IOC Report
UploadCustomersTemplate(2).xlsm

loading gif

Files

File Path
Type
Category
Malicious
UploadCustomersTemplate(2).xlsm
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\Desktop\UploadCustomersTemplate(2).xlsm (copy)
Microsoft Excel 2007+
dropped
malicious
C:\Users\user\Desktop\~$UploadCustomersTemplate(2).xlsm
data
dropped
malicious
C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\117C2456.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3215A263.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\41652D69.png
PNG image data, 1 x 1, 4-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4C37A56A.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\577B108.png
PNG image data, 146 x 21, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6A2A7B60.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8239981B.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B18E61CD.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D4EC4AD4.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E55AFC02.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E62E1C5F.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Temp\Excel8.0\MSForms.exd
data
dropped
C:\Users\user\AppData\Local\Temp\~DF969D0CC93ACC3F1F.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\Desktop\4C340000
Microsoft Excel 2007+
dropped
C:\Users\user\Desktop\4C340000:Zone.Identifier
ASCII text, with CRLF line terminators
modified
Chrome Cache Entry: 293
ASCII text, with very long lines (65395)
downloaded
Chrome Cache Entry: 294
ASCII text, with very long lines (34947)
dropped
Chrome Cache Entry: 295
ASCII text, with very long lines (65395)
dropped
Chrome Cache Entry: 296
HTML document, Unicode text, UTF-8 text, with very long lines (995)
dropped
Chrome Cache Entry: 297
PNG image data, 500 x 500, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 298
PNG image data, 700 x 12, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 299
HTML document, ASCII text, with very long lines (45168)
dropped
Chrome Cache Entry: 300
RIFF (little-endian) data, Web/P image
dropped
Chrome Cache Entry: 301
ASCII text, with very long lines (2026)
downloaded
Chrome Cache Entry: 302
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 303
ASCII text, with very long lines (4968), with no line terminators
downloaded
Chrome Cache Entry: 304
ASCII text, with very long lines (5434), with no line terminators
downloaded
Chrome Cache Entry: 305
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 306
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 307
ASCII text, with very long lines (4968), with no line terminators
dropped
Chrome Cache Entry: 308
HTML document, ASCII text, with very long lines (13942)
dropped
Chrome Cache Entry: 309
ASCII text, with very long lines (4487)
dropped
Chrome Cache Entry: 310
JSON data
dropped
Chrome Cache Entry: 311
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 312
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 313
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 314
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 315
ASCII text, with very long lines (65202)
dropped
Chrome Cache Entry: 316
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 317
HTML document, ASCII text, with very long lines (1205)
downloaded
Chrome Cache Entry: 318
ASCII text, with very long lines (1048)
downloaded
Chrome Cache Entry: 319
ASCII text, with very long lines (34947)
dropped
Chrome Cache Entry: 320
HTML document, ASCII text, with very long lines (908), with no line terminators
downloaded
Chrome Cache Entry: 321
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 322
ASCII text, with very long lines (684), with no line terminators
downloaded
Chrome Cache Entry: 323
HTML document, ASCII text, with very long lines (3157)
downloaded
Chrome Cache Entry: 324
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3
dropped
Chrome Cache Entry: 325
ASCII text, with very long lines (5552)
downloaded
Chrome Cache Entry: 326
C source, ASCII text, with very long lines (65098)
downloaded
Chrome Cache Entry: 327
Unicode text, UTF-8 text, with very long lines (562)
downloaded
Chrome Cache Entry: 328
ASCII text, with very long lines (995)
downloaded
Chrome Cache Entry: 329
JSON data
downloaded
Chrome Cache Entry: 330
HTML document, ASCII text, with very long lines (2178), with no line terminators
downloaded
Chrome Cache Entry: 331
HTML document, ASCII text, with very long lines (908), with no line terminators
downloaded
Chrome Cache Entry: 332
Unicode text, UTF-8 text, with very long lines (32597), with no line terminators
dropped
Chrome Cache Entry: 333
C source, ASCII text, with very long lines (65098)
dropped
Chrome Cache Entry: 334
C source, ASCII text, with very long lines (563)
downloaded
Chrome Cache Entry: 335
Unicode text, UTF-8 text, with very long lines (65312)
downloaded
Chrome Cache Entry: 336
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 337
ASCII text, with very long lines (32506), with no line terminators
dropped
Chrome Cache Entry: 338
ASCII text, with very long lines (1048)
dropped
Chrome Cache Entry: 339
HTML document, ASCII text, with very long lines (1180)
downloaded
Chrome Cache Entry: 340
ASCII text, with very long lines (40628), with no line terminators
downloaded
Chrome Cache Entry: 341
JSON data
downloaded
Chrome Cache Entry: 342
ASCII text, with very long lines (65202)
downloaded
Chrome Cache Entry: 343
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 344
ASCII text, with very long lines (995)
downloaded
Chrome Cache Entry: 345
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 346
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 347
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 348
JSON data
downloaded
Chrome Cache Entry: 349
ASCII text, with very long lines (3761), with no line terminators
dropped
Chrome Cache Entry: 350
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 351
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 352
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 353
Unicode text, UTF-8 text, with very long lines (562)
dropped
Chrome Cache Entry: 354
HTML document, ASCII text, with very long lines (41904)
downloaded
Chrome Cache Entry: 355
Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
downloaded
Chrome Cache Entry: 356
ASCII text, with very long lines (62173), with no line terminators
dropped
Chrome Cache Entry: 357
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 358
ASCII text, with very long lines (4179)
downloaded
Chrome Cache Entry: 359
HTML document, ASCII text, with very long lines (11478)
dropped
Chrome Cache Entry: 360
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 361
JSON data
dropped
Chrome Cache Entry: 362
Unicode text, UTF-8 text, with very long lines (24895), with no line terminators
dropped
Chrome Cache Entry: 363
data
dropped
Chrome Cache Entry: 364
ASCII text, with very long lines (65143)
dropped
Chrome Cache Entry: 365
ASCII text, with very long lines (4679)
downloaded
Chrome Cache Entry: 366
Unicode text, UTF-8 text, with very long lines (52178)
dropped
Chrome Cache Entry: 367
ASCII text, with very long lines (1048)
downloaded
Chrome Cache Entry: 368
ASCII text, with very long lines (9974), with no line terminators
downloaded
Chrome Cache Entry: 369
HTML document, ASCII text, with very long lines (11478)
downloaded
Chrome Cache Entry: 370
HTML document, ASCII text, with very long lines (13942)
downloaded
Chrome Cache Entry: 371
Unicode text, UTF-8 text, with very long lines (29397)
downloaded
Chrome Cache Entry: 372
JSON data
dropped
Chrome Cache Entry: 373
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 374
JSON data
dropped
Chrome Cache Entry: 375
ASCII text, with very long lines (5394), with no line terminators
downloaded
Chrome Cache Entry: 376
ASCII text, with very long lines (30339)
dropped
Chrome Cache Entry: 377
ASCII text, with very long lines (11998)
downloaded
Chrome Cache Entry: 378
HTML document, Unicode text, UTF-8 text, with very long lines (4281)
downloaded
Chrome Cache Entry: 379
JSON data
dropped
Chrome Cache Entry: 380
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 381
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 382
Unicode text, UTF-8 text, with very long lines (52178)
downloaded
Chrome Cache Entry: 383
PNG image data, 500 x 500, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 384
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 385
Unicode text, UTF-8 text, with very long lines (56461), with no line terminators
downloaded
Chrome Cache Entry: 386
ASCII text, with very long lines (32098)
dropped
Chrome Cache Entry: 387
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 388
ASCII text, with very long lines (34947)
downloaded
Chrome Cache Entry: 389
ASCII text, with very long lines (5404), with no line terminators
downloaded
Chrome Cache Entry: 390
ASCII text, with very long lines (28986), with no line terminators
dropped
Chrome Cache Entry: 391
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 392
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 393
PNG image data, 500 x 500, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 394
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 395
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 396
ASCII text, with very long lines (665), with no line terminators
downloaded
Chrome Cache Entry: 397
ASCII text, with very long lines (995)
dropped
Chrome Cache Entry: 398
JSON data
downloaded
Chrome Cache Entry: 399
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 400
ASCII text, with very long lines (65143)
downloaded
Chrome Cache Entry: 401
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 402
ASCII text, with very long lines (9765), with no line terminators
downloaded
Chrome Cache Entry: 403
ASCII text, with very long lines (4709), with no line terminators
downloaded
Chrome Cache Entry: 404
ASCII text, with very long lines (2026)
dropped
Chrome Cache Entry: 405
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 406
Unicode text, UTF-8 text, with very long lines (22208)
downloaded
Chrome Cache Entry: 407
ASCII text, with very long lines (8655)
downloaded
Chrome Cache Entry: 408
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 409
ASCII text, with very long lines (4709), with no line terminators
dropped
Chrome Cache Entry: 410
Unicode text, UTF-8 text, with very long lines (65310)
downloaded
Chrome Cache Entry: 411
ASCII text, with very long lines (593)
dropped
Chrome Cache Entry: 412
JSON data
downloaded
Chrome Cache Entry: 413
JSON data
downloaded
Chrome Cache Entry: 414
ASCII text, with very long lines (65202)
dropped
Chrome Cache Entry: 415
ASCII text, with very long lines (665), with no line terminators
dropped
Chrome Cache Entry: 416
ASCII text, with very long lines (988)
downloaded
Chrome Cache Entry: 417
C source, ASCII text, with very long lines (563)
dropped
Chrome Cache Entry: 418
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 419
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 420
HTML document, Unicode text, UTF-8 text, with very long lines (4777)
downloaded
Chrome Cache Entry: 421
Unicode text, UTF-8 text, with very long lines (41100)
dropped
Chrome Cache Entry: 422
Web Open Font Format (Version 2), TrueType, length 80048, version 1.0
downloaded
Chrome Cache Entry: 423
HTML document, ASCII text, with very long lines (1179)
downloaded
Chrome Cache Entry: 424
HTML document, Unicode text, UTF-8 text, with very long lines (995)
downloaded
Chrome Cache Entry: 425
Unicode text, UTF-8 text, with very long lines (65312)
dropped
Chrome Cache Entry: 426
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 427
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 428
ASCII text, with very long lines (3560)
dropped
Chrome Cache Entry: 429
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 430
Web Open Font Format (Version 2), TrueType, length 72196, version 1.0
downloaded
Chrome Cache Entry: 431
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 432
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 433
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 434
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 435
ASCII text, with very long lines (14290)
downloaded
Chrome Cache Entry: 436
JSON data
downloaded
Chrome Cache Entry: 437
ASCII text, with very long lines (10937), with no line terminators
downloaded
Chrome Cache Entry: 438
ASCII text, with very long lines (9189)
downloaded
Chrome Cache Entry: 439
Unicode text, UTF-8 text, with very long lines (41100)
downloaded
Chrome Cache Entry: 440
PNG image data, 1920 x 540, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 441
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 442
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 443
ASCII text, with very long lines (565)
dropped
Chrome Cache Entry: 444
ASCII text, with very long lines (995)
dropped
Chrome Cache Entry: 445
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 446
JSON data
dropped
Chrome Cache Entry: 447
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 448
PNG image data, 1920 x 269, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 449
ASCII text, with very long lines (4179)
dropped
Chrome Cache Entry: 450
ASCII text, with very long lines (3761), with no line terminators
downloaded
Chrome Cache Entry: 451
HTML document, Unicode text, UTF-8 text, with very long lines (4340)
downloaded
Chrome Cache Entry: 452
HTML document, Unicode text, UTF-8 text, with very long lines (4281)
downloaded
Chrome Cache Entry: 453
JSON data
downloaded
Chrome Cache Entry: 454
Unicode text, UTF-8 text, with very long lines (41169)
downloaded
Chrome Cache Entry: 455
Web Open Font Format (Version 2), TrueType, length 216176, version 1.0
downloaded
Chrome Cache Entry: 456
ASCII text, with very long lines (9974), with no line terminators
dropped
Chrome Cache Entry: 457
ASCII text, with very long lines (32506), with no line terminators
downloaded
Chrome Cache Entry: 458
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 459
ASCII text, with very long lines (8226)
dropped
Chrome Cache Entry: 460
Unicode text, UTF-8 text, with very long lines (56461), with no line terminators
dropped
Chrome Cache Entry: 461
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 462
ASCII text, with very long lines (995)
downloaded
Chrome Cache Entry: 463
JSON data
dropped
Chrome Cache Entry: 464
ASCII text, with very long lines (5394), with no line terminators
dropped
Chrome Cache Entry: 465
HTML document, Unicode text, UTF-8 text, with very long lines (4340)
downloaded
Chrome Cache Entry: 466
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
downloaded
Chrome Cache Entry: 467
ASCII text, with very long lines (24711)
downloaded
Chrome Cache Entry: 468
ASCII text, with very long lines (41940)
downloaded
Chrome Cache Entry: 469
PNG image data, 503 x 240, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 470
ASCII text, with very long lines (14290)
dropped
Chrome Cache Entry: 471
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 472
HTML document, ASCII text, with very long lines (908), with no line terminators
downloaded
Chrome Cache Entry: 473
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 474
HTML document, Unicode text, UTF-8 text, with very long lines (4421)
downloaded
Chrome Cache Entry: 475
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 476
ASCII text, with very long lines (1048)
dropped
Chrome Cache Entry: 477
ASCII text, with very long lines (15341)
dropped
Chrome Cache Entry: 478
ASCII text, with very long lines (665), with no line terminators
downloaded
Chrome Cache Entry: 479
exported SGML document, ASCII text
downloaded
Chrome Cache Entry: 480
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 481
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 482
ASCII text, with very long lines (32098)
downloaded
Chrome Cache Entry: 483
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 484
HTML document, ASCII text, with very long lines (3157)
dropped
Chrome Cache Entry: 485
Unicode text, UTF-8 text, with very long lines (23510)
downloaded
Chrome Cache Entry: 486
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 487
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 488
ASCII text, with very long lines (1048)
dropped
Chrome Cache Entry: 489
Unicode text, UTF-8 text, with very long lines (22208)
dropped
Chrome Cache Entry: 490
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 491
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 492
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 493
ASCII text, with very long lines (988)
dropped
Chrome Cache Entry: 494
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 495
ASCII text, with very long lines (565)
downloaded
Chrome Cache Entry: 496
Unicode text, UTF-8 text, with very long lines (65506), with no line terminators
downloaded
Chrome Cache Entry: 497
ASCII text, with very long lines (501)
dropped
Chrome Cache Entry: 498
ASCII text, with very long lines (4179)
downloaded
Chrome Cache Entry: 499
ASCII text, with very long lines (1048)
downloaded
Chrome Cache Entry: 500
ASCII text, with very long lines (988)
downloaded
Chrome Cache Entry: 501
data
downloaded
Chrome Cache Entry: 502
JSON data
downloaded
Chrome Cache Entry: 503
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 504
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 505
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 506
Web Open Font Format (Version 2), TrueType, length 70636, version 1.0
downloaded
Chrome Cache Entry: 507
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
dropped
Chrome Cache Entry: 508
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3
dropped
Chrome Cache Entry: 509
ASCII text, with very long lines (5458)
downloaded
Chrome Cache Entry: 510
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 888x454, components 3
dropped
Chrome Cache Entry: 511
ASCII text, with very long lines (4179)
dropped
Chrome Cache Entry: 512
PNG image data, 1920 x 420, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 513
Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
dropped
Chrome Cache Entry: 514
ASCII text, with very long lines (4238)
dropped
Chrome Cache Entry: 515
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 516
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
dropped
Chrome Cache Entry: 517
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 518
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
downloaded
Chrome Cache Entry: 519
Unicode text, UTF-8 text, with very long lines (29397)
dropped
Chrome Cache Entry: 520
ASCII text, with very long lines (2147)
downloaded
Chrome Cache Entry: 521
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 522
ASCII text, with very long lines (15341)
downloaded
Chrome Cache Entry: 523
Unicode text, UTF-8 text, with very long lines (41169)
dropped
Chrome Cache Entry: 524
JSON data
dropped
Chrome Cache Entry: 525
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1368x269, components 3
dropped
Chrome Cache Entry: 526
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
downloaded
Chrome Cache Entry: 527
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 528
ASCII text, with very long lines (4487)
downloaded
Chrome Cache Entry: 529
ISO Media, AVIF Image
downloaded
Chrome Cache Entry: 530
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 531
ASCII text, with very long lines (660), with no line terminators
downloaded
Chrome Cache Entry: 532
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 533
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 534
ASCII text, with very long lines (3560)
downloaded
Chrome Cache Entry: 535
ASCII text, with very long lines (4474), with no line terminators
downloaded
Chrome Cache Entry: 536
ASCII text, with very long lines (5434), with no line terminators
dropped
Chrome Cache Entry: 537
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 538
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 539
ASCII text, with very long lines (8226)
downloaded
Chrome Cache Entry: 540
ASCII text, with very long lines (24711)
downloaded
Chrome Cache Entry: 541
ASCII text, with very long lines (4679)
dropped
Chrome Cache Entry: 542
Unicode text, UTF-8 text, with very long lines (65310)
dropped
Chrome Cache Entry: 543
ASCII text, with very long lines (4238)
downloaded
Chrome Cache Entry: 544
JSON data
downloaded
Chrome Cache Entry: 545
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 546
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 547
ASCII text, with very long lines (593)
downloaded
Chrome Cache Entry: 548
Unicode text, UTF-8 text, with very long lines (23510)
dropped
Chrome Cache Entry: 549
ASCII text, with very long lines (995)
dropped
Chrome Cache Entry: 550
HTML document, ASCII text, with very long lines (41904)
dropped
Chrome Cache Entry: 551
ASCII text, with very long lines (62173), with no line terminators
downloaded
Chrome Cache Entry: 552
JSON data
dropped
Chrome Cache Entry: 553
ASCII text, with very long lines (988)
dropped
Chrome Cache Entry: 554
JSON data
dropped
Chrome Cache Entry: 555
ASCII text, with very long lines (34947)
downloaded
Chrome Cache Entry: 556
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 557
JSON data
dropped
Chrome Cache Entry: 558
ASCII text, with very long lines (665), with no line terminators
dropped
Chrome Cache Entry: 559
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 560
ASCII text, with very long lines (316), with no line terminators
downloaded
Chrome Cache Entry: 561
ASCII text, with very long lines (5404), with no line terminators
dropped
Chrome Cache Entry: 562
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 563
ASCII text, with very long lines (10937), with no line terminators
dropped
Chrome Cache Entry: 564
ASCII text, with very long lines (5552)
dropped
Chrome Cache Entry: 565
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 566
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 567
HTML document, Unicode text, UTF-8 text, with very long lines (4281)
dropped
Chrome Cache Entry: 568
Unicode text, UTF-8 text, with very long lines (32597), with no line terminators
downloaded
Chrome Cache Entry: 569
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 570
Unicode text, UTF-8 text, with very long lines (24895), with no line terminators
downloaded
Chrome Cache Entry: 571
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 572
ASCII text, with very long lines (501)
downloaded
Chrome Cache Entry: 573
ASCII text, with very long lines (9189)
dropped
Chrome Cache Entry: 574
ASCII text, with very long lines (8655)
dropped
Chrome Cache Entry: 575
ASCII text, with very long lines (9765), with no line terminators
dropped
Chrome Cache Entry: 576
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 577
ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 578
PNG image data, 1427 x 374, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 579
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 580
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 581
HTML document, ASCII text, with very long lines (45168)
downloaded
Chrome Cache Entry: 582
ASCII text, with very long lines (2147)
dropped
Chrome Cache Entry: 583
ASCII text, with very long lines (5458)
dropped
Chrome Cache Entry: 584
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 585
ASCII text, with very long lines (11998)
dropped
Chrome Cache Entry: 586
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x540, components 3
dropped
Chrome Cache Entry: 587
JSON data
downloaded
Chrome Cache Entry: 588
Unicode text, UTF-8 text, with very long lines (65506), with no line terminators
dropped
Chrome Cache Entry: 589
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 590
HTML document, Unicode text, UTF-8 text, with very long lines (4281)
dropped
Chrome Cache Entry: 591
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 592
Unicode text, UTF-8 text, with very long lines (22201), with no line terminators
downloaded
Chrome Cache Entry: 593
exported SGML document, ASCII text
dropped
Chrome Cache Entry: 594
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 595
ASCII text, with very long lines (65202)
downloaded
Chrome Cache Entry: 596
ASCII text, with very long lines (4474), with no line terminators
dropped
Chrome Cache Entry: 597
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 598
ASCII text, with very long lines (30339)
downloaded
Chrome Cache Entry: 599
ASCII text, with very long lines (28986), with no line terminators
downloaded
There are 317 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
C:\Windows\splwow64.exe
C:\Windows\splwow64.exe 12288
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1920,i,5284863945729718286,696337620381514638,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.oracle.com/"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5616 --field-trial-handle=1920,i,5284863945729718286,696337620381514638,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4668 --field-trial-handle=1920,i,5284863945729718286,696337620381514638,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
https://www.oracle.com/br/global-menu-v2/
unknown
https://www.oracle.com/asset/web/js/oracle-chatbot.js
unknown
https://www.oracle.com/tr/corporate/contact/
unknown
https://tms.oracle.com/main/prod/utag.5.js?utv=ut4.48.202304180805
18.239.50.103
https://www.oracle.com/retail/demand-planning/
unknown
https://docs.oracle.com/en/cloud/get-started/subscriptions-cloud/secure-platform-cloud-services.html
unknown
https://s2.go-mpulse.net/boomerang/
unknown
https://supportrenewals.oracle.com/apex/f?p=supportrenewal:home:0
unknown
https://www.oracle.com/ro/corporate/contact/
unknown
https://www.oracle.com/sa-ar/corporate/contact/
unknown
https://www.oracle.com/es/global-menu-v2/
unknown
https://oracle.sc.omtrdc.net/b/ss/oracleglobal/1/JS-2.25.0/s73542568918183?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%205%3A4%3A5%203%20240&mid=83358138078992965113843683156549569096&ce=UTF-8&ns=oracle&pageName=ocom%3Aen-us%3A%2Fai-advantage%2F&g=https%3A%2F%2Fwww.oracle.com%2Fai-advantage%2F&c.&getPercentPageViewed=5.1&.c&cc=USD&ch=ocom%3Aen-us%3A%2Fai-advantage%2F&c1=VisitorAPI%20Present&h3=D%3DpageName&c16=83358138078992965113843683156549569096&c20=D%3Dv20&v20=New&c24=D%3Dv24&v24=https%3A%2F%2Fwww.oracle.com%2F&c26=D%3Dv26&v26=ocom%3Aen&c38=D%3DpageName&c39=D%3DpageName&c51=ora_code%3A2.0%3AJS%202.25.0%3Acloudworld%3A1.10&v51=D%3DpageName&v52=https%3A%2F%2Fwww.oracle.com%2Fai-advantage%2F&c54=D%3Dv54&v54=not%20logged%20in&c55=A&c67=0%7Eimplied%7ENoCookie&v91=e27455ed-f32e-48d8-b1dd-90f816d2c9ba&v118=en-US&v124=ocom%3Aen-us%3A%2F&v125=highestPercentViewed%3D36%20%7C%20initialPercentViewed%3D36%20%7C%20highestPixelsSeen%3D907%20%7C%20foldsSeen%3D1%20%7C%20foldsAvailable%3D2&v126=83358138078992965113843683156549569096&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=93263704532955710A490D44%40AdobeOrg&AQE=1
63.140.62.17
https://search.oracle.com/results
unknown
https://consent.trustarc.com/log?domain=oracle.com&country=us&state=&behavior=implied&session=fcd4b3f5-5e3e-48da-bab4-1291fe38845a&userType=NEW&c=682f&referer=https://www.oracle.com&language=en
13.225.78.35
https://oracle.sc.omtrdc.net/b/ss/oracleglobal/1/JS-2.25.0/s7962870250960?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%205%3A4%3A39%203%20240&mid=83358138078992965113843683156549569096&ce=UTF-8&ns=oracle&pageName=ocom%3Aen-us%3A%2Fcustomers%2Foutrigger-hospitality-group%2F&g=https%3A%2F%2Fwww.oracle.com%2Fcustomers%2Foutrigger-hospitality-group%2F&cc=USD&c8=ocom%3Aen-us%3A%2Fcustomers%2Foutrigger-hospitality-group%2F&c22=ocom%3Aen-us%3Atalk-to-sales%3Aopen&v53=%5Bocom%3Aen-us%3A%2Fcustomers%2Foutrigger-hospitality-group%2F%5Docom%3Aen-us%3Atalk-to-sales%3Aopen&pe=lnk_o&pev2=ocom%3Aen-us%3Atalk-to-sales%3Aopen&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=93263704532955710A490D44%40AdobeOrg&lrt=1880&AQE=1
63.140.62.17
https://i.ytimg.com/vi/vEY5s_cqBL4/hqdefault.jpg
142.250.74.214
https://www.oracle.com/partners/
unknown
https://www.oracle.com/asset/web/favicons/favicon-192.png
unknown
https://www.oracle.com/hk/corporate/contact/
unknown
https://shop.oracle.com/
unknown
https://www.oracle.com/asset/web/fonts/oraclesansvf.woff2
unknown
https://tms.oracle.com/vendor-profile/prod/utag.sync.js
18.239.50.103
https://partner-finder.oracle.com/catalog/
unknown
https://www.youtube.com
unknown
https://investor.oracle.com/home/default.aspx
unknown
https://www.oracle.com/global-menu-v2/
unknown
https://www.oracle.com/support/support-options.html
unknown
https://www.oracle.com/ng/global-menu-v2/
unknown
http://www.youtube.com/oracle/
unknown
https://www.oracle.com/de/corporate/contact/
unknown
https://www.oracle.com/id/global-menu-v2/
unknown
https://www.oracle.com/mx/corporate/contact/
unknown
https://twitter.com/oracle
unknown
https://community.oracle.com/community/groundbreakers
unknown
https://www.oracle.com/ch-fr/corporate/contact/
unknown
https://www.oracle.com/sk/corporate/contact/
unknown
https://www.oracle.com/hk/global-menu-v2/
unknown
https://c.go-mpulse.net
unknown
https://www.oracle.com/kw-ar/global-menu-v2/
unknown
https://tms.oracle.com/vendor-profile/prod/utag.23.js?utv=ut4.48.202305260528
18.239.50.103
https://www.oracle.com/retail/demand-planning/#rc30p2
unknown
https://www.oracle.com/uk/global-menu-v2/
unknown
https://www.oracle.com/tr/global-menu-v2/
unknown
https://www.oracle.com/nl/corporate/contact/
unknown
https://www.oracle.com/retail/cross-talk/?source=:ow:o:h:mt:::RC_CORP240207P00007:CrossTalkPromo&int
unknown
https://www.oracle.com/asset/web/i/rw-natural07.png
unknown
https://www.oracle.com/asset/web/favicons/favicon-128.png
unknown
https://www.oracle.com/asset/web/favicons/favicon-32.png
unknown
https://www.oracle.com/industries/
unknown
https://community.oracle.com/community/support
unknown
https://community.oracle.com/community/usergroups
unknown
https://www.oracle.com/cz/global-menu-v2/
unknown
https://www.oracle.com/qa-ar/corporate/contact/
unknown
https://www.oracle.com/a/evt/img/og-ai-advantage-facebook-1200x630.png
unknown
https://www.oracle.com/eg/corporate/contact/
unknown
https://www.oracle.com/pe/global-menu-v2/
unknown
https://www.oracle.com/cn/global-menu-v2/
unknown
https://www.oracle.com/ph/global-menu-v2/
unknown
https://developer.oracle.com/developer-live/?source=:ow:o:h:nav::DevLiveSeries_OcomHomepageEventsDro
unknown
https://supportrenewals.oracle.com
unknown
https://www.oracle.com/asset/web/i/rc132strip-texture.jpg
unknown
https://www.oracle.com/eg-ar/corporate/contact/
unknown
https://oracle.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=93263704532955710A490D44%40AdobeOrg&mid=83358138078992965113843683156549569096&ts=1724835809509
63.140.62.17
https://schema.org
unknown
https://oracle.sc.omtrdc.net/b/ss/oracleglobal/1/JS-2.25.0/s73158533605340?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%205%3A3%3A37%203%20240&mid=83358138078992965113843683156549569096&ce=UTF-8&ns=oracle&pageName=ocom%3Aen-us%3A%2F&g=https%3A%2F%2Fwww.oracle.com%2F&cc=USD&c8=ocom%3Aen-us%3A%2F&c22=ocom%3Aen-us%3Atalk-to-sales%3Aopen&v53=%5Bocom%3Aen-us%3A%2F%5Docom%3Aen-us%3Atalk-to-sales%3Aopen&pe=lnk_o&pev2=ocom%3Aen-us%3Atalk-to-sales%3Aopen&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=93263704532955710A490D44%40AdobeOrg&lrt=967&AQE=1
63.140.62.17
https://insidejava.libsyn.com/
unknown
https://docs.oracle.com/learn/
unknown
https://connect.facebook.net/
unknown
https://www.oracle.com/search/events?lang=en&locid=WM176642
unknown
https://www.oracle.com/pt/corporate/contact/
unknown
https://adservice.google.com/ddm/fls/z/dc_pre=CLab9a2ql4gDFRBFpAQdRzMOqA;src=3573281;type=ubert0;cat
unknown
https://oracle.112.2o7.net
unknown
https://www.oracle.com/asset/web/analytics/infinity_common.js
unknown
https://consent.trustarc.com/get?name=crossdomain.html&domain=oracle.com
13.225.78.53
https://www.facebook.com/tr/
157.240.0.35
https://adservice.google.com/ddm/fls/z/dc_pre=CPjPpamql4gDFbJ1pAQd5tYHaA;src=3573281;type=ubert0;cat
unknown
https://docs.oracle.com/en/solutions/index.html?type=reference-architectures&page=0&is=true&sort=0
unknown
https://consent.trustarc.com/log?domain=oracle.com&country=us&state=&behavior=implied&session=fcd4b3f5-5e3e-48da-bab4-1291fe38845a&userType=NEW&c=0255&referer=https://www.oracle.com&language=en
13.225.78.57
https://login-stage.oracle.com/sso/logout?p_done_url=
unknown
https://www.oracle.com/za/global-menu-v2/
unknown
https://www.oracle.com/asset/web/analytics/infinity_click_tracking_ocom.js
unknown
https://www.oracle.com/pl/corporate/contact/
unknown
https://www.oracle.com/kr/global-menu-v2/
unknown
https://www.youtube.com/s/player/bcd1f224/www-widgetapi.vflset/www-widgetapi.js
172.217.18.14
https://www.oracle.com/corporate/contact/help.html
unknown
https://consent.trustarc.com/log
unknown
https://www.oracle.com/it/global-menu-v2/
unknown
https://www.oracle.com/jp/global-menu-v2/
unknown
https://www.oracle.com/corporate/contact/
https://www.oracle.com/webapps/redirect/signon?nexturl=
unknown
https://oracle.sc.omtrdc.net/b/ss/oracleglobal/1/JS-2.25.0/s72568071273039?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%205%3A4%3A29%203%20240&mid=83358138078992965113843683156549569096&ce=UTF-8&ns=oracle&pageName=ocom%3Aen-us%3A%2Fcustomers%2Foutrigger-hospitality-group%2F&g=https%3A%2F%2Fwww.oracle.com%2Fcustomers%2Foutrigger-hospitality-group%2F&c.&getPercentPageViewed=5.1&.c&cc=USD&ch=ocom%3Aen-us%3A%2Fcustomers%2Foutrigger-hospitality-group%2F&c1=VisitorAPI%20Present&h3=D%3DpageName&c16=83358138078992965113843683156549569096&c20=D%3Dv20&v20=New&c24=D%3Dv24&v24=https%3A%2F%2Fwww.oracle.com%2Fretail%2Fhelzberg-diamonds%2F&c26=D%3Dv26&v26=ocom%3Aen&c38=D%3DpageName&c39=D%3DpageName&c51=ora_code%3A2.0%3AJS%202.25.0%3Astoryhub%3A1.21&v51=D%3DpageName&v52=https%3A%2F%2Fwww.oracle.com%2Fcustomers%2Foutrigger-hospitality-group%2F&c54=D%3Dv54&v54=not%20logged%20in&c55=A&c64=D%3Dv64&v64=82AD6E73B2154D9CA67DFB9DB19B976E&c67=0%7Eimplied%7ENoCookie&v91=e27455ed-f32e-48d8-b1dd-90f816d2c9ba&v92=default&v118=en-US&v124=ocom%3Aen-us%3A%2Fretail%2Fhelzberg-diamonds%2F&v125=highestPercentViewed%3D35%20%7C%20initialPercentViewed%3D35%20%7C%20highestPixelsSeen%3D907%20%7C%20foldsSeen%3D1%20%7C%20foldsAvailable%3D2&v126=83358138078992965113843683156549569096&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=93263704532955710A490D44%40AdobeOrg&AQE=1
63.140.62.17
https://docs.oracle.com/en-us/iaas/Content/GSG/Concepts/signinoptions.htm
unknown
https://www.youtube.com/user/OracleLearning
unknown
https://search.oracle.com/results?q=u30searchterm&size=10&page=1&tab=all
unknown
https://oracle.sc.omtrdc.net/b/ss/oracleglobal/1/JS-2.25.0/s71222088656533?AQB=1&ndh=1&pf=1&t=28%2F7%2F2024%205%3A4%3A19%203%20240&mid=83358138078992965113843683156549569096&ce=UTF-8&ns=oracle&pageName=ocom%3Aen-us%3A%2Fretail%2Fhelzberg-diamonds%2F&g=https%3A%2F%2Fwww.oracle.com%2Fretail%2Fhelzberg-diamonds%2F&c.&getPercentPageViewed=5.1&.c&cc=USD&ch=ocom%3Aen-us%3A%2Fretail%2Fhelzberg-diamonds%2F&c1=VisitorAPI%20Present&h3=D%3DpageName&c16=83358138078992965113843683156549569096&c20=D%3Dv20&v20=New&c24=D%3Dv24&v24=no%20value&c26=D%3Dv26&v26=ocom%3Aen&c38=D%3DpageName&c39=D%3DpageName&c51=ora_code%3A2.0%3AJS%202.25.0%3Aocom%3A3.98&v51=D%3DpageName&v52=https%3A%2F%2Fwww.oracle.com%2Fretail%2Fhelzberg-diamonds%2F&c54=D%3Dv54&v54=not%20logged%20in&c55=A&c64=D%3Dv64&v64=82AD6E73B2154D9CA67DFB9DB19B976E&c67=0%7Eimplied%7ENoCookie&v91=e27455ed-f32e-48d8-b1dd-90f816d2c9ba&v92=default&v118=en-US&v124=ocom%3Aen-us%3A%2Fai-advantage%2F&v125=highestPercentViewed%3D60%20%7C%20initialPercentViewed%3D60%20%7C%20highestPixelsSeen%3D907%20%7C%20foldsSeen%3D1%20%7C%20foldsAvailable%3D1&v126=83358138078992965113843683156549569096&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=93263704532955710A490D44%40AdobeOrg&AQE=1
63.140.62.17
https://www.oracle.com/in/global-menu-v2/
unknown
https://www.oracle.com/it/corporate/contact/
unknown
https://www.oracle.com/asset/web/fonts/redwoodicons.woff2
unknown
https://www.oracle.com/nz/corporate/contact/
unknown
https://www.youtube.com/s/player/bcd1f224/www-player.css
172.217.18.14
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
star-mini.c10r.facebook.com
157.240.0.35
dart.l.doubleclick.net
142.250.185.198
s-part-0023.t-0009.t-msedge.net
13.107.246.51
oracle.112.2o7.net
63.140.62.17
i.ytimg.com
142.250.74.214
ad.doubleclick.net
172.217.16.198
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com
34.208.1.29
p03b.hs.eloqua.com
130.35.100.56
adservice.google.com
172.217.18.2
s-part-0045.t-0009.t-msedge.net
13.107.246.73
ax-0001.ax-msedge.net
150.171.28.10
s-part-0029.t-0009.t-msedge.net
13.107.246.57
consent.trustarc.com
13.225.78.35
oracle.sc.omtrdc.net
63.140.62.17
bg.microsoft.map.fastly.net
199.232.214.172
youtube-ui.l.google.com
172.217.18.14
scontent.xx.fbcdn.net
157.240.0.6
googleads.g.doubleclick.net
142.250.185.194
www.google.com
172.217.16.132
td.doubleclick.net
142.250.185.194
tms.oracle.com.greylabeldelivery.com
18.239.50.103
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
54.78.109.69
dzfq4ouujrxm8.cloudfront.net
13.33.187.116
s-part-0032.t-0009.t-msedge.net
13.107.246.60
www.oracle.com
unknown
s.go-mpulse.net
unknown
02179911.akstat.io
unknown
img03.en25.com
unknown
0217991e.akstat.io
unknown
trial-eum-clientnsv4-s.akamaihd.net
unknown
8-46-123-33_s-2-16-241-7_ts-1724835816-clienttons-s.akamaihd.net
unknown
www.youtube.com
unknown
dc.oracleinfinity.io
unknown
dpm.demdex.net
unknown
3573281.fls.doubleclick.net
unknown
www.facebook.com
unknown
go.oracle.com
unknown
trial-eum-clienttons-s.akamaihd.net
unknown
www.linkedin.com
unknown
tms.oracle.com
unknown
px.ads.linkedin.com
unknown
connect.facebook.net
unknown
baxhwik7mu3ggzwo47ua-pi2sd2-bb9f47e2d-clientnsv4-s.akamaihd.net
unknown
d.oracleinfinity.io
unknown
snap.licdn.com
unknown
tags.tiqcdn.com
unknown
c.go-mpulse.net
unknown
There are 37 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
142.250.185.100
unknown
United States
192.168.2.4
unknown
unknown
18.239.50.37
unknown
United States
63.140.36.145
unknown
United States
142.250.184.228
unknown
United States
13.225.78.53
unknown
United States
142.250.74.214
i.ytimg.com
United States
157.240.0.35
star-mini.c10r.facebook.com
United States
130.35.100.56
p03b.hs.eloqua.com
United States
142.250.185.198
dart.l.doubleclick.net
United States
63.140.62.17
oracle.112.2o7.net
United States
172.217.18.2
adservice.google.com
United States
216.58.206.46
unknown
United States
13.225.78.57
unknown
United States
142.250.181.246
unknown
United States
239.255.255.250
unknown
Reserved
142.250.185.194
googleads.g.doubleclick.net
United States
172.217.16.194
unknown
United States
142.250.186.102
unknown
United States
172.217.16.198
ad.doubleclick.net
United States
172.217.18.14
youtube-ui.l.google.com
United States
54.78.109.69
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
United States
157.240.0.6
scontent.xx.fbcdn.net
United States
13.33.187.116
dzfq4ouujrxm8.cloudfront.net
United States
150.171.28.10
ax-0001.ax-msedge.net
United States
157.240.252.35
unknown
United States
13.224.103.9
unknown
United States
34.208.1.29
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com
United States
13.107.246.57
s-part-0029.t-0009.t-msedge.net
United States
18.65.39.76
unknown
United States
13.225.78.35
consent.trustarc.com
United States
18.239.50.103
tms.oracle.com.greylabeldelivery.com
United States
18.164.52.88
unknown
United States
13.33.187.32
unknown
United States
18.245.86.9
unknown
United States
172.217.16.132
www.google.com
United States
142.250.186.66
unknown
United States
There are 27 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
:r
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\16
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML
KnownIDs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor
Description
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML
KnownIDs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor
Description
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookOpenedCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\FileBlock
FileTypeBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\FileBlock
OoxmlConverterBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookAutoRecoverDirty
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Excel8.0
MSForms
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Excel8.0
MSComctlLib
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlArchitetureIndependent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlMSWebBrowserArchiteturePersistenceIssue
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ReviewCycle
ReviewToken
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.28
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.29
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
ConfigIds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0\0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{BEF6E003-A874-101A-8BBA-00AA00300CAB}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{EC72F590-F375-11CE-B9E8-00AA006B1A69}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02370-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02371-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02372-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8A683C91-BA84-11CF-8110-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{29B86A70-F52E-11CE-9BCE-00AA00608E01}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC8-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC4-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D33-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D53-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC3-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{944ACF93-A1E6-11CE-8104-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{79176FB3-B7F2-11CE-97EF-00AA006D2776}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{4C599243-6926-101B-9992-00000B65C6F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11D-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC8-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\29542
29542
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\FileIO
FileActivityStoreVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\TeachingCallouts
AccCheckerStatusBarTeachingCallout
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
{g
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
ClockTimeSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\IdentityCRL\ClockData
TickCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
0018800F34DA717B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
MsaDevice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSAllCategories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\43DE1
43DE1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSAllCategories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ImmersiveWorkbookDirtySentinel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelPreviousSessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\16
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
FilePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
StartDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=8192&uilcid=1033&build=16.0.16827&crev=3\0
EndDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
LicenseCategoryInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
LicenseSKUInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookOpenedCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ImmersiveWorkbookDirtySentinel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ImmersiveWorkbookDirtySentinel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookAutoRecoverDirty
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ImmersiveWorkbookDirtySentinel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookAutoRecoverDirty
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.17
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.18
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.19
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.21
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.22
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.23
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.25
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.26
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.27
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
VersionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
DeferredConfigs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\TypeLib\{539CA167-3F65-435A-A2D2-69A3ED5AAE10}\2.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{EC72F590-F375-11CE-B9E8-00AA006B1A69}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02370-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02371-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{82B02372-B5BC-11CF-810F-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8A683C90-BA84-11CF-8110-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8A683C91-BA84-11CF-8110-00A0C9030074}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{29B86A70-F52E-11CE-9BCE-00AA00608E01}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC8-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5B9D8FC8-4A71-101B-97A6-00000B65C08B}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{CF3F94A0-F546-11CE-9BCE-00AA00608E01}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC4-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D33-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D53-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D63-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC3-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{A38BFFC3-A5A0-11CE-8107-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{944ACF93-A1E6-11CE-8104-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC2-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{79176FB3-B7F2-11CE-97EF-00AA006D2776}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{4C599243-6926-101B-9992-00000B65C6F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D111-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D113-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D115-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D117-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D119-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11B-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11D-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D11F-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5512D125-5CC6-11CF-8D67-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{978C9E22-D4B0-11CE-BF2D-00AA003F40D0}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D22-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D32-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D42-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D52-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{8BD21D62-EC42-11CE-9E0D-00AA006002F3}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC2-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC7-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{79176FB2-B7F2-11CE-97EF-00AA006D2776}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{4C5992A5-6926-101B-9992-00000B65C6F9}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{796ED650-5FE9-11CF-8D68-00AA00BDCE1D}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE0-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE1-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE2-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE4-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE5-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE6-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE8-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{47FF8FE9-6198-11CF-8CE8-00AA006CB389}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{5CEF5613-713D-11CE-80C9-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{92E11A03-7358-11CE-80CB-00AA00611080}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{04598FC9-866C-11CF-AB7C-00AA00C08FCF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Interface\{7B020EC8-AF6C-11CE-9F46-00AA00574A4F}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTimeExcel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTimeExcel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\7752
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified
excel.exe_queried
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified
excel.exe_queried
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows Script\Settings\Telemetry\splwow64.exe
JScriptSetScriptStateStarted
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows Script\Settings\Telemetry\splwow64.exe
JScriptSetScriptStateStarted
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows Script\Settings\Telemetry\splwow64.exe
JScriptSetScriptStateStarted
There are 434 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://www.oracle.com/
https://www.oracle.com/
https://www.oracle.com/
https://www.oracle.com/
https://www.oracle.com/
https://www.oracle.com/ai-advantage/
https://www.oracle.com/ai-advantage/
https://www.oracle.com/countries-list.html#countries
https://www.oracle.com/countries-list.html#countries
https://www.oracle.com/retail/helzberg-diamonds/
https://www.oracle.com/retail/helzberg-diamonds/
https://www.oracle.com/retail/helzberg-diamonds/
https://www.oracle.com/retail/helzberg-diamonds/
https://www.oracle.com/retail/helzberg-diamonds/
https://www.oracle.com/retail/helzberg-diamonds/
https://www.oracle.com/customers/outrigger-hospitality-group/
https://www.oracle.com/customers/outrigger-hospitality-group/
https://www.oracle.com/customers/outrigger-hospitality-group/
https://www.oracle.com/customers/outrigger-hospitality-group/
https://www.oracle.com/customers/outrigger-hospitality-group/
https://www.oracle.com/corporate/contact/
https://www.oracle.com/corporate/contact/
https://www.oracle.com/corporate/contact/
https://www.oracle.com/customers/koerber/
https://www.oracle.com/customers/koerber/
https://www.oracle.com/customers/koerber/
https://www.oracle.com/customers/koerber/
https://www.oracle.com/customers/koerber/
https://www.oracle.com/#maincontent
https://www.oracle.com/#maincontent
https://www.oracle.com/#maincontent
There are 21 hidden doms, click here to show them.