Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/09/2026, 17:56
Behavioral task
behavioral1
Sample
2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
20 signatures
150 seconds
General
- Target 2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe
- Size 7.8MB
- Sample260907-wjfdjssdpd
- SHA256 47117ebd4f73d7d83316f96851ed303ec24e5dd1d7fceb3498acd1b2e3388912
- MD5 7182f365fcdca371a38f232e6992e319
- SHA1 584c2d46ef59f68020ef55f34ceebc228b1aec30
- SHA512 7adfabe8743c170943b6ab46c46439284300ac8c87cf0e7278db3753a29dd187aed903c9b63b1fdf3653e4c49b33f0e329fbbd9aa23182ed97b68b81a0ab7d43
- SSDEEP 196608:1LEA9vgRpFLzYedNj2srQ2gpDGImMeJozAd9t7f/oBe/jrGdKgP7vVkP1:119cDj2srQSImMO97fgz/e1
- TLSH T1DB867D61A6D140F6E1B2C2727E39F7574C6ABD318A369C4FA3881A4D09749C3F625B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
xred
C2
-
xred.mooo.com
Attributes
-
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
http://xred.site50.net/syn/SUpdate.ini
https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
http://xred.site50.net/syn/Synaptics.rar
https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
http://xred.site50.net/syn/SSLLibrary.dll
Signatures
- Executes dropped EXE 7 IoCs
pid Process 696 ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 4624 ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 3992 Synaptics.exe 5148 Synaptics.exe 4880 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 5768 OfficeC2RClient.exe - Loads dropped DLL 35 IoCs
pid Process 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Synaptics Pointing Device Driver = "C:\\ProgramData\\Synaptics\\Synaptics.exe" 2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks system information in the registry 2 TTPs 8 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName OfficeC2RClient.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName OfficeClickToRun.exe - Drops file in System32 directory 8 IoCs
description ioc Process File opened for modification C:\Windows\System32\CatRoot2\dberr.txt OfficeClickToRun.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\BA48F163-CF21-4BEB-BC11-DBC55511DBF7 OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db-wal OfficeClickToRun.exe File opened for modification C:\Windows\System32\CatRoot2\dberr.txt OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db-shm OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B76BE66D46C355931939D8CF818D03FD_30070D1E013A39CA7A94F919F7922FDF OfficeClickToRun.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B76BE66D46C355931939D8CF818D03FD_30070D1E013A39CA7A94F919F7922FDF OfficeClickToRun.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\AppVClientIsv.man OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\AppVIsvApi.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.hr-hr.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.th-th.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.tr-tr.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-core-synch-l1-2-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\AppVIsvVirtualization.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.pl-pl.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\OfficeC2RCom_arm64.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-heap-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\AppvIsvSubsystems64.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.fi-fi.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.ja-jp.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.vi-vn.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.zh-tw.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\msvcp140_1.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\ucrtbase.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\c2r64werhandler.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.de-de.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-core-timezone-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\msvcp140_2.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\SubsystemController.man OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.bg-bg.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.lt-lt.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\manageability.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-filesystem-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\appvcleaner.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\AppVCatalog.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-core-xstate-l2-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-convert-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-string-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.es-mx.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.nb-no.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\OfficeClickToRun.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\vcruntime140.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2R64_arm64x.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.da-dk.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\ClientCapabilities.json OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\vcruntime140.dll.bak OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.et-ee.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll.bak OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-core-localization-l1-2-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\ApiClient_arm64.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\concrt140.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\officeinventory.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-time-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-math-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-private-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\AppVShNotify.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.sr-latn-rs.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\InspectorOfficeGadget.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\IntegratedOffice.exe OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\msvcp140.dll.bak OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\api-ms-win-crt-utility-l1-1-0.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\msix.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\officesvcmgrschedule.xml OfficeClickToRun.exe File opened for modification C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RHeartbeatConfig.xml OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.fr-ca.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.ms-my.dll OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\C2RINTL.sv-se.dll OfficeClickToRun.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe.bak OfficeClickToRun.exe File created C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.20326.20132OfficeC2RA4A19A82-4F06-44E0-BEE7-2F25D6F8964E\ApiClient.dll OfficeClickToRun.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 5 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Synaptics.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Synaptics.exe - Checks processor information in registry 2 TTPs 12 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString EXCEL.EXE Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz OfficeClickToRun.exe - Enumerates system info in registry 2 TTPs 12 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS EXCEL.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily EXCEL.EXE Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU OfficeClickToRun.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily OfficeClickToRun.exe - Modifies data under HKEY_USERS 64 IoCs
description ioc Process Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\LastClean = 909cc679f23edd01 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.6 = 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 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.11 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\FirstSession\officeclicktorun OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--rs=en-US&build=16.0.20326&telemetryRegion=GLOBAL&crev=3 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor\ULSCategoriesSeverities = "1329 10,940 10,941 10,942 10,940 15,943 10,940 6,944 50,1329 15,944 10,941 15,942 15,940 50,943 15,944 6,944 15,943 6,1329 50,1329 100,1329 6,941 6,942 6,944 100,940 100" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|6" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|13" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.19 = 63636573736962696c6974795c22203a207b205c224576656e74735c22203a207b205c22416363436865636b657256696f6c6174696f6e547970655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2247726170686963735c22203a207b205c224576656e74735c22203a207b205c2245326f496e666f466f72446f63756d656e74436f6e7461696e696e674475706c696361746541727469645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22446961676e6f737469635c22203a207b205c224576656e74735c22203a207b205c22496e636f73697374656e74526561644f6e6c79446f6350726f70657274795c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22547261636b4368616e6765735c22203a207b205c224576656e74735c22203a207b205c22557463547261636b4368616e67657341646465645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c2255736572507265666572656e63655c22203a207b205c224576656e74735c22203a207b205c225365744972665c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22436f70696c6f745c22203a207b205c224576656e74735c22203a207b205c2250726f61637469766553756d6d617279456e61626c65645c22203a207b205c224576656e74466c61675c22203a2032207d2c205c224167656e744d6f6465457564624576616c756174696f6e5c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c224f6c655c22203a207b205c224576656e74735c22203a207b205c22496e736572744f6c654f626a656374436f72655c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c225363726f6c6c5c22203a207b205c224576656e74735c22203a207b205c22456e73757265437572736f725669736962696c6974795c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22456469745c22203a207b205c224576656e74735c22203a207b205c22465265636f6e63696c6550646f645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d2c205c22436f6e74656e74436f6e74726f6c5c22203a207b205c224576656e74735c22203a207b205c2246456e737572655665637362645c22203a207b205c224576656e74466c61675c22203a2032207d207d207d207d207d22207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e417574686f72696e674173736973742e536574417574686f72696e67417373697374456e61626c6564466f724964656e746974794f6e496e6974222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e456e61626c654c6f63616c697a6174696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e456e61626c65556e6865616c74684d6f6e69746f72696e67222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e526573656172636865722e4e6f64654a5357656250616765457874726163746f72222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e536861726564536572706c6574466561747572654761746534222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e53686f77466c6f617469654368616e676547617465222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e48656c7050726f7669646572456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e506172616d657465725465726d50726564696374696f6e456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5543492e54656c6c4d652e53686f756c6453686f7748656c70416374696f6e73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4163636573736962696c697479417373697374616e742e557365496e697469616c50726f7073222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4163636573736962696c697479417373697374616e742e557365496e697469616c50726f70735f5632222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4164644164646974696f6e616c436f6c6f7273546f6f6c746970222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4164645374617465466f72496e56696f6c6174696f6e4669784368616e6765456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e436c6f756446696c655069636b657257696e3332222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e46524544656665727265644469616c6f67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e46697833383934383832222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e466c75656e7453562e4469616c6f6773222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e486f6d65506c6163654c69737454616273536561726368626f78222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e49734c6c6d416c74546578744c616e6775616765436f6e74657874456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4c6f67416363436865636b657247757474657249636f6e52656e646572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4e657455492e496d70726f7665644e6f664d4b6579626f617264696e67222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e4f7074696d697a6564436f6e7472617374436f6c6f724665746368456e61626c65645633222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e5050544661696c466173744d696452756c65456e61626c6564222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e5072656c6f6164696e67506572664761696e457374696d61746f7254656c656d65747279222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e525449456e61626c65496e7365727453796d626f6c73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e5265666163746f7252656164696e674f72646572222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e5265737472696374535541546f4c656674436c69636b222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e5468656d696e672e5573654d656469756d4c756d696e616e63655468726573686f6c64222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e5573655375706572746970734f6e546f6f6c626172436f6e74726f6c73222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e574341474d696e696d756d54617267657453697a652e44726f70646f776e47616c6c6572794368616e676573456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e5558506c6174666f726d2e574341474d696e696d756d54617267657453697a652e496e526962626f6e4368616e676573456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e557870702e456e61626c6557696e414249222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e566973696f2e426c6f636b4f6c654175746f4c6f6164416e6452756e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e566973696f2e4973496e73696768747350616e65456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e566973696f2e4e65775468656d6546656174757265456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e566973696f2e5a7274456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e57686174734e65772e454353446174614c6f61646564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4175676c6f6f702e436f70696c6f74436f6d706f73652e4d756c74696d6f64616c697479497354344c616e677561676573456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4175676c6f6f702e4d756c74696d6f64616c2e697347707434314d6f64656c456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4175676c6f6f702e4d756c74696d6f64616c2e69735850494156616c69646174696f6e456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e436f6d6d656e744e61764661696c757265427573626172222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e456e61626c65436f6e73747261696e74466f7257504d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e46413030303030303035312e436f6e766572736174696f6e5472616e736372697074696f6e5633222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e46413030303030303035312e7472616e7363726962657254797065222c20225622203a20227374643a3a77737472696e677c4661737422207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e46413030303030303134352e456e61626c65436f6e646974696f6e616c4669656c64734e65775558222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e46413030303030303134352e456e61626c65446f6347656e50616e654c6f61644f7074696d697a6174696f6e222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e46413030303030303134352e4c6973744669656c64466978656444656661756c7456616c7565222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e46413030303030303134352e616c6c6f77456d70747956616c75654f70657261746f7273496e436f6e646974696f6e73222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e497352656164416c6f75644e657572616c566f696365414c436c69656e74456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e4d616b6550726f7465637465644c6162656c7353616665466f7257504d222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e5472616e7363726962652e456e61626c654e6577584d4c53746f72616765466f72576f7264222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303132352e456e61626c6543616c6c6572496e666f5461786f6e6f6d79222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303132352e456e61626c654b656570416c697665466f72414c53657373696f6e222c20225622203a2022626f6f6c7c3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303132352e456e61626c6551756572794265666f7265416e6e6f746174696f6e4c6f6164222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303132352e456e61626c65576f726445646974436861745377697463686572222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303132352e497348616e646f6666426f6f6b656e64696e67456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303132352e497356657273696f6e436f6d6d616e64456e61626c6564466f72534458222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303132352e697353617665546f4f6e654472697665456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303133392e436f61636850726f6d707456657273696f6e222c20225622203a20227374643a3a77737472696e677c763722207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72642e66613030303030303133392e53747265616d696e6753756d6d617279456e61626c6564222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72644f6e6c696e652e4175676c6f6f702e436f6d707265737346696c65436f6e74656e74222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e576f72644f6e6c696e652e46413030303030303132352e456e61626c6543616c6c6572496e666f5461786f6e6f6d79222c20225622203a2022626f6f6c7c3022207d205d2c2022464347726f75704d617022203a207b2022464347726f75704d61705f3122203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e426c6f636b656447726170686963734164617074657231222c20225622203a20227374643a3a77737472696e677c33323930323b303b303b303b383434343234393330373838333230323b323b303b303b303b303b3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e426c6f636b656447726170686963734164617074657232222c20225622203a20227374643a3a77737472696e677c33323930323b303b303b303b383434343234393330373838323936373b323b303b303b303b303b3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e426c6f636b656447726170686963734164617074657233222c20225622203a20227374643a3a77737472696e677c33323930323b303b303b303b383434343234393330373838333231313b323b303b303b303b303b3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e426c6f636b656447726170686963734164617074657234222c20225622203a20227374643a3a77737472696e677c33323930323b303b303b303b383434343234393330373934313932373b323b303b303b303b303b3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e426c6f636b656447726170686963734164617074657235222c20225622203a20227374643a3a77737472696e677c33323930323b303b303b303b383732353732343238343635343239363b323b303b303b303b303b3022207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e41697253706163652e426c6f636b6564477261706869637341646170746572436f756e74222c20225622203a2022696e7436345f747c3522207d205d2c2022464347726f75704d61705f3222203a205b207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e4175746f67726f75704e616d657353706563696679536f75726365222c20225622203a2022626f6f6c7c3122207d2c207b20224622203a20224d6963726f736f66742e4f66666963652e457863656c2e4e6f6e44657374727563746976654175746f67726f75 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Experiment\officeclicktorun\BuildNumber = "16.0.20326" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|2" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|12" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|14" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs OfficeClickToRun.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe\ULSMonitor OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|4" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigIds = "std::wstring|P-R-1755680-1-1,P-R-1098158-1-5,P-R-1085701-1-1,P-R-76757-1-2,P-R-54903-1-3,P-R-26146-7-17,P-D-29635-1-1,P-D-27087-1-9,P-R-1836166-14-7,P-R-1821050-8-6,P-R-1807855-8-3,P-R-1814369-8-4,P-R-1832317-8-3,P-R-1633948-8-5,P-R-58640-1-3,P-E-1714677-C1-5,P-R-35099-2-4,pe1714677c1:1031202,P-R-1236980-8-6,P-R-34843-4-6,P-R-1933995-14-3,P-R-1870492-14-4,P-R-1814215-17-9,P-R-1813564-24-7,P-R-1813311-18-7,P-R-1781559-14-9,P-R-1651075-4-4,P-R-1560752-4-5,P-R-1245658-13-16,P-R-1233497-4-5,P-R-45483-16-53,P-R-50717-18-60,P-R-87587-4-4,P-R-75069-1-3,P-R-75001-1-3,P-R-68152-18-21,P-R-52316-C17-37,P-R-49162-18-13,P-R-49161-18-13,P-R-40253-6-19,P-R-40254-6-18,P-R-35401-6-7,P-R-32107-22-22,pr193399514:1331520,P-R-1853284-14-2,P-R-1853199-13-2,P-R-24980-8-48,P-R-18279-2-65,P-R-113915-8-7,P-R-52982-18-34,P-R-51145-2-7,P-R-1852138-9-3,P-R-1238825-4-4,P-R-1186905-18-16,,P-R-1537511-13-15,P-R-1439410-13-19,P-R-1042420-4-3,P-R-1036164-4-7,P-R-79616-1-3,P-R-77621-1-3,P-R-77204-1-3,P-R-76107-1-3,P-R-74334-1-3,P-R-74439-1-3,P-R-73642-1-3,P-R-62875-2-4,P-R-60579-2-2,P-R-60333-1-3,P-R-58107-2-2,P-R-55743-1-3,P-R-51958-1-5,P-R-38085-12-9,,P-E-1885398-4-10,P-E-28677-C1-3,P-R-1880289-4-1754,P-R-1829252-8-2,P-R-1827684-8-2,P-R-1814623-8-2,P-R-1813623-8-3,P-R-1412501-12-13,P-R-1264797-15-15,P-R-1251332-1-2,P-R-55122-8-8,P-R-50255-10-9,P-R-45314-10-16,P-E-38231-2-4,P-R-1895541-14-17,P-R-1709115-14-14,P-R-1625773-13-17,P-R-1278499-4-4,P-R-94560-14-12,P-R-94189-14-13,P-R-93882-14-26,P-R-61147-18-2,P-R-54728-16-23,P-R-54698-16-16,P-R-54658-18-19,P-R-38306-C17-3,P-R-34019-4-3,P-R-1892266-8-3,P-R-1892258-8-3,P-R-1882903-8-3,P-R-1836197-8-4,P-R-1828624-8-3,P-R-1817880-14-3,P-R-1817522-13-9,P-R-1803495-8-2,P-R-1789256-8-4,P-R-1789064-9-2,P-R-1789042-8-2,P-R-1789036-9-2,P-R-1789018-9-3,P-R-1789015-9-4,P-R-1789014-8-4,P-R-1788261-9-2,P-R-1785509-8-4,P-R-1782002-18-14,P-R-1779539-31-3,P-R-1774797-C17-10,P-R-1767478-8-4,P-R-1761154-8-5,P-R-1758923-8-4,P-R-1755806-8-5,P-R-1755569-8-6,P-R-1737532-13-28,P-R-1690961-13-14,P-R-1673656-8-5,P-R-1670093-19-21,P-R-1657341-8-4,P-R-1652542-8-4,P-R-1651852-8-4,P-R-1637373-12-12,P-R-1635796-8-4,P-R-1628917-13-13,P-R-1628237-4-6,P-R-1623428-4-6,P-R-1614609-11-15,P-R-1612815-8-4,P-R-1591403-8-4,P-R-1583844-8-4,P-R-1573819-13-7,P-R-1567670-14-7,P-R-1540947-8-5,P-R-1541814-4-4,P-R-1541746-1-2,P-R-1537597-4-4,P-R-1535869-6-7,P-R-1530276-11-12,P-R-1452041-4-4,P-R-1415831-8-4,P-R-1273343-4-4,P-R-1254160-14-13,P-R-1250935-4-4,P-R-1240841-8-4,P-R-1229666-6-4,P-R-1167213-6-4,P-R-1157772-13-13,P-R-1153937-8-4,P-R-1152982-4-4,P-R-1146232-8-4,P-R-1129443-8-4,P-R-1127040-4-9,P-R-1085299-8-5,P-R-1082968-8-5,P-R-1074030-8-4,P-R-1063968-14-21,P-R-1053269-8-5,P-R-93970-8-4,P-R-69065-1-3,P-R-59193-1-3,P-R-45609-14-6,P-R-45197-2-6,P-R-40980-18-16,P-R-39029-5-18,P-R-35165-2-7,P-R-29809-1-7,P-R-26968-3-9,P-D-1443821-5-10,pr178200218:1316037,pr1774797c17:1208297,P-R-1781093-18-9,P-R-1718320-16-16,P-R-1452229-18-9,P-R-1434521-18-9,P-R-1292375-18-7,P-R-1252066-18-8,P-R-1245305-18-12,P-R-1088788-18-6,P-R-1078571-18-8,P-R-53545-4-5,P-R-49736-6-22,P-R-30085-1-9,P-R-25009-1-8,P-R-24363-1-13,P-R-19814-1-62,P-R-19012-1-57,P-R-1900602-8-3,P-R-1876376-8-5,P-R-1848199-14-15,P-R-1837717-8-4,P-R-1836238-8-6,P-R-1818151-9-11,P-R-1813637-13-2,P-R-1813599-13-2,P-R-1813586-13-2,P-R-1810975-14-14,P-R-1747979-14-14,P-R-1716484-14-16,P-R-1712491-8-4,P-R-1652021-8-5,P-R-1650999-16-13,P-R-1634774-14-14,P-R-1617575-8-5,P-R-1611054-13-14,P-R-1544872-8-4,P-R-1293457-13-11,P-R-1264125-4-4,P-R-1248814-14-15,P-R-1167613-4-6,P-R-1146255-8-6,P-R-1014452-8-8,P-R-64841-22-15,P-R-63100-28-10,P-R-40990-12-15,P-R-32744-14-15,P-R-32741-32-16,pr171648414:1235057,P-R-50429-18-8,P-R-1883937-10-9,P-R-1873081-14-9,P-R-1829801-8-4,P-R-1812596-8-3,P-R-1802248-13-3,P-R-1780328-C18-6,P-R-1780217-9-2,P-R-1780184-8-3,P-R-1780171-13-3,P-R-1780132-12-3,P-R-1706555-10-8,P-R-1691976-14-13,P-R-1679472-14-18,P-R-1576884-13-18,P-R-1544369-13-14,P-R-1543460-13-11,P-R-1421374-13-16,P-R-1260037-18-27,P-R-1240556-8-6,P-R-1175149-18-28,P-R-1228063-13-19,P-R-1176387-13-15,P-R-1158693-18-13,P-R-1158507-8-6,P-R-1158154-4-5,P-R-1110173-4-6,P-R-1110459-18-20,P-R-1085707-18-51,P-R-1026542-8-4,P-R-53421-28-14,P-R-40475-28-28,pr1780328c18:1358636,P-R-1475689-4-6,P-R-1272376-4-4,P-R-1248805-4-4,P-R-1177905-4-5,P-R-1161704-4-10,P-R-1848310-13-2,P-R-1887507-14-10,P-R-1879386-14-9,P-R-1876163-14-12,P-R-1874231-14-10,P-R-1874553-14-8,P-R-1873208-14-11,P-R-1869738-14-6,P-R-1869731-14-6,P-R-1863418-14-6,P-R-1862938-14-6,P-R-1859996-14-7,P-R-1851413-15-8,P-R-1848209-14-7,P-R-1847175-14-6,P-R-1845436-14-18,P-R-1845156-14-8,P-R-1839572-14-14,P-R-1842723-14-7,P-R-1841126-6-7,P-R-1839561-14-10,P-R-1836233-14-9,P-R-1836781-6-4,P-R-1836371-14-6,P-R-1835172-8-4,P-R-1803324-14-24,P-R-1832024-14-6,P-R-1820980-26-4,P-R-1820949-26-6,P-R-1815825-14-16,P-R-1810081-14-6,P-R-1807201-14-8,P-R-1807019-14-7,P-R-1805550-14-8,P-R-1803066-13-15,P-R-1802400-14-13,P-R-1798531-9-25,P-R-1797771-13-14,P-R-1796973-14-12,P-R-1794692-13-13,P-R-1793704-14-16,P-R-1790989-14-4,P-R-1787057-13-14,P-R-1785535-13-12,P-R-1784006-14-12,P-R-1783337-14-16,P-R-1770868-19-22,P-R-1775181-13-32,P-R-1774657-12-5,P-R-1771459-14-8,P-R-1761064-39-58,P-R-1760990-14-15,P-R-1760420-13-12,P-R-1759553-14-14,P-R-1649935-13-17,P-R-1626972-14-14,P-R-1620376-13-13,P-R-1559588-46-42,P-R-1591899-14-17,P-R-1584274-8-11,P-R-1568884-18-18,P-R-1571458-12-10,P-R-1554242-13-23,P-R-1544245-14-17,P-R-1542062-13-19,P-R-1540877-13-17,P-R-1525930-15-17,P-R-1531082-13-21,P-R-1531622-12-12,P-R-1290207-13-12,P-R-1280425-13-18,P-R-1267069-10-12,P-R-1256409-12-13,P-R-1235672-13-15,P-R-51995-18-28,P-E-1820910-4-13,P-R-1870849-10-9,P-R-1861005-14-9,P-R-1827587-9-2,P-R-1827564-1-2,P-R-1827560-3-2,P-R-1827442-4-2,P-R-1791904-8-6,P-R-1737848-6-7,P-R-1670257-8-6,P-R-1605960-14-15,P-R-1468516-14-17,P-R-1455593-4-4,P-R-1237197-14-16,P-R-1246213-6-4,P-R-1238785-4-3,P-R-1058675-8-4,P-R-79963-1-2,P-R-60816-10-19,P-R-51764-1-4,P-R-42392-2-4,P-R-39073-1-5,pr186100514:1226144,P-R-1123376-10-14,P-R-1009855-12-14,P-R-98856-18-48,P-R-1848055-16-14,P-R-1823610-13-2,P-R-1823604-13-2,P-R-1558749-4-4,P-R-1536204-4-7,P-R-1430031-4-4,P-R-1433312-20-34,P-R-1430034-4-4,P-R-1853619-14-3,P-R-1852043-25-12,P-R-1847204-14-9,P-R-1838758-8-4,P-R-1820142-14-12,P-R-1791971-13-23,P-R-1812592-14-15,P-R-1810218-14-14,P-R-1802125-14-8,P-R-1787457-13-15,P-R-1786525-18-9,P-R-1785872-8-4,P-R-1754708-2-3,P-R-1752374-2-5,P-R-1751229-2-3,P-R-1735293-14-2,P-R-1732892-2-4,P-R-1633765-13-21,P-R-1626007-6-4,P-R-1610984-8-4,P-R-1559043-14-17,P-R-1549709-6-4,P-R-1522740-4-4,P-R-1436043-4-4,P-R-117941-4-4,P-R-59534-1-3,P-R-54557-1-3,P-R-71360-18-19,P-R-1827243-8-3,P-R-1707720-2-6,P-R-1895033-8-4,P-R-1807206-8-2,P-R-1691466-2-3,,P-R-1752850-18-7,P-R-1752853-18-18,P-E-1734337-2-3,P-R-1853507-14-13,P-R-1558610-14-15,P-R-1016539-8-5,P-R-82473-1-4,P-R-56618-1-3,pe17343372:1068526,P-R-1859828-9-2,P-R-33696-1-5,P-R-1837771-8-5,P-R-1816257-8-6,P-R-1807283-1-3,P-R-1802227-13-12,P-R-1787400-8-8,P-R-1784611-13-17,P-R-1779925-11-40,P-R-1770296-13-15,P-R-1768947-12-13,P-R-1767284-11-10,P-R-1762471-13-15,P-R-1761083-12-12,P-R-1759466-13-18,P-R-1746165-13-18,P-R-1743487-16-14,P-R-1739655-10-11,P-R-1739649-10-9,P-R-1736354-8-4,P-R-1733382-10-10,P-R-1697143-8-4,P-R-1628558-13-9,P-R-1608729-14-14,P-R-1595453-13-20,P-R-1594709-11-9,P-R-1591527-13-14,P-R-1585604-11-20,P-R-1571269-1-2,P-R-1566050-17-22,P-R-1563786-13-20,P-R-1547804-13-16,P-R-1547474-13-14,P-R-1547323-14-17,P-R-1546619-14-15,P-R-1535503-14-16,P-R-1534940-14-17,P-R-1532450-23-35,P-R-1526113-9-8,P-R-1470030-14-20,P-R-1468186-13-18,P-R-1454822-13-23,P-R-1455898-12-23,P-R-1431076-13-17,P-R-1413748-4-6,P-R-1356627-14-14,P-R-1263006-12-11,P-R-1256496-14-17,P-R-1221558-8-11,P-R-1152783-13-15,P-R-39912-1-2,P-R-1463515-14-16,P-R-1293269-5-8,P-R-50380-18-18,P-R-1851133-14-11,P-R-1842366-8-8,P-R-1828620-14-14,P-R-1805832-14-6,P-R-1804385-8-4,P-R-1790483-8-7,P-R-1788359-14-15,P-R-1782040-18-18,P-R-1773162-8-5,P-R-1761865-18-13,P-R-1724690-2-3,P-R-1712571-13-16,P-R-1701617-14-18,P-R-1691621-14-13,P-R-1620975-13-15,P-R-1604240-18-26,P-R-1597393-8-4,P-R-1587298-8-6,P-R-1585341-13-17,P-R-1553975-14-17,P-R-1457105-4-4,P-R-1447211-4-4,P-R-1442588-8-7,P-R-1264759-4-6,P-R-1225218-4-5,P-R-1178370-13-18,P-R-63338-18-11,P-R-58251-18-12,P-R-33737-1-4,P-E-29662-C1-3,P-R-1817519-14-11,P-R-1746541-14-18,P-R-1650085-4-4,P-R-1232796-4-4,P-R-1226757-4-6,P-R-1152777-14-15,P-R-61358-C17-22,P-R-63947-18-2,P-R-61361-18-26,P-R-61360-18-21,P-R-47242-18-11,P-R-42512-1-3,P-R-35407-4-3,P-R-33188-C17-14,P-R-28644-1-4,P-R-18513-1-30,P-R-1856616-16-10,P-R-1851788-9-5,P-R-1811556-14-19,P-R-1653256-8-6,P-R-1617889-13-16,P-R-1437162-8-4,P-R-1247654-13-17,P-R-1220844-8-4,P-R-65011-1-3,P-R-50541-2-7,P-R-69232-38-12,P-R-23681-2-7,P-D-32502-2-3,P-D-32501-2-3,P-D-32415-2-3,P-R-1920062-14-8,P-R-1866518-8-2,P-R-1859976-13-2,P-R-1859966-29-2,P-R-1635101-14-14,P-R-1450511-14-19,P-R-1278627-14-16,P-R-1235942-14-16,P-R-1148514-1-3,P-R-64513-18-11,P-R-51916-84-31,P-D-1160240-1-6,P-D-1160141-1-4,,P-R-1854879-9-2,P-R-1462420-4-4,P-R-1075199-6-4,P-R-1013930-4-5,P-R-47601-18-13,P-R-33916-1-5,P-R-33580-8-9,P-R-1827533-15-11,P-R-1827530-14-10,P-R-1827520-6-5,P-R-1827497-9-3,P-R-1804941-8-3,P-R-1790557-14-4,P-R-1752365-14-15,P-R-1669254-17-19,P-R-1644428-2-9,P-R-1658015-14-19,P-R-1596027-6-5,P-R-1477961-6-4,P-R-1419766-4-5,P-R-1288838-14-15,P-R-1288735-14-16,P-R-1281568-2-3,P-R-1219506-4-4,P-R-1173809-4-5,P-R-1166454-14-13,P-R-1157451-4-4,P-R-1115965-4-4,P-R-1035921-4-4,P-R-59426-1-3,P-R-46913-18-8,P-R-1590852-4-5,P-R-1801693-14-3,P-R-1794914-14-4,P-R-1790911-12-2,P-R-1261613-14-16,P-R-19262-1-12,P-R-1821979-8-2,P-R-1798096-12-14,P-R-1644088-8-6,P-R-1641840-13-17,P-R-1626938-13-3,P-R-1622421-11-11,P-R-1615766-14-36,P-R-1613073-13-17,P-R-1607662-14-15,P-R-1581663-12-15,P-R-1581108-14-16,P-R-1574269-10-10,P-R-1547687-10-13,P-R-1538609-13-18,P-R-1477815-14-15,P-R-1474733-14-22,P-R-1456100-7-14,P-R-1462306-14-12,P-R-1454594-4-7,P-R-1430527-14-16,P-R-1291482-8-12,P-R-1254109-13-14,P-R-1712777-10-11,P-R-1649873-13-11,P-R-1641587-1-6,P-R-1583865-1-6,P-R-1563945-1-8,P-R-1128630-1-7,P-R-1098412-1-5,P-R-1091267-1-59,P-R-81720-1-2,P-R-58406-1-5,P-D-50697-2-4,P-D-29719-1-1,P-D-29718-1-1,P-D-29593-1-6" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\ApplicationFlags = "1" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe OfficeClickToRun.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\officeclicktorun.exe OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.8 = 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 OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--rs=en-US&build=16.0.20326&telemetryRegion=GLOBAL&crev=3\0\Properties = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|19" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.20 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--rs=en-US&build=16.0.20326&telemetryRegion=GLOBAL&crev=3\0\Url = "https://officeclient.microsoft.com/config16/?rs=en-US&build=16.0.20326&telemetryRegion=GLOBAL&crev=3" OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.2 = 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 OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|20" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\Expires = "int64_t|1788847105" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentEcs\officeclicktorun\Overrides OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\ApplicationUpgradeCandidate\officeclicktorun OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.3 = 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 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.16 = 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 OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\0.21 = 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 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs OfficeClickToRun.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--rs=en-US&build=16.0.20326&telemetryRegion=GLOBAL&crev=3\0\EndDate = 50c02fa4bb3fdd01 OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\Experiment\WindowsFlightsInfo OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\FirstSessionUpgradeCandidate OfficeClickToRun.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|9" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|10" OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\FlightCacheAudience = "Production" OfficeClickToRun.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\FirstSessionUpgradeCandidate\officeclicktorun OfficeClickToRun.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\officeclicktorun\ConfigContextData\ChunkCount = "uint64_t|15" OfficeClickToRun.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ Synaptics.exe - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5664 EXCEL.EXE - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeBackupPrivilege 4880 OfficeClickToRun.exe Token: SeRestorePrivilege 4880 OfficeClickToRun.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 5768 OfficeC2RClient.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 2836 OfficeClickToRun.exe - Suspicious use of SetWindowsHookEx 12 IoCs
pid Process 4624 ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 5664 EXCEL.EXE 5664 EXCEL.EXE 5664 EXCEL.EXE 5664 EXCEL.EXE 5664 EXCEL.EXE 5664 EXCEL.EXE 4512 OfficeClickToRun.exe 4880 OfficeClickToRun.exe 2836 OfficeClickToRun.exe 5768 OfficeC2RClient.exe 5768 OfficeC2RClient.exe - Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 4148 wrote to memory of 696 4148 2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 89 PID 696 wrote to memory of 4624 696 ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 90 PID 4148 wrote to memory of 3992 4148 2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 91 PID 4624 wrote to memory of 4512 4624 ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 100 PID 4624 wrote to memory of 2836 4624 ._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe 102
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4148 -
C:\Users\Admin\AppData\Local\Temp\._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe"C:\Users\Admin\AppData\Local\Temp\._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:696 -
C:\Users\Admin\AppData\Local\Temp\._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe RELAUNCHED3⤵
- Executes dropped EXE
- Checks system information in the registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4624 -
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=zh-tw productstoadd=O365ProPlusRetail.16_zh-tw_x-none cdnbaseurl=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl=http://officecdn.microsoft.com/sg/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version=16.0.20326.20132 mediatype=CDN sourcetype=CDN O365ProPlusRetail.excludedapps=groove updatesenabled=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown uninstallcentennial=True scenario=CLIENTUPDATE4⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
PID:4512
-
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exeOfficeClickToRun.exe platform=x64 culture=zh-tw productstoadd=O365ProPlusRetail.16_zh-tw_x-none cdnbaseurl.16=http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 baseurl.16=http://officecdn.microsoft.com/sg/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 version.16=16.0.20326.20132 mediatype.16=CDN sourcetype.16=CDN O365ProPlusRetail.excludedapps.16=groove updatesenabled.16=False bitnessmigration=False deliverymechanism=492350f6-3a01-4f97-b9c0-c7c6ddf67d60 flt.useoutlookshareaddon=unknown flt.useofficehelperaddon=unknown uninstallcentennial=True4⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2836
-
-
-
-
C:\ProgramData\Synaptics\Synaptics.exe"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3992
-
-
C:\ProgramData\Synaptics\Synaptics.exeC:\ProgramData\Synaptics\Synaptics.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5148
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5664
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Drops file in System32 directory
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4880
-
C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /progressandlaunch AppTargets="root\office16\excel.exe|root\office16\lync.exe|root\office16\msaccess.exe|root\office16\mspub.exe|root\office16\onenote.exe|root\office16\outlook.exe|root\office16\powerpnt.exe|root\office16\winword.exe" ManualUpgrade=False ScenarioToTrack="Scenario:{477E0208-58BD-4F33-978A-09BCC9AA9EB1}@INSTALL"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:5768
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVMANIFEST.dll
- Size 855KB
- SHA256 6b67f4aab5a188c275459ee77681fcba1b7f99f40f30b5ce7592d0fbb0104207
- MD5 f408b994410f4e555cc3534d8a464f8a
- SHA1 737d51c650d18069adc35ab8dde45744c49b18a8
- SHA512 b3608753f18eb72ce0d39e03ddfba28c9db9dcb59ed4cd4789b55d37fb328a7313efb3dff0c345b8417b0a5ef87da80a91a43e00a128dec7ad546bc9a9a14356
- SSDEEP 6144:k043OpkBi/4wr2CANtxpKMnWYlYmk6BdVkLPhrQMBDWJdkzjoWGNU6ITLJidEexA:k043O6YmBLg5GNUbTdiaXl
- TLSH T1D915B603BAED0610F6B79FB8D9778460AB7B7C510934E30D0299954E4FA3F4198ABF61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\APPVPOLICY.dll
- Size 936KB
- SHA256 94ced6c2041f65f50515130f9cac987258d092fb5c379276353b66822ae39977
- MD5 6c5b543a7c3c27de1b30e710105b5dcf
- SHA1 91f8c4d9a1a641cd752a30833f9408018b248263
- SHA512 befcfe24d80b84b78638b11f71f5209d24e60a66a55d397f1eddc39219c9442572c6303faa0e0f4ba61d0aa17918d948c6a86a8c43317bbf5dacf5fd3636b85f
- SSDEEP 24576:suvHZVKgySj3GUuzZ8/BYSOHePkFp2kSvO42:suvHZ4gBGUuzZ8/BYSOHePkFp2kSvOf
- TLSH T15415A403BAEE0614F2B65EB9D97384609B777C414934E34D029C694D8FA3F40D9A7FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
- Size 128KB
- SHA256 180c04ad0ef7a47b711dbe785469becc5361c7069187f74cca09601f44c38600
- MD5 7a94ae5a03540bcb4eefa1f8ed4c91b6
- SHA1 6e3dfbc4fa5c64a6b59f8533dc26c892ad30bf51
- SHA512 36a9aad871647ad7452850a39bee1c06e8776b2c0d0045c0f93e2cec8536be37616c7942c6a98b857bd21f82974f6105157f5e7c5642ff9f38d280f895bb0365
- SSDEEP 3072:MS9p1pZp/pLpqi8uxW3CVt84drBmEQ0dXeiXljXr:MS9p1pZp/pLpqi8V3CVHW0dOub
- TLSH T1DED339A5F72451EBD1ABE27481AB9DB3FB72B8964551A30F0762C1061FA3340BF1EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvSubsystemController.dll
- Size 895KB
- SHA256 304d55eed46ac01f5fff53339705d3347904e06041f2f4aa18e68da463e21d7d
- MD5 aeae9f02d3b608c7f2da33faeb8d77fe
- SHA1 848441a67592d4288234765a0c90752edd683f88
- SHA512 50ec05377d2902ea06b940283542291c360c1f54427729a7eabb2006ab2765f2a49df73a4588ee62bcb1db47a0a1bffe0ab65e8d505222c1b5fc4c7d16ca39da
- SSDEEP 12288:9CF1+/8y5tYZt/MuJrPyNttLXN0GNUbTAFk9685oPnpSgUr5pH:AFM8g20uJrPyNttLdJhIgUrj
- TLSH T1AC155C1AEBA8526DE57BD7F5876B8932EBF3B4414230970783A0C15A3F577A01A2DF10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVIsvVirtualization.dll
- Size 460KB
- SHA256 a36ec8dc280fab306185d9bb254115bb9338a91356f78e23d272ba0addfb2e3e
- MD5 6e20b94b28e564dc7034f3b938593971
- SHA1 9387eb24798ddacc91d6afeff5e00e03e3d8abec
- SHA512 23b046b72a6dd21a6f95f4e5fa976ec91fb211ab6e4c8c49e2ca5a53596b706941de5f35027229d7adf3b5ff1f25e230969325b5624e8c34d5405b8fc4c5d106
- SSDEEP 6144:uW5uQi3GRgVp9FEIgtrU1ZfMvwOGWGNU6ITLB61wYLEWNgChl7lkj6m:uWkrTVDiI11vO/GNUbTSPg47Y
- TLSH T18FA45A66EE649425D2BBDAB48777CA32EB727C5142609307F3A4E1662F33FD02219F14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVOrchestration.dll
- Size 736KB
- SHA256 8db4eb6556ae63c8069dcc5c7117c637aaedd07af29f104b52e164724fafa6d3
- MD5 396b956a77ffbe44ee6fd19ae7f7dcc5
- SHA1 ea2a3c3822bea23f0cfa22ec745fcbded5898628
- SHA512 37d82303d078dc4c00432b36f810dfa338c2cbab19d62d39def3b7d9f1dcdd7b8f5badbc85423529fcfa6312d0bb091cd5d6b4cca7643335ae4a66939996f79c
- SSDEEP 6144:CP3DH8DL9UxfHtIdPpQkl3oKPbY3b7cPfYJNdyUYoUlm0uw3ZOGveiHzGjRrg67a:+0Uu+Z4HqgefKGNUbT+9kqt6
- TLSH T1A6F44B11FAA85324E5BBE7F9D6778632FB72B8814230934B43E0D07A2E23B54196DF15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\IntegratedOffice.exe
- Size 4.5MB
- SHA256 a7042fa0c4b90a03b2e7f8b1335f0474582c2937d73b5fbc0794272e9aed72b1
- MD5 63c495972b27e9ffac3675d5b692cb87
- SHA1 7c28a62857977fb170992b41ed73ad2b83c9998e
- SHA512 1ede429467673a477c71aacea5eff44fdbb0af87f1e09975a32586abe3ca602e3a131a2fd94daec336cfd98bcc6b7999a8c0b4922a8be5504df7b9d3b8da5abd
- SSDEEP 49152:bcu/Ae5UMpJs2DtMIvAt2/EIkd+fphSdSW7Uon+npgcp2OORNsV4AwoFahHfhDj1:jZbf14t6w4In+OB5fHeNOriGNr/r
- TLSH T138267D56B7F801EDE0B7D2B8CA6B9533EBB2B8164231974F0760C55B1F67A201E2E711
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSIX.dll
- Size 648KB
- SHA256 2fbfe0dae7727fbbfd2bfb48491e2343743d15c9215fc5cf79d21f89d324764b
- MD5 1d23366da10601cf7507a07f26076d47
- SHA1 e6ba18d48e88c74a3ec095aef82936d546563c7a
- SHA512 21d2cb24fc8c872b5750d98d64220e647fefce9c866f898bc1c1faf54034769b8c7632c3ccf96f68bb42597c5730d9d6565b0157631425dc15998682baa3acad
- SSDEEP 6144:Gl9xJJCzVqG/RiI90lZG+hzFheKEOw4wU4heB6BjlkxGTNMzZfrKy59+xOu5:G78wlZG+leDhfU4heBmer5sl
- TLSH T181E49E66EABC0165D1BAD2BCC9A7841BF77674410332D7DB47A0968A1F1B7E01B3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\MSVCP140_ATOMIC_WAIT.dll
- Size 57KB
- SHA256 59ebd2fbf856019922dd6bfc29160a2a063bb1cf771275d82117a28f8c87d3c1
- MD5 de86f648120e28b637eb4bf257861523
- SHA1 49107ad7bb09ff2a9daad2739d42c396c66e01b9
- SHA512 2096a9b2915fe01383da276b5cf1ee9a783aa86af807fcf9b1fa31fcaee76ee9c2d840c0c677c9fefd527614852e3c6e5252cd39f67bc5ee108a4677a9895817
- SSDEEP 1536:jOR+B7hnQl4wjAQLRz13oeBz8cKffSvQacz:RhQl4wjA6Rp3hQcKffSvQf
- TLSH T127438D85973C5082F99B4A30C2A4EA57BD79B3D70B509ADB1262F5880F937C1EB3471D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\VCRUNTIME140.dll
- Size 130KB
- SHA256 f1da7752de0b7878cfaed4358bbcca261789160077d701c72013031f7cf1b1cf
- MD5 64c30b0011e148d3cca3c18564ee3683
- SHA1 e599cee10f98c48488a4fd981de4c1061e3f3fdf
- SHA512 d019de14e9c8d1dbbe4c678868d859102eff145887694f185435b4596e727b3dc0b28cd49a0f902d2517ebd83cfd84479b512af2f36d9f7231e33ce3c19fa503
- SSDEEP 3072:DyA+3EOfmpcGSOXecbeQ6NjTotCRffSv:DZo5mpcGTXecbeQK+t
- TLSH T130D38B4272B802FBD16AD1708292DE27FB7AB24687609BDF03EA86610F537D06D3C345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\Microsoft Shared\ClickToRun\repoman.dll
- Size 2.3MB
- SHA256 49c952b24ea034bdd92ed477ca481cf989fb7317046923f42e885a03edec25af
- MD5 062a32f1a590b65f7ef6ae86273eddcb
- SHA1 f12f06fbdeb849b680e76b8f6039b673e6bb3f98
- SHA512 0542450706ae8b1a85e09f5de7de339984ada2767c7e75ddba6151b2d3f129d09b6957f5c2d9e5bde38bf87c404fc2ba51f07d18674304fcff6eb1f81ba9a67f
- SSDEEP 49152:hyt4FOMQb95RVIOPp3MVq/IlTb7mBcnk8:26crF3MWBcn/
- TLSH T1D1B57C2BF25C00D8E032D1B9C58B65A7F7B6305BD37162CB52D0DA0D1F57BA262BAB14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVCatalog.dll
- Size 505KB
- SHA256 2da34fb6d5a67284036e4c566a01dd4fda7302982a91ca32ee990f97e4551d17
- MD5 31a5aad3607c5bff296da16edc1c913e
- SHA1 55cdae7f98a12f4a8aa78a282d15cfc727b8fa81
- SHA512 bd1e1cde93f4065dad22ec264551adfcb946c8e82fc11e2b32b423c2cfee5546f8595f2725614646e9b114abb74bc1f4cb61625621816e99dc29cbb76aff41ca
- SSDEEP 6144:Qtoqu9Po8oWpOTMEtNv+LMWGNU6ITL/k2WPKCGfGHuANjlJju0:Wh2OWkTvtILxGNUbTsPNG4djf7
- TLSH T1F4B44A66EA689625D2BBDAF85B37C532EB767C514230D30AE3A0D1562E33F90361DF10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dll
- Size 243KB
- SHA256 e391754cdeed05f995c1535a8d8df73a1c940a3076e06630361adef1c26aaea9
- MD5 8181cdaacbbb0717b734e7ce3de5e7ee
- SHA1 12d9dc5120c4bff32937bfb4c0a653cd63a0a72b
- SHA512 7910b743195ddbc9bfe605518e532ed51bc39eca2c0ce19217a0422120d7a46778860792fc04e9c0e9509f7e3a2ea623fbaf0a0ce4447b3352c10b9ef01a6719
- SSDEEP 3072:Xarj9MPRGxMOt8RAusGfWGNU6ITLqn2junby0cZbBAv6L8wI28N:A9MkfuDWGNU6ITLq20gB8
- TLSH T1BD34E567DEA5E413DBBF6DB857338620EB3278604630930DC2A8D06D4E477D09E69F29
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIntegration.dll
- Size 1.4MB
- SHA256 10f2898a03ed0c29a2777388e19f97a9bbddfa947ad81e6930655c2527d8aaa4
- MD5 7b0b84fce76d2e3f71d97a684a81352e
- SHA1 209fa7f09a23cd7f10bbd588371ffe3d46333a07
- SHA512 1be39c54f63049953ece3c4fed71be4e43c3074bbf8d820b220fc00ee793a982b3dd29cb3d55a86ffb7376c0d48a97a1c570edecf33265281a1f3d680d6292aa
- SSDEEP 24576:tfJqhoJIc1Zsz5YKfChJySCVGgIgxK87U:nlZsz5YKfCcVGgIg0+U
- TLSH T15A654B03FBA44369E5FBE3F48A7B8932E772B8414230935B57A4D54A2E63F50592EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvApi.dll
- Size 357KB
- SHA256 7995ff871232558558a135e8ce4bf6e69d50c7827f0331873281120e1b9458bb
- MD5 5e8ae28a8aeb55b92a10d831d57f73c3
- SHA1 b9f8cf328ea62d5238dcd5c331ef5d0b2c580f1c
- SHA512 ceb164bd1a32b6efc946fe03f23264af72227f4790db2061dbaf992e8e9cf6024bd0aded2f36d5db2261ab605c85bacf0a08b2bfdeddc48f3f2d7a08cf062030
- SSDEEP 6144:wujcRR75ImQgNSWKJWyIg2e6WGNU6ITLMukC7hXna:8RImQREkLGNUbTtha
- TLSH T109743A66EFA4A124EA7BDFFC8B77C622D7B674514230D20EC3A0C0096E1B7D1665DE24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvStreamingManager.dll
- Size 179KB
- SHA256 88c0378500c5c7ad98f57ca302979f61b5b891c2b5abfa96d6acb570866bfc3d
- MD5 709afd8ad6d2490ec7d0130b4eea77d9
- SHA1 14abe1204ea16edc89b5266867075413809a4118
- SHA512 49216bfd51c3cc365f82f6f601e752142f60db996e7bc317bb1767dbb9940de6204257ff92cd6fad59cd1d5f45f755d3276cf1b92c5652c413dd107ae6833eeb
- SSDEEP 3072:TAj4A+B2LH4rFWGNU6ITLZe0F91F9Ndtl1tX+9nLkXFcO8ze7TzW:TAj4t/BWGNU6ITLZe0+9Lk7fzW
- TLSH T18E04B3BBDD34E817C3BE6CB49763CF20AB76E6614281220AD274D16D1D433D46F8AD29
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.zh-tw.dll
- Size 50KB
- SHA256 f9a37d4cd7375015c800d1cbdae1bb1bfd1d43d214e467a276fc59a51ac4f20d
- MD5 10561bfea5fe0d5d86ad7eba2bff2b5f
- SHA1 763815831309f9a92e71b3506efcdfec0d6e347f
- SHA512 5e0347a09ba921ba7e6dd129716c5eb3a1166c7bb96cf2af99a303279336a2e0fb78af16e54ecc4d3ab512fbdff648c6548aa91eaf595f44f85ed1102b32b641
- SSDEEP 768:68o0JqZjLEU+aG0eXvPwGcnIh4whMURb45eo9z85+9z0q:6U0ZjLD+aG0eXvPwPIhvRkQgzZzH
- TLSH T129333BC187AA5E41E8E72E70C1F1CC66FE3B52D22D2180974682BA0C197DFD5993D72B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.dll
- Size 3.0MB
- SHA256 2b4b42a71aee762c4693d849823a42e87cd8bb5255d18ccc88fc2c6912b3bb84
- MD5 a1cdb443446fe2bc06805132268d92bf
- SHA1 d493be92325def7d51e415c6a8785cf5cc699729
- SHA512 d1d621e32af4de3925b9e8f988d7516e5e18225e23489c85ac42c88d1867d14d2cbc93b4eb5c73df0c7e5882fc9fd488efbf103bba456dc424ecfe07675d4694
- SSDEEP 49152:MSR3jtNg7GHvTAQDT/tA4R/NrFjz6aPCerr9rIpl21g3+vqU5bx:MjIhRAy5rb
- TLSH T14CE54A06B7E802A9E4F6E6B88A7B5932EB727C010632D74F0761C65E1F77B104A3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
- Size 12.7MB
- SHA256 d6bd81112061ef62be03dbb5e7e3e673b915107706b8790b861e947d04e9fc51
- MD5 bb019fbc59f615a2b51c40c1f465eb25
- SHA1 a4fa8091d7d442090fdc032455713321ec423cb0
- SHA512 807f6a128690e08cae9a961d88174030735278ec60845e66a809395e6160aecf931d73650175826548ab907ac8868355b91738c6f73f7bbd07102268560c093c
- SSDEEP 98304:ZYxjGDqPDMIpp3Bsp7OPVU3GVxyIxvr2O+ebfU37ASWt12QHWIm6:ex6rFUVU3GVxyIxvr7zYASWt1Tm6
- TLSH T175D65A11A3E60AD6E2B7D974CA374936EF72BE848138A73F0792C50A1F237589D39711
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.20326.20132\i640.cab.cat
- Size 33KB
- SHA256 3bc4009705a54a82a73b14589a5d7cf6f3eb8febcdf84c87bcc0431950b656a9
- MD5 1ed4cb0909fb292bd77421be190b531f
- SHA1 b3462d7c657847b86cc2a471fa78b6b2e5e7313e
- SHA512 ac901fbd09849b3793ba312879a0dd17e10776eee72edf994cc48e31176f5a36bbc573b378986f0f24ae00a5b99a48124791f4b94997d4b6039c664431bac529
- SSDEEP 384:8lRQFh5addzUwvHxCtatwib01lN006oR9z9EOdWI2a:cxdzUWxCtatv0A09z2HI2a
- TLSH T16FE2DD2194000683C14F6938949AFA3ED5FB4FBE90A5623E75B7B7740927281FB6F913
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.20326.20132\i640.hash
- Size 106B
- SHA256 0baf3ff2ab1f6b07593c1967820daea29ff956c584756559af356b2e2fc614ba
- MD5 b97a64c575898441496c7202b16e5b2e
- SHA1 6fdbd7002dde531668937e16c88b7235520d7e29
- SHA512 4ec58e48429d3e36e77241bee9be4e217a33d71b3e530af389f639148b508020e4f2ac5c54602d1d5a80c829e2092df78aa6b8481ef20c744367b1dbdca11086
- TLSH T155B0920E049C87019145C10487C002B7F2148413E4883A6044C36B4913DBE87B0009AF
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll
- Size 550KB
- SHA256 25da5a7de72f9260a3c49d6e45767f9b468165ff3c128dbdcc4025f2d30fb98f
- MD5 177f03bcf4bfd1363c167626907e7250
- SHA1 50a5496309a6423fc2ab26eb7704828d661888cb
- SHA512 e108d1829be7cb36b3b20720cec4c4765b87cdd0ace95953d785bcc4eb74de0c66be4ffb4469f4b70198642a92f91b2fa97f94f8068ff328c9beaa82c45ffa84
- SSDEEP 12288:30MrE03u1mHWV/I3TpbQEKZm+jWodEEV7V:30p1F/IpQEKZm+jWodEENV
- TLSH T1BAC42B23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140_1.dll
- Size 56KB
- SHA256 8ffb2d925be17cc44bdd5e4cccfe49432587cf3200707c67100d70f5aa29b930
- MD5 ec516ab96b87c3a7159666a9141e28af
- SHA1 4ff041cebc99846a7241a5a678663bcbcdde7916
- SHA512 16f6e43367d2dbf78419a560218ed2a5ec3f4336c87324484dc3ea3b014c404632d0a209a9b08a565a7811a322203dc06d7319b618be089eaf3cf18a66c3c614
- SSDEEP 768:ZezSkbhNfI4fWLZyShdPWblVuY2s9zl9zzLbpRmWSUgCf9zH:+YZygPWblQ9kz3z/ffSpoz
- TLSH T1A2436D92937C4082E9DB9970C1DADE57BD3DB7D25B60928B1AE1E54C0E533D0E73832A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\en-us.16\MasterDescriptor.en-us.xml
- Size 40KB
- SHA256 32b9b6386a315a24f1e67fae5e93dc8620052aeff3282985ef354551cf9f148f
- MD5 76b7a55a1373187105602a21c640aa5c
- SHA1 b2216a996751ef90fea1a084eaff84496ba849f4
- SHA512 1987caf80e6f8fc722f27529456b4ba03c738e0e5aa3e29f1347150221f56ad5f4c0758ba69ab78d5884b3aedab8a698561e6b67b8cc3489e6f97443590a73db
- SSDEEP 768:TejZsJ3namZRxJpSfiBwQqJrZyWj/0jxQDe+OFQdLudiROOqn5yptSEelAaeHbIV:L
- TLSH T1D803D34070F988D2F3351A46B7E36CEAEE7911F34E262AB5315EAA172F3B9506137443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\en-us.16\stream.x64.en-us.dat.cat
- Size 79KB
- SHA256 3219c74d622b2cc14217f2c831ea6826f098b21c5be91eb537796a618847e8d3
- MD5 b5f3cf6a0cdc032e0f68d31cb0ed350f
- SHA1 5fb2d63497d348cfdd4b95e78d75656df76ad25b
- SHA512 c3034a4330c278e28fa1edd815e1cfc9cc0952b5ac6c97a68ae7a20925678d61d351618cda4639b083927d63c1c768a203d21bec008a6c7bb396394e7721af2b
- SSDEEP 768:EWbWOTRtpkLK5q5ck7pUpt8hSvS2wZGZfskXXXXXXXZLeL8QZQePuyug8/9z/4:EWbWOTRtEMk7pUpWSvS+QZQKuyu3Fz/4
- TLSH T1F0838721A40006C2C15B693844AAF63ED1F79F7DA055A23E757BBB340973291F76FA13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\sd640.delta02.cab_extractOfficeC2R903AF3E7-88D3-4B4B-8359-E833805A0155\MasterDescriptor.x-none.xml
- Size 35KB
- SHA256 b99c32d9a8f43f8f122dec613ca89bfa6697e88a7ef06c43818ab09d909c9b8b
- MD5 3f74a803635d8f8f14867d9335493aa9
- SHA1 cf109eaad7814533ae2b40524c7c2251abf2ce46
- SHA512 d3bbe42c79333e30f3c92cc9492d4cd25afa149f7373dae1ff21ef6b0cc2c62513ca2e29819c8d0b96d821829232d7f3dd0a3aea693ce8ae775746316ab1a002
- SSDEEP 768:nTsJ3namZRxJpSfiBwQqJrZyWj/0jxQDe+OFQdLudiROOqn5yptSEelAaeHbIBsU:a
- TLSH T130F26C4070FD88D6F3391641B6E32CEAEEB841F34E262A76755EAA172F379606137443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\sd640.delta03.cab_extractOfficeC2R3CD0B9AF-D2D3-4BD8-8F18-E43DB8F66D83\stream.x64.x-none.delta03.hash
- Size 128B
- SHA256 382fe6efa26442b792e33a552d981e28567f19cedd4d56bb81feba7604bec3cf
- MD5 7f6df921c5751b99af5a13fade9b887f
- SHA1 ac5b4e0529b744f757f6b70e1041f9359e24c1a0
- SHA512 dd9d4a65df31d411506bddd36460977f6aef11efd4518756cf790183f4af2af2a670772ce353600ed3d499eaab987a8631adc725a223c671e00ae6372bd82f8f
- TLSH T161B092394CBD067B0A34C0A1CFEA88B2F004A02B30071A72A8820A50434B90329E323C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\sd641028.delta02.cab_extractOfficeC2R959630AC-EEE6-4D30-9604-7A4A496E4788\MasterDescriptor.zh-tw.xml
- Size 35KB
- SHA256 fec365258107cd930a3de3ddc38b3e7771a2cfa70069cb72e3f5801abfac66ad
- MD5 36927d6e11b43b510498352092801e04
- SHA1 1d6fdc2696bdfd30e6cc04cea57b8e1d5f621564
- SHA512 ad5e78e83e7d579f15fca29056890368c560fb6f8f9d6ebc2e069690c121a13d612d657146a82f060f08e509479712f12f3a20f9b08bdc567df521c98d67179e
- SSDEEP 768:yTsJ3namZRxJpSfiBwQ1bnfygsaRwxQFG+O6JdLudiROOqn5y7tSEelAaeHbITUL:B
- TLSH T198F26D4070FD88D6F3391551B6D32CEAEEB840F74F262A66715EAA172F3B9A06137443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\sd641028.delta03.cab_extractOfficeC2R6576F7DD-EAD5-4CD5-846B-93E8E52BF100\stream.x64.zh-tw.delta03.hash
- Size 128B
- SHA256 02740177c07dfb826e6acf90958294e0df637c5e0e40148ba9f1619e67391e8f
- MD5 703e85ac7f7130ad921f9f2946297179
- SHA1 b292cafa7342e203d39593254af9e6fbd3f8e7d6
- SHA512 caf7c5e5995a989af64f454224f1492376d5c9dd2ad8c8b75aff555bed7830140b17998e518171111f3cd46aca131e8e3ac35d629aaaba800e980e60a204dde9
- TLSH T11AB0923D0EBC203B0025E9D58BC06017F004D1B17835242981C183801346C0336C363E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\sd641033.delta03.cab_extractOfficeC2RA367CDC2-059E-45E1-AC93-4515F75E69F9\stream.x64.en-us.delta03.hash
- Size 128B
- SHA256 4c11370da1c65bbb6c6dbb4d17e082f98e267145a05038f6be57f3aec083fc3e
- MD5 2913c2bbf63dfbfc27a7a1854a366301
- SHA1 becc128c0a4c4c82c316ecdc9013727cfd02daa0
- SHA512 ff3f254089bbfb5c30aa939643145740ffccf7a93b3df2d7f979539256e5ab159c2dad150ca3d7691d2dbda6c0e9bc2b7e54d827268cbb8423e8e446b780ffad
- TLSH T1A1B0923975BC50220031D5958BC08873FA04A4923242103052C343A54352E0322C303C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\x-none.16\MasterDescriptor.x-none.xml
- Size 40KB
- SHA256 6d4d91a64a4549219484c22c306f1ad866b5d820d386f001be4da131bdbbe070
- MD5 c550945f6ff02f5d6c86b13fafa72b2b
- SHA1 05645f72f13e219251cc67d370abbdf5507c1879
- SHA512 65c95d74de946dddf86e5d2dc98e64b7a218b20a944f694da837ee96b21940693deab99f13b7b8e6a765ffbc36717f16053587476c1dba38ca19683ee8b501b7
- SSDEEP 768:3vGvFsJ3namZRxJpSfiBwQqJrZyWj/0jxQDe+OFQdLudiROOqn5yptSEelAaeHbO:/
- TLSH T10A03D34074F988E2F3351946B7E36CEAEE7810F34E662AB5315EAA172F3B9506137443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\x-none.16\stream.x64.x-none.dat.cat
- Size 1.0MB
- SHA256 e20602317d43b0a2b9b61f928bd962bd830cba73aa3cb249a2ad3862639abd43
- MD5 41c3aaa072fa495222746365859c7c1f
- SHA1 8c67f19ef82cc1381539429f2f88f5e6b1b86218
- SHA512 afecf753eb10f72d0f051c078c9e15236fb819f6f62cb00c66cd1124e675bbbafe4bac60b9f6041b7b826e3c3284e4648ebbc9a7236c1a094d2a0512366ff1fc
- SSDEEP 12288:PGGGGGlCCCCCmxiuRuMOyG9G9G+PP9HKHKHKHKHKHwx:PGGGGGfOkPP9HKHKHKHKHKH2
- TLSH T1C6353321640002C3C05F693898AAB63ED1F79FBEA055923E757B7B744963290FB6F913
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\zh-tw.16\MasterDescriptor.zh-tw.xml
- Size 39KB
- SHA256 8b49e85208a6f661acfc6334e690ecf524b2844b1054eeaa6c8d08d3f4c1dde9
- MD5 af80b130ef24f02508afd68580a4108c
- SHA1 1241786b48652698e5a6793d40f73b24e0a1e7e6
- SHA512 a54b933ec6955a8ca3f7a1bca4c0df7290367c6e74aa28bb611ca119822f71a297960f12a5e32c80242379de2a278ec12702952ac91f8aab9099fc0c7822f1ab
- SSDEEP 768:K1+hsJ3namZRxJpSfiBwQ1bnfygsaRwxQFG+O6JdLudiROOqn5y7tSEelAaeHbIs:qB
- TLSH T12E03C24070FD88D6F3351956B7E32CEAEE7810F74E262AA6315EAA172F379606137443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\C31855F8-60CF-4F97-BF4C-09779B2D329E\zh-tw.16\stream.x64.zh-tw.dat.cat
- Size 124KB
- SHA256 8a69aac033b729b70ca48843c30f4e729abb16f98082b09d1d20d9cfb10d7512
- MD5 5492d85917c7e00fd6e4541651566981
- SHA1 7495b7e1e73015443820cc2761d1337a6c8adec1
- SHA512 2ae12d0e32e12dc49c8fa762cbe13ef006b103792cc67cee4138cd45e8c8167ee0e278dbbd1360122ce272c646749159c5ff73512cd727587e5b1c96da84ec92
- SSDEEP 1536:t6gZUZUZor7duwTwpWcpc5cECpZZLALPLo5op8Ilziy:67dMZ6v8IlWy
- TLSH T1EDC3672190000683C14F697894AAE63ED1FB5FBE9055A23E797B77744837291FB1FA13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Synaptics\Synaptics.exe
- Size 753KB
- SHA256 ac22e907733a6ba4af76e2fd936d7d02a45770a9b5e0373be2e50eda0c3f487e
- MD5 611db4da1d931eb2817b23e410a84691
- SHA1 413d221523d3f5bcc9dee74711776cb04c142bf2
- SHA512 c5f84642317afd0445c86e167d782115bc3d5493c0848563c981a53ef347b2ad9bf55f05901880364b0e44f28cb7d7e3ed9380580fd3d7b661a3d60bc10ff207
- SSDEEP 12288:aMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9IUr:ansJ39LyjbJkQFMhmC+6GD9v
- TLSH T1BEF47D32F2D18537D1721A3C9C6BA7A4582ABF512E38794A3BF41E4C4F3E68139652D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B54B00CE250A47F2A29BFE4A70858A02
- Size 1KB
- SHA256 c102d88cd5b72f2a10c0758ec8defd19b58762f4237ea7b6ab43b172e54b1553
- MD5 b56cd9ce0f8b622c4b5033fb933f0f3c
- SHA1 177c6483a31a3b5472dc4a5883a89f85dfd8f786
- SHA512 2f602d35c57f76b304a1726b5652664c61691ae083bbbbf3571575257cf2bf17879ac5e180872dd23e701ffe721d637e0e7792c2b078b2b54ae0111b542dac82
- TLSH T14C11C02212296501FE623D70DECDFEC6EC2571A32AC0CCEF8891594C141DFA16BD5686
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
- Size 471B
- SHA256 eaf4fac3ac8234fdc96869afa6feb923ccb89d8dc6fe4ea5b6b210123472f077
- MD5 4f3bc63fa0c50ee782ee86595e591242
- SHA1 138d477f1de8a3524a17ad9884307e7ea047e411
- SHA512 488630b4027b76b1aba8ae0606dff8c48eecc095f2627d1e0dafdd6a07211188ad95600305e2d6d92e330bffa4fa73b393b1fbeccba05a946a5f9a354d17e320
- TLSH T1D0F09E52406ED054AD9B48DC62D44A793830516A4898184B607E98B09D992A5F64E035
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B54B00CE250A47F2A29BFE4A70858A02
- Size 266B
- SHA256 c9d092cd6cda52760d8911f57b3ee8162faafdb39ae7bcf1c0626bae6b436bc2
- MD5 510be29f6a0b6b1215671dc11823d149
- SHA1 e79c15a681525e95368325489f8206afff146fa8
- SHA512 f0555276ad85d9f66f64f7cfd4f1bff8a6ad706698fcaf9873ad4c345dd9ab34604796bfd4d114f9af4ea9980baa55a87b459706a31c11497fd189a496e48414
- TLSH T154D0C958A3B58322F4528B3E1DD00927DA3A0D159901D3121BF08309753CDA67C31793
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_EAF5D55D93603A879FA973006301F24F
- Size 412B
- SHA256 b47c7c05c498f52ddf06483764b8a2ffcf96d5237a362ad42448260107c284c6
- MD5 cf2c84e9eec7c3c99b3acef592598a46
- SHA1 f3923be8676c67da266d48ac710c753746de66cf
- SHA512 a366fb127cd2965d5b7a04ad37b4806db54843cabe4b7d7ac98bf79e64fba5fcbe9bd2c87c94a3c6246a5bd976e8ddb7397a7ca9fa32b496d3fbc5132f7ed111
- TLSH T131E0C01416F6022DF4F1C1BA07C574259556F0210414E2F61BD01705B603700EC51E35
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\F1A3B934-227A-469B-987B-322AD1FD2558
- Size 193KB
- SHA256 c33905612f3feb771948dc333078b669fdfd2c0c24edd0e44ecb68d970f3612d
- MD5 1595bfc870882ea63fcfd27abda698fd
- SHA1 781b743e29b8bedbed4a1fe9070ed570f231a707
- SHA512 63f9bb048f6fea2a2b05accf3bd9b2b5c4cb4e3764dca17c0f57d8f29938794b2dfb3de0e2f1f44ddf4140135d7553c95827d7d83301e60b5eb274ba132e2e3c
- SSDEEP 1536:PrVe3b3yFKaabMxsghEf8e7HWiDyj/r/JL9cAZl1p5ihs7VXXBEKD0aO7qamZdGM:Nze7HWiDyj/r/9X257cV
- TLSH T1BD1412A6B2C75D628B33049D5B57A094FE6E12A708D5202873FAF3178FF2E1CB547291
- MD5 SHA1 SHA512 SSDEEP TLSH
._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe
- Path C:\Users\Admin\AppData\Local\Temp\._cache_2026-09-05_7182f365fcdca371a38f232e6992e319_amadey_coinminer_dark-comet_darkgate_elex_gcleaner_glass.exe
- Size 7.1MB
- SHA256 461bef64f9db7e057cf94ab34a2f4ea0b4f3d7d7e2d1f8c36c719aaed2155fb9
- MD5 3fd481f0d5f9666fd5808a51d4842860
- SHA1 5e3e64569764f16654a1184d25efaea360c26181
- SHA512 62b1aa57fe9a93235f00af84274b0aabe68b47e9dc82d6b450b694f2c0d98cd87946496f4c62bc6aa7f59cb93041677659cebdb8c3e252c1527bc2e848ba7cef
- SSDEEP 196608:hA9vgRpFLzYedNj2srQ2gpDGImMeJozAd9t7f/oBe/jrGdKgP7vVkP1:q9cDj2srQSImMO97fgz/e1
- TLSH T196767D61A69440E6E1B2C2727E39F75B4D6AB931CA369C4F93881B0D0974DC3F625B33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\B6095E00
- Size 22KB
- SHA256 680abbaca4dd037e6e418835ced89c21ed8ee2ab2bacc7d7275276d1447d45ae
- MD5 140f22ec979664d6bf2d1237ebd32936
- SHA1 b8f1551e388fcaa66cbc82a64540a916825bb8c9
- SHA512 f434cb23ea10fafbc6a29e31a6e066db376ead4371268d48d67d12a12285050e3a954635f4efa4531ddab29e126c2d311e70806097fed8c6a5e5da61c181a062
- SSDEEP 384:MSlQHvouKUDjp+o5bryjDWaIX0YeGdfHRxvcbIVlLse6o/THY8sWwLnn:MSKPoCv4o5brwcBfHcve6OsW0nn
- TLSH T169A2C01DED8ADD09EDB1D87F920C0169E30805ADA055A787B401BA0CAFA6AC7530B7DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\OFFICE~1\i640.cab
- Size 31.2MB
- SHA256 a5e3e0fda4fbeb89496bba1578d9c220ade610175c6bb797a4e7206841c9ad5d
- MD5 ccdc7348ac89548c66f89144d3499109
- SHA1 5df83d422dc42defdc10030fde9b2d5ed7d09f67
- SHA512 73eecf4dd605bd9489fbe3b7ab2ae46fb80da31b78e06a76e5f43ecc5ed5e5bf6fb71e7d540a567e93447e211804300d7295f6f3bd6b356682cbe65735af50b5
- SSDEEP 786432:0zZuidkf8/9MgFO2e0xFO1WjusU/zoTd9/CueQT+k5p2E4hI6ub+kq+uML:cZrekFoa9qdLid0ueQTZ5p7Dq+Z
- TLSH T1EE77333F139A14FDC7B8EFBD88C0AE6F513B8921B7B01A7FEAD4D31D696A6111584006
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\OfficeC2R94621711-DA38-425C-8D16-EE650054D8A4\VersionDescriptor.xml
- Size 25KB
- SHA256 6d5f6fcf20894482e914aaf1e0d2c0ca4463ed543fa539a9fbf56b53d535798c
- MD5 98a6ce6d153d2c66d742983a77b4e129
- SHA1 c2decb70b40c065da9049a7511f57f5b048bf5b0
- SHA512 3036668cb0641e5c378a0f0a4a7d2de832ed6a65c8725d9743a7f1229dc3387008a79d89d8f4da1530035b3f49329ca391375df9bbe4c92f9bf93b80d76ed63e
- SSDEEP 96:kBjDt5O8qwEB+yY/VqJFWRGB/Aylkmo9g9s5UmiVSItzt3XNIR4ja9a9DMeJVnOX:0/rZ73
- TLSH T1AFC2456BB8D03D1D413477A7E96336E2EF62826396050458F10D738B3FB285DB3AB619
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Re2I6bq3.xlsm
- Size 17KB
- SHA256 8e574b4ae6502230c0829e2319a6c146aebd51b7008bf5bbfb731424d7952c15
- MD5 e566fc53051035e1e6fd0ed1823de0f9
- SHA1 00bc96c48b98676ecd67e81a6f1d7754e4156044
- SHA512 a12f56ff30ea35381c2b8f8af2446cf1daa21ee872e98cad4b863db060acd4c33c5760918c277dadb7a490cb4ca2f925d59c70dc5171e16601a11bc4a6542b04
- SSDEEP 384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
- TLSH T15482B009E788FC53D03B503E442E18B5270D7186724BDA0C384A365A66DA79F47AF6CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\d640.cab
- Size 10KB
- SHA256 fc7f0628ba0c84328d9d128fff288cbb3ba5ff50a4a2b72e6a9f7b3b2525c13a
- MD5 44aa98aa3446448b4719a17e3b8e77a4
- SHA1 b5bc6e0180cafdefe65d67126e1a896f98fda1b2
- SHA512 9c8616581fcfe573d4a7a486ed651e53e7d276d73ef86e5237a402c575af87079a2a2fb819aae6517cc6dbdb3b63cc541e7aeb046d76a75dda868de36608ef53
- SSDEEP 192:qEFtica8LxyQxh4FYqwN3YnUBZCR3JKX01k9z3Ad+f:qEDicaGAEh4FYVN3QaR9zs+f
- TLSH T1AC324BD64E3C9083EEEBACB092A8EE933C3C83D70D40A56765A0F55019D37C4DB6502C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\d641028.cab
- Size 10KB
- SHA256 d86474daa42ec1e6d2b3be3483290ef43e4cdd40be392dc5adc33d2c11bec2df
- MD5 649f1bf0d701ff4002a11dccf38594d2
- SHA1 032fcfadc712dca33bfeb40d107d2e98d5dc358f
- SHA512 e1aaebd4a9621f5c191974dd85f641b6d1f87dde0ce34e169a60763abd54c03d586b369681b3439eaee6c3a9024f20f120520203a5c479c8e53642e9ed2d4d89
- SSDEEP 192:jGbqca8LxydG1yVBHK2RFCfIs/zp9JHX01k9z3A3QCKO:j5caGAdWynvRFCxFbR9zQQbO
- TLSH T1AF325BD28B389003EA97AC7092E8D9537C3C93D75C80A56226E6F6A41CC77C9E71917E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\d641033.cab
- Size 10KB
- SHA256 ed080410d8cf87fb305e5e21d12e5f9206072c71cc3becc20add5c280c7a076f
- MD5 22db2f2a9965c84c565bec0bacf9812c
- SHA1 9fdd9d13c44494d774a2e853fe1eba6ee080c473
- SHA512 025347ca0e650bb02f949451258b14063c18eab4cd51ec1fcafb7663df7153c6c1705767e685cb06db054432695397d116b08211fdc2193f5fb16543b6a09093
- SSDEEP 192:hR/ca8LxyQxh4FYqwNoGj4u9UGMsc+6UQ/X01k9z3AN/mOIJ:hR/caGAEh4FYVNoGj4AUrj/R9zA9IJ
- TLSH T1A9322BD24F789082EDABBDB062A4E9933D3D83C71940952729A1F9981DC37C5D71A17C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\s640.cab
- Size 1.9MB
- SHA256 b668787ec8c2d4675704d7147eb16c4b1e6ba914f8a89d6079e24e0ef17a3cbc
- MD5 cc4e8d720f8d5a74bc5b2c5fb4b6c68d
- SHA1 6a1211526fb6c120baa0f0805e5127eeda50e55d
- SHA512 07e966bed8bfc1dddaf2a4cbd5444104390cb177562963aa59d6cd7230813d7256f405c916d2249ebef5627132e8d7b84d560416096ef3fd7ac82e4d28fd677f
- SSDEEP 24576:+KZoiHboB+/QkPfrZd0DrLIcOoF/k249dAGjfzDePhj0XvZ3Km2cNCcY7OORZ/CL:V7HL0rcczF49dAGjfzDJfZa5N53sfubS
- TLSH T140953303C62C8985FE447468F248F5CEE435A64974918DAAE63AE5E56C71B2F3343CF2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\s641028.cab
- Size 298KB
- SHA256 666c99cecf8074ed04f5babd9797817e5e18f8d6564cc0127a0b2e0bbefb1c0d
- MD5 923b5f117c9e981991b59efde1ee1ad1
- SHA1 cb1909f930d47cea2d9853cc98a30d3d87f8986d
- SHA512 3def37c9334f8df6b3afecc058737fbeb2f292ed977b5045e6e92406acc2b2ef2abd88fcf4638052ea9250904dc1cd667f161cb968e1c2573c82a4051cda72ad
- SSDEEP 6144:3NXcfBFyVZaijqTWHc/5+mORtFWiO/t+PykiqnjS30bNig6di:39CBFOZLG95+ZgiO/AyijVNiM
- TLSH T153542347657821D7AEAD309B1FB2D9E21B2023C11BE4E505B1F2BA75492371BEF0B198
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\s641033.cab
- Size 353KB
- SHA256 26c3cb5a8309b8040b0b5368760628e479c2709bf82a11d349f61f23aaf09f6f
- MD5 0a827c5f5f76beda53f8c031891e4224
- SHA1 be785e159aa7cc184691c70e743abf7509ea5247
- SHA512 371a6b5a537238af477eaaf40217d397d60e25348cad26ba6198259dbcabf8fbba27a45f9d5bbef541c17768bf8d8db8b6b28accb0b9778411f5f6faffc981c2
- SSDEEP 6144:f0D487ZfrFHDX5ujw9ErIYiquvJNy6s8Z1Jkh+WFQMDoR+jS1jTayCeBF:f0s87ZfZHjomrvn9rJkhnFQMDoXHayL
- TLSH T1FA7423C31E2C2D13E758780A6A34E6D02B7A17B9E8B7228B77D0F8143FE37445965D68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd640.delta00.cab
- Size 1.3MB
- SHA256 f545cd56c37fc565bea179a32e481d9a8c7efe6d25768f4834382b041a51cd91
- MD5 7a8945a890f2fe4e6fa887833428771f
- SHA1 2cecbe1f5340c12cc13c06c61d3de45fdeaf84c5
- SHA512 18ef52fefdf23aad3c1e6c9b7c06332539ad16b515c471e9fc5d484ccb9290eb076f7b1ffeddc387293aa74cd9a81df0ee14a7ac0b2239990f074fb38d3c2295
- SSDEEP 24576:OA0DGvzkj2ti+aSsmq4hEUSuiE7XDrtvew/MDrns7Wt5SvccJQ9:OtGr/tiAsm5yDuiE7X3tWw24uQvtJk
- TLSH T13D55331CBC9C2505F8B5BCB02ADD2118542929C93E98F5CE2B29D70D8CE9FA681357DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd640.delta01.cab
- Size 33KB
- SHA256 ef6512136737fdd8c60e361182ec27157d34a7e59f1da0a846e3bc027f817215
- MD5 c3457feeda72cd28a5d8b9ec1f43be7e
- SHA1 b7e5cacc12f2d6a853271d050f9c22371dc6233c
- SHA512 c95e9fe8e83f765954bb0b0aeee3d7c3b9e1c1d6d66083c331e5f95a5d999a0e0d1b29ca044706aa0d4905cea0975f6d24e4489bf7b66e28531f1bde852730a9
- SSDEEP 768:xL17/s0cs+/7tIZ4n8KHvMz+x5Irquq1g5IMj0dmBBbsvb45c9zSMX+0:zI/7mKN5Irq0e0XBBQvkyzSMu0
- TLSH T141E2C0D289789081EEC76CB412D4DE873CBC97CB2AC1956B7619E9553AC33C49B9012E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd640.delta02.cab
- Size 33KB
- SHA256 9ac65dc1f15b7ea84c383203e216754263f34358c08b832f05d8cfa3a35ca67b
- MD5 43f47e661b621d1f57f578e0548d14f6
- SHA1 1d00eee30c234f812aafdeb6c852d91ea4c5eb21
- SHA512 cd07993769db4a56c47f83f8e2a6e725c9fcce50066cc84c14bc8cf88d4ef2b759415cca2ad42a4b44ff61971f61a343ce5af097d7631db9c112d9086620619b
- SSDEEP 768:6yC8LbS6cf6A76NY1gid9EYrvnogLVbdWyfT9zJW:08vDcf3WaV8Y5hJzA
- TLSH T1CBE2D0D65AB8E503CF8F687002E9D9973C3D67C76DA0061188F1F9981D8BB8EA61D09C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd640.delta03.cab
- Size 33KB
- SHA256 a347f466736c23ce5eddc75f21375c1732545754946e80b70d787ef966ca75ca
- MD5 d481d53d2ebf34beda01120edb1d5efa
- SHA1 1d2111f469b1a5dafe3c2f476241f637b00b15a4
- SHA512 8aad879833a890efe91a6776811a108e09d038205581c57eb665de5df587db84bc121932c4001b9e13ee1657c206197cffc8bb8a1c187fa1050e7c2841b8e8fc
- SSDEEP 768:0OECKhTLWsYHbkgH2Mb4FDOnNibjtb45F9zSMgYf:uhPWdHbWMb4FsibBkpzSMR
- TLSH T1FFE2CF528E7CA042FD8AB87056BCDA533C3C53B70E5144AB7A8AF2902DD77D5DB9112C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641028.delta00.cab
- Size 197KB
- SHA256 d7487e558b73fd4b1ad1965d3bce3e921b318c94ed638d996a61c3be172c7809
- MD5 ae9b2f52e7eb97aac1a94218887bcaf0
- SHA1 d3f462a205046200ab947fae5e21763ce6997ef4
- SHA512 aee256d026c20bf2665626877502ff3feaa04d6d19783afeccc0f154181c1b38a465dc9a70fcc5d444382fba213072c64ba9be852d84d0d52f1ac407b45d99e9
- SSDEEP 6144:bDuAmvr62jAsWFgnWKTZ3i6zNE93JIEV5C:fuABFQZZ3i0yNV5C
- TLSH T1F714121A2DD8F932A45FC5F16398C60BBDB257D00681F8E61D46FAC64622B9C077A1FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641028.delta01.cab
- Size 29KB
- SHA256 31c47d5711ae35c5e7909b2224b7fae1feee43a9809e6c91d67b65754eb7c4e5
- MD5 c49b3c7d738f3d2a70bbfd317a2464fc
- SHA1 2b57e7b774f37af05b75efc2a379c11880f16207
- SHA512 50043b8a6e20fdf4c96a00de98111a8a5801a0609385ba47c13c635adbc6e9bc4426b19927215415b6ebcb9ce67b4f8a8bf0855e922154d9b4023cee19e2da61
- SSDEEP 768:4xbwMVv864GDwrzJ/RanKp81bdWyo9zM1j:4qMVE64PrqKp81hYzqj
- TLSH T1DCD2D0A69A1C2543EA9F6461B2B0E7D33D3D07D718805D6230F5ED5C8223BDB935902F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641028.delta02.cab
- Size 29KB
- SHA256 d978158484bef4c021787d15be77ff9bd7203f3e2187faf25a52ce90cf7c293b
- MD5 6158da06e46d61b9c48e4eb9f83f46d8
- SHA1 21c5d9db75facbb72025daa98619a6393fb209be
- SHA512 b6261563c32c0232ee7d8a0a7e2d3e83c82560f3b4cd5f93decf635623c3ff760c51bf14248343f267dd3c28914af3ecefc9ee8552d76ecc3ae4c3d0f06decdf
- SSDEEP 768:E31BR79djLcziPupY4V2t9qmJq75ZHemXbdWyC0VP9zJI:MxLLczHQq/VZHemXhxzG
- TLSH T187D2BFD68638A443CA576CA07298CB867C7C13DB4D128A8335F7D9942DAB7D9E70806D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641028.delta03.cab
- Size 29KB
- SHA256 bc20c2a89c136b6c671ec2394fbff57801120657d07634ad09d78146cf29288b
- MD5 78f58a96920224aef1426e23d8a349f8
- SHA1 30d5c19d87a95e2d0a14b96d4c094f19c44ec67c
- SHA512 e33076d234a75cf3fde31be94f1c30c303ad1276835ee79f0f7bec4b58ddf1f6f854005aebd9a5997c6decbac9ab6125da45bb0507469102e78dc49a46039a6d
- SSDEEP 384:ZyLr2hA/AjoG9I5pPx92lYOIbyCMoz8OseW7lP6iZH0Pp/I6fsBvzEcaGAEh4FYj:JUGwz28pSUh/I6fsBAb45yq79zd
- TLSH T17ED2C0A1A62C90CAECFAFD30A9A9DF633CFD13CF198809067562E55105977D9E32847C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641033.delta00.cab
- Size 194KB
- SHA256 a3e6069169f96cf71f22d95b4bac38988705a40d9b68fe4e13d752d93902b05d
- MD5 4ed84384e363dc15b3f481c191fdece5
- SHA1 d9c8613698f8e0733ba12cb88063532abd1f9552
- SHA512 5398dd0ea666d1e3b98ba8485d4bdfb5531bccb0037ade459244dd34c69162f2bcfe48b5f3d4e63b3ac54a004cf0884d69784893bc616029ef6894e052260f5b
- SSDEEP 3072:VE1+BVza1lG0BR+4M6oktdzi/m+NWzrFqgztM6dVrbpOWeqCe/TyqV0jWVBdusF:8gVza1l7jtMW5FHZzVOWeferyQ7F
- TLSH T18014125E45A53553DEC29BF8D824E08B7E7F11F20E1889BB0425F616A4D37C08D2BA7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641033.delta01.cab
- Size 29KB
- SHA256 2c62aeeb0d43962ce3339132ba350f9f38b08beba85fa3b7818b6f340f48c86b
- MD5 4fc652ca3f44cb75f217bbc9a3f0c8f6
- SHA1 5ca4f10587b73c055c2e00585a58f74107503b9e
- SHA512 2a5680134876e1363cfd6bb5f470574dd00e896b21076a5d902e86dbf63ff50096b5b8e223f604758f5ec366d4d7a9e506334b872aa0b65ac18314dbfad475ad
- SSDEEP 768:dsxDdy5oWAOMLh2QF6IluL+4PbdWy0omS09z2p:G3C37AjMIluLJPhTtcz2p
- TLSH T1C3D2D0E68BA55083FE892C715794D8A3BC3843C75D5071BEE5A2F2D0249BBD942780FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641033.delta02.cab
- Size 29KB
- SHA256 7d4090e8e29cf598a2cf9655d21dd947fe3a95956fe5f1e76149ea114fb27cd9
- MD5 4801583089b8f79472e531cfb1489dd6
- SHA1 1ec6be49c4288ab6765333500b07df8c29437149
- SHA512 bea77e1df0000cade8ace5960d9783e447d32b1496f05ed60ca40b00f2ad9a54761c022e8bdafc7e1fcfa7dd4a877c2b20248d77c5b6b772402073c70cf877a9
- SSDEEP 768:xrhliFAKRbo5+DZH74o7RGu/2bdWywVDM9zz:RTUK+DZH7Pgu/2hoVDEzz
- TLSH T1E1D2C0E64A598145CD069D74729AEAB23C3D83D75C80C23269D6F9E904DB7CDBB0E23C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\OFFICE~1\sd641033.delta03.cab
- Size 29KB
- SHA256 33e1c0ddd21aad6904a13c88d432e4f42eab73a8705f4c4071829fdaa5aae246
- MD5 3e9395b06ddee32d35793726e77af1d3
- SHA1 88892465e4cd8eb4dd4c907a5d5572f77d94b3ff
- SHA512 ddb01f133a61a86df254de57c6ec8cc264718436293764c76e626816eab34f8b8c5ef94217cbdd8103379056efd1c2b7b6c00ff16323be4862750a03fd635dc6
- SSDEEP 768:a4NP3DjHEpsyQ7X2wdhafYsbdWyHCf9zSxv:ZPHSsy9OsYsh/ozyv
- TLSH T1FBD2E0674BA89812D9C7ADB19784E9233C3D53DF09901D652AF1E4611C873CEEB1907D
- MD5 SHA1 SHA512 SSDEEP TLSH