c6f7741626f7274517569636b436865636b4f6d657853657276696365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e496e766f6b6546657463684d616e696665737443616c6c6261636b4f6e446f776e6c6f61644d616e6966657374222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e557365436c6f6e6564496e7374616e6365466f724572726f72222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4368616e6765476174652e56616c6964617465446f776e6c6f61645265736f7572636573222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4469616c6f6754776f5761794d6573736167696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e456e61626c654d696e43616368655265667265736820222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4964656e746974794361636865466f72636552656672657368222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e4f7366496e7374616c6c6572526567697374657242675461736b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e506572557365724964656e746974794d696e4361636865222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e506572557365724964656e74697479526962626f6e4361636865222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f45502e5765624b69743246756c6c4469616c6f67415049222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f4d45582e456e61626c65456e7465727072697365436f6d416464696e536574436f6e6e656374496e7465726e616c5570646174654576656e7473222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f4d45582e456e61626c65456e7465727072697365436f6d416464696e556e68616e646c6564457863657074696f6e4576656e7473222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6172742e456e61626c65496e736572744d6564696154656c656d65747279222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6e654e6f74652e4170706c652e43576f726b73706163655573657255736555726c46726f6d526177556e69636f6465537472696e67222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6e654e6f74652e4368616e6765476174652e53686f77494150456e747279222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6e654e6f74652e44656570426174636853746f7265456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6e654e6f74652e52656e6465725570646174656457696e333252656458222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f6e654e6f74652e53686f756c645573654e6574436f7374496e73746561644f664d736f426c6f636b696e67222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e4c6173744d696c6554656c656d6574727954726163657274222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e5063782e4c696e6b6564496e4b32466978222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e5063782e5063784a756e65323031394275674669786573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e526970636f72642e33363134383230222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e526970636f72642e33393039323635222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e4f75746c6f6f6b2e526970636f72642e33393435323833222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5043582e526970636f72642e56534f2e33363432383036222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572666f726d616e63652e426c6f636b696e6757616974732e4f737250726f63657373222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572666f726d616e63652e4368616e6765476174652e586c426f6f74436f6d706c657465416674657246696c654f70656e416e6453706c61736853637265656e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e456e61626c65476574496e736967687473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e456e61626c6553656e645369676e616c222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e47657455736572466163747354696d656f75744d696c6c697365636f6e6473222c20225622203a2022696e7433325f747c3530303022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506572736f6e616c697a6174696f6e2e557365476574496e736967687473466c6f77466f724665746368696e67476f7665726e616e636544617461222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e4368616e6765476174652e436865636b56696577496e536c6964654a616e69746f724f62736572766572222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e4368616e6765476174652e466f726365536f6674776172654d696e69617475726552656e646572696e67222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e4368616e6765476174652e4d657267652e5573655468726f77696e674c69666567756172645374657073222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e4368616e6765476174652e536c69646553686f772e52656c65617365536c69646553686f774d616e616765724265666f726547667853687574646f776e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e48616e646c65434c524372617368222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e506f776572506f696e742e53756767657374696f6e732e456e61626c65436f6e74656e745265636f6d6d656e646174696f6e4974656d73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e50726f6a6563742e50726f6a65637443325253657276657232303133436f6e6e656374696f6e426c6f636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e50726f6a6563742e50726f6a65637443656e74656e6e69616c53657276657232303133426c6f636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e50726f6a6563742e50726f6a65637443656e74656e6e69616c53657276657232303133436f6e6e656374696f6e426c6f636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e434c502e5570646174655374617475734261724f6e50726f66696c65537769746368222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e43656e7472616c697a6564457874656e73696f6e536166657479436865636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e49524d2e5758505644697361626c654c6f616454656d706c617465734f6e426f6f74222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e4973457874656e73696f6e496e4c697374557064617465222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e4d6f6e69746f72656446696c65457874656e73696f6e4c697374222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e50726f74656374696f6e536572766963652e4e657755784d6f64656c222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e53686f756c6452756e436c6f75645365637572697479506f6c696379436865636b222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e53656375726974792e5573654e6f526566436f756e74416d736953747265616d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e436c6f7564222c20225622203a20227374643a3a77737472696e677c5075626c696322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e46617374465445222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e4d53495442697a63686174416c6c6f776c697374222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e4d6f636861222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e4f584f416c6c222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e50657270657475616c4c6963656e7365222c20225622203a20227374643a3a77737472696e677c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e5365676d656e74222c20225622203a20227374643a3a77737472696e677c4e4f4e4652444322207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e56657273696f6e506172746974696f6e222c20225622203a20227374643a3a77737472696e677c57696e3332416e64726f6964486f7422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5365676d656e746174696f6e2e576f7264436f70696c6f74446f67666f6f64222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e416c6c6f775a65726f4c656e677468536561726368537472696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4175746f436f727265637455492e41637469766974696573222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4175746f446973636f7665722e4275674669786573466f7252657472794661696c65645265717565737473222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4175746f446973636f7665722e4c696d6974546f4f6e654175746f446973636f766572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4175746f446973636f7665722e4f6e6c795573654874747073222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e426f6f7449646c655468726f74746c6572222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4275674669782e506572736f6e61436f6e74726f6c4261636b67726f756e64436f6c6f72222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4368616e6765476174652e44656c617943757272656e745549416374697665506c616365557064617465222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4372634261736564556964222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e43726974697175652e44697361626c65644c616e677561676573222c20225622203a20227374643a3a77737472696e677c6a612c7a6822207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e43726974697175652e4c6f67496e7465726e616c4e616d65416e645072696f72697479222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e456469746f72536572766963652e557365496e737472756d656e746174696f6e417069222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5368617265642e4772616d6d6172436865636b696e672e4765726d616e456e744469736162696c69747942	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.1 = 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	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|6"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ETag = "std::wstring\|\"7KZH8z5PsF2wI5drvxDPyodEWfQs0YFrMGqzRTygWkQ=\""	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\Overrides	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0"	OfficeClickToRun.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSCategoriesSeverities = "1329 10,1329 50,1329 15,1329 100,1329 6"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\Overrides	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "2"	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0 = 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	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.9 = 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	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|9"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "2"	OfficeClickToRun.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0	OfficeClickToRun.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\Expires = "int64_t\|0"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|7"	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.12 = 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	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "1"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\all\Overrides	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata	OfficeClickToRun.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.10 = 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	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|1"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|4"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|12"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\VersionId = "uint16_t\|0"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\all\Overrides	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ExternalFeatureOverrides\officeclicktorun	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSCategoriesSeverities = "1329 50,1329 10,1329 15,1329 100,1329 6"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|2"	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|13"	OfficeClickToRun.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages\en-US = "1"	OfficeClickToRun.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor	OfficeClickToRun.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t\|3"	OfficeClickToRun.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun	OfficeClickToRun.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{F19E1B8B-9A20-439F-8649-713EF205500D}	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{0F760E59-1EF8-43EB-8B1D-FA69EDDF4A2B}	Process not Found
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	Process not Found
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	Process not Found
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{D8152D2B-8466-449A-943F-DA8C03D1F2F1}	Process not Found
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{35C313FE-F077-46BA-B549-489A00704CE2}	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	Process not Found
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{3278EA83-3AD4-4884-BACE-C3F2A4BFE9C3}	Process not Found
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{9EF2D8A7-5754-4C8D-9A6C-690B43E90BD5}	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{04EE0674-7952-4F76-9F4E-9A95243D9F2B}	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	Process not Found
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	Process not Found
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	Process not Found
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	Process not Found
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{2C970FC8-1BA4-4AA0-B40D-5288A9B42491}	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{F7E5A177-B7DB-446D-8D2B-8C65EE3E507C}	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{BD79EE2B-31ED-44D8-8C47-34165BAC7218}	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Process not Found
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{FC94822F-7047-4A9F-BDB6-1EC7EBA3D276}	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	Process not Found
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{95C09D12-9BD5-4FDC-9C5D-EA9629C120E1}	Process not Found
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{90DBFE8E-F6FE-47D0-A19D-6841A9608A04}	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3270530367-132075249-2153716227-1000\{695A5918-2F29-40E9-BA28-7D3B68E1CF1C}	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Process not Found
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Process not Found

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2400	explorer.exe
Token: SeCreatePagefilePrivilege	2400	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	2136	explorer.exe
Token: SeCreatePagefilePrivilege	2136	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	3176	explorer.exe
Token: SeCreatePagefilePrivilege	3176	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe
Token: SeShutdownPrivilege	2292	explorer.exe
Token: SeCreatePagefilePrivilege	2292	explorer.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1684	sihost.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
1624	Security Central.exe
1868	sihost.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
4256	sihost.exe
1624	Security Central.exe
2136	explorer.exe
1624	Security Central.exe
1624	Security Central.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
4400	sihost.exe
1624	Security Central.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
2400	explorer.exe
1624	Security Central.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
2136	explorer.exe
1624	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
3176	explorer.exe
1624	Security Central.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
1624	Security Central.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe
2292	explorer.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
3828	[email protected]
3600	Security Central.exe
1624	Security Central.exe
1624	Security Central.exe
440	OfficeClickToRun.exe
3024	OfficeClickToRun.exe
3788	StartMenuExperienceHost.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 3828 wrote to memory of 212	3828	[email protected]	92
PID 212 wrote to memory of 3600	212	[email protected]	93
PID 212 wrote to memory of 3600	212	[email protected]	93
PID 212 wrote to memory of 3600	212	[email protected]	93
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 3600 wrote to memory of 1624	3600	Security Central.exe	94
PID 952 wrote to memory of 2400	952	sihost.exe	100
PID 952 wrote to memory of 2400	952	sihost.exe	100
PID 1868 wrote to memory of 2136	1868	sihost.exe	106
PID 1868 wrote to memory of 2136	1868	sihost.exe	106
PID 4256 wrote to memory of 3176	4256	sihost.exe	109
PID 4256 wrote to memory of 3176	4256	sihost.exe	109
PID 4400 wrote to memory of 2292	4400	sihost.exe	112
PID 4400 wrote to memory of 2292	4400	sihost.exe	112

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\Security Central\[email protected]
"C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\Security Central\[email protected]"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3828
- C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\Security Central\[email protected]
  "C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\Security Central\[email protected]"
  2⤵
  - Drops file in Program Files directory
  - Suspicious use of WriteProcessMemory
  PID:212
- - C:\Program Files (x86)\Security Central\Security Central.exe
    "C:\Program Files (x86)\Security Central\Security Central.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetThreadContext
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3600
  - - C:\Program Files (x86)\Security Central\Security Central.exe
      "C:\Program Files (x86)\Security Central\Security Central.exe"
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      Enumerates connected drives
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      PID:1624

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
PID:1684

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:440

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of WriteProcessMemory
PID:952
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:2400

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:3024

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1868
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:2136

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4256
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:3176

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:2292

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Suspicious use of SetWindowsHookEx
PID:3788

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
PID:1324

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4728

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3704

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4184

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2560

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4156

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3888

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4896

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4768

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3696

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2260

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3472

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3488

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4816

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4612

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1328

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5000

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2976

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3168

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3712

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2124

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:624

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3844

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3496

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3056

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1916

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3188

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4320

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:4840

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4584

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2428

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2544

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2644

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2624

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:864

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1216

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4280

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2192

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:3640

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3692

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4900

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1948

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2888

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1208

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2880

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4764

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1540

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3292

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4480

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4468

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4228

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1040

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1884

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3848

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4164

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4304

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4704

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2136

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4044

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1576

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4492

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:4248

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4712

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3820

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4968

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4132

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4368

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3504

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3896

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:1180

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4500

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2972

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3876

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1960

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:4916

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1080

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1416

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3940

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3660

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3224

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:2404

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3532

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3396

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4964

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3184

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2472

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2712

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4428

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:1228

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5088

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1044

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:3052

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3012

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:436

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4956

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4036

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2128

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2900

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3264

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3088

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4328

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1028

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:4960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4056

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4072

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3400

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:208

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3676

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4380

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5032

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2052

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4536

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4424

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2848

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1728

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:4160

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2836

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4108

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2652

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2068

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2728

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:920

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2416

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2448

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4876

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3784

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5072

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4548

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3288

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4644

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5024

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1756

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:3764

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1596

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:680

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1880

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4640

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1372

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2988

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2812

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2868

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3988

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2436

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3796

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:396

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1496

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3156

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2320

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2748

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4552

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1032

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1500

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1776

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1668

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2696

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2760

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4772

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3112

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3284

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2376

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3980

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4532

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4204

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4236

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2576

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1104

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3236

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1280

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4740

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4940

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:228

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1452

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4208

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1672

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:2396

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2556

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3964

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2496

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4544

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4488

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3924

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2628

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1312

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:432

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1700

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2892

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3724

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3996

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3344

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2612

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2268

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3560

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:940

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2820

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3752

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3180

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2216

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3460

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4052

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3216

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1584

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:376

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5008

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2636

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3792

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2328

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5108

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1156

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1968

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1660

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4932

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4928

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:692

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2724

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:448

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5100

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3508

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4756

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3092

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2632

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4176

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4944

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1004

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4412

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3388

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3616

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4788

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5012

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4252

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3132

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1580

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1596

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3756

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3176

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2716

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:2064

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:636

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:904

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2456

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1424

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2596

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:3160

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1912

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1000

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:2720

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3228

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4848

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:3120

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2332

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2204

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:4484

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3772

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2844

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4224

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2460

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3916

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:1388

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2864

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1284

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2452

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1480

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2208

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1676

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5172

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:5328

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5468

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5628

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5792

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5940

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:6096

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:880

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5200

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5412

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5540

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5732

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6032

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2648

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5296

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5376

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:5512

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5688

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5988

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6036

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5144

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3368

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5220

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:5556

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5740

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5888

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:6000

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4836

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5232

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5208

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5884

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6012

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2732

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:640

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5420

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2600

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5924

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x560 0x56c
1⤵
PID:6020

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6084

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5388

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4516

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5536

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5812

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5436

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5196

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3172

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3956

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5944

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:956

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5432

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6112

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5900

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5904

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5364

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5264

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:5592

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6016

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5680

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5180

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5620

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6100

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5520

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5608

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5844

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5816

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5244

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5132

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:5880

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5176

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
- Modifies registry class
PID:5676

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5820

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5188

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5496

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5444

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5372

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5548

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5916

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6056

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5584

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5332

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5340

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5596

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5128

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5612

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4080

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5480

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5752

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1296

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:468

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:5396

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5472

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4604

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5756

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5660

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5276

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3636

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5224

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5892

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6060

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6052

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5696

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5968

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5544

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5980

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5868

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4724

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:5528

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2552

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2296

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5800

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5460

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5780

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:404

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5932

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:5060

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5992

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6072

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1716

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5252

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1436

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6188

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6340

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:6484

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6636

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6784

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6940

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7096

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2172

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:6220

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6376

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6512

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6692

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6852

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6992

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2592

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6300

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6568

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6660

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6860

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6972

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7140

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6328

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6440

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6488

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6664

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6788

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7080

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7116

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6192

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6368

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:452

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3624

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6152

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6160

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3612

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6624

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6384

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6532

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5912

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6476

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6616

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6064

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6756

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6872

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7068

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4120

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6504

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6752

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:412

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7012

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6268

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6216

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:6548

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6552

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6324

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6436

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6608

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6588

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6888

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6472

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7040

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6832

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6496

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6744

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:888

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6356

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6432

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:6880

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6212

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6452

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7028

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7044

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7088

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5708

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6652

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5856

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6420

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6224

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6136

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6856

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:1292

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6712

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6680

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7144

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6612

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5568

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6956

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6936

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:6904

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6524

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6236

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6732

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6388

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6632

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3404

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7076

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:6316

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6428

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6260

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:6288

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2776

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7152

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6460

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7052

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7008

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6404

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5400

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6776

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6968

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6248

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5360

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:6916

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5808

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4520

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6576

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5996

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5356

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6544

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6748

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1060

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6252

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2284

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6768

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6928

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7048

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6536

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:7192

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7348

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7512

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:7664

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7828

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7984

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8132

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5508

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7220

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:7448

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:7604

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7912

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8072

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3540

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7240

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7352

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7536

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7712

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8000

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7064

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6204

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7304

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7496

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:7560

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7756

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7928

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8156

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7260

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7400

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7748

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7708

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7676

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7940

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8004

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7196

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7384

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6208

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3936

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7816

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5192

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8048

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:7236

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7844

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8140

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7476

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7472

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7900

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7620

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7208

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7268

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7432

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7564

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7796

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8096

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5796

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8172

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7580

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7792

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7132

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:6868

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7544

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:60

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7516

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7976

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:8176

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3748

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7608

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7520

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7876

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7812

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7572

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7548

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5768

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7860

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:7596

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5508

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7700

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6468

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7724

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8068

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5424

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6020

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:4360

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7312

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7380

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7408

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7244

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7888

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7424

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7316

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7924

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7884

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:7288

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7936

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7528

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7972

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:7612

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7120

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8136

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8056

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3448

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7656

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:7372

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7820

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2956

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7808

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5380

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5836

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7420

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5720

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7180

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7444

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5136

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:716

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7904

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7276

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:996

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7488

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7788

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7980

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8012

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:7396

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2184

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3688

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7252

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7688

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7632

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7944

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6740

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8108

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8184

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1552

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7920

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6708

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3060

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7868

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8024

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8204

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8360

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8508

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8656

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:8808

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9112

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7332

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8208

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:8412

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8572

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8716

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8852

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9044

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9196

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8304

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8296

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8648

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8796

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8964

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9120

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8260

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8392

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8420

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8780

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8844

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1036

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8244

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8320

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8672

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8840

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8988

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7292

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8280

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:8608

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8600

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8936

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9100

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8684

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8364

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6380

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8264

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8492

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9212

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8916

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9092

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9080

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9188

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8424

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8864

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8920

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8624

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8632

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8756

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8752

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8400

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8224

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8776

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8248

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8576

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8276

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9020

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9200

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8784

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8904

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8340

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8644

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:224

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9108

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8680

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8384

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8628

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8352

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8404

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6728

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8564

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8616

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8872

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7336

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8444

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6232

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3392

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8216

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8448

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8220

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9192

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9032

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8588

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8456

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8820

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8468

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8300

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8312

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9048

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8932

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2300

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9104

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8704

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1088

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8336

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8980

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8836

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8664

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8428

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9156

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8728

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9180

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9112

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9072

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9204

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8940

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6176

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8252

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7320

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8992

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8956

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9140

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6336

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8720

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:8536

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8436

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9228

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9376

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9528

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9676

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:9824

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9988

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10136

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8308

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:9236

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:9404

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9580

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9744

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9876

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:10076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9356

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9520

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9560

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9740

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9852

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10060

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9220

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9296

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9400

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9632

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9624

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9932

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:316

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8512

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9620

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9784

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9764

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10120

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10236

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9584

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9416

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9732

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:9968

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10124

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9344

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9432

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9264

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:9788

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:10192

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:10084

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9644

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9956

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9760

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:6860

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9000

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:9524

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9948

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:6908

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9440

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10080

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9936

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9856

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9464

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9660

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10204

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10116

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8344

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9316

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9320

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9768

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:9444

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8652

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:9680

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9224

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9172

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9952

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9352

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9476

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10200

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9240

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10012

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9900

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9612

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7228

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9556

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9700

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9396

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10068

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:8484

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9964

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9696

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9492

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8256

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10088

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9420

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9728

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10020

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9412

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9380

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9920

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10100

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9616

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9252

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9312

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10052

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10232

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9256

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:4828

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:9480

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9540

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3928

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9828

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9544

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9512

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10180

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9640

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9736

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8928

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:9368

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:9500

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9928

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10096

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10264

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10428

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10584

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10748

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10892

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11044

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11204

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9388

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10376

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10604

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10684

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10964

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11092

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:8996

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10408

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10480

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10628

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10836

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10980

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11080

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10260

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10296

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10436

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:10952

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10988

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11196

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11212

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10424

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10436

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9992

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9408

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10288

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10328

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10564

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10652

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11104

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11100

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10272

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9428

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10648

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10936

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10904

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11028

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10040

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10532

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11084

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10844

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10444

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10496

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10732

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:10464

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10828

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10284

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:11236

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10776

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:10972

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11040

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11076

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7184

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10596

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11176

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11160

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5724

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11020

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11148

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11180

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10484

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11256

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10364

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:9944

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10360

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
PID:10460

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:7960

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10568

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10384

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:5392

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11096

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11000

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11152

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:1896

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10808

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10252

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10420

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10508

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10476

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11124

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11060

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11016

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:9800

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11240

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10268

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10824

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:3424

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10544

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10768

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10940

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11052

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies registry class
PID:10712

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10380

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10948

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10400

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10512

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:11224

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10876

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10764

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:10984

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Security Central\Security Central.exe

Filesize
904KB

MD5
0315c3149c7dc1d865dc5a89043d870d

SHA1
f74546dda99891ca688416b1a61c9637b3794108

SHA256
90c2c3944fa8933eefc699cf590ed836086deb31ee56ec71b5651fd978a352c9

SHA512
7168dc244f0e400fa302801078e3faec8cdd2d3cb3b8baaab0a1b3c0929d7cf41e54bfbe530ad5ce96a6b63761f7866d26aaae788c3138c34294174091478112

Download Submit
C:\Program Files (x86)\Security Central\Security Central.exe

Filesize
369KB

MD5
99ddf779fcd2db26f4ff04ab90afcabb

SHA1
2f06509afa42e69a717551b7cad7cb2e0ad76650

SHA256
549f3af649c1df603bc85df8d4f8c96de78012b3e974b3c41dbca75fbfc149ae

SHA512
c1001a3314e038b6ef08ed46677b5b73621d294eb985195faa28f392d51049c561f5568230ffe92d58cb9916d3dbfcc97967e55f38e368e9fa9180577187e3b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53

Filesize
471B

MD5
a40c31078f3fd7182239be30c4323571

SHA1
3043f50ca078c74d5b838b9a92ad14aa6666ba4d

SHA256
fce3d27f11da8815145ec6d77495d0cb93db99ba1289301db7c8946e427fd64e

SHA512
1aa91b27c24084bc4fb340fe0427c02fae980402eff909501a037f656d651f49f56d5a83801fb5e06ea3eaa4a63056557e77b116dc857eccd048164aaec7d5aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53

Filesize
412B

MD5
d1da646fbb1d8865c824d4d0058d6241

SHA1
4302cfd30b26191f8665d1c5de3449c1cfad35d4

SHA256
978d5db95c06246e7557a1fe0bf07d7e6b71e3cf223cfcbae375fa6f1be33097

SHA512
b54b876b35833ae4d44885beda37f4f4932ed54b33279ee1bde27e72ff21590e5cd93af65d8234d0963057ad5dea9a50802d6045eb88b8d32973b21269f977d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat

Filesize
1011B

MD5
81f9851075469ba9f61771b9e78d2b53

SHA1
d4590777887027d87cca1bf50e5a08d67d85f034

SHA256
0ed39626930fa1dd78587200007b5ebc084eb11ae3c8f7b554a030c5317b768d

SHA512
c32ae75ab67fa294b0d7b6a4faa4662a9484046dffdb1d54ca45aba6b87938726ca6d1f37fc5c0a91dabd3dc542ecfc84244b0553520e4418366c080f8de29cc

Download Submit
C:\Users\Admin\Desktop\Security Central.lnk

Filesize
1KB

MD5
4c49815f75c52df4f72e367d394c7129

SHA1
a28bbec14bbd59b896f61cf755b55a10894160d3

SHA256
1f7c7aaf302b63566c7d4ebe87c64ee5bb832b979a29cc89fd0703426e0182fa

SHA512
6f72387367a319d48dcdbd84c64dbe73ac1c1122c6d4e7387bb058b7d407133383f24fe53f359b835093a84546f5191836f4f4caeb7f152597f2a79e324e8a6b

Download Submit
memory/212-5-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/212-7-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/212-6-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/212-8-0x00000000028F0000-0x00000000028F1000-memory.dmp

Filesize
4KB

Download
memory/212-19-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/212-2-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-71-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-76-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-106-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-25-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-24-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-23-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-43-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-105-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-54-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-55-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-56-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-57-0x00000000010A0000-0x00000000010A1000-memory.dmp

Filesize
4KB

Download
memory/1624-58-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-60-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-61-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-63-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-64-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-65-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-66-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-67-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-69-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-70-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-22-0x00000000010A0000-0x00000000010A1000-memory.dmp

Filesize
4KB

Download
memory/1624-72-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-73-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-74-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-75-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-29-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-77-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-78-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-79-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-80-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-81-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-82-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-83-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-84-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-85-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-86-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-87-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-88-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-89-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-90-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-91-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-92-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-93-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-95-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-96-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-97-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-98-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-99-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-101-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-102-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-103-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/1624-104-0x0000000000400000-0x0000000000A35000-memory.dmp

Filesize
6.2MB

Download
memory/2292-50-0x0000000004E10000-0x0000000004E11000-memory.dmp

Filesize
4KB

Download
memory/2400-36-0x0000000002EA0000-0x0000000002EA1000-memory.dmp

Filesize
4KB

Download