Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
SSCBOLGZFXVJMEICRNQMJOCDIF.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Security: 0, Code page: 1252,
Revision Number: {724C7FF5-7662-4A2A-8276-3C06997B6B85}, Number of Words: 10, Subject: Micro K, Author: Micro K, Name of Creating
Application: Micro K, Template: ;1046, Comments: A base dados do instalador contm a lgica e os dados necessrios para instalar
o Micro K., Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Thu Aug 22 19:52:54 2024,
Last Saved Time/Date: Thu Aug 22 19:52:54 2024, Last Printed: Thu Aug 22 19:52:54 2024, Number of Pages: 450
|
initial sample
|
 |
|
|
C:\Config.Msi\44a928.rbs
|
data
|
modified
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\Data.exe
|
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\COPYRIGHT
|
ISO-8859 text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\JAWTAccessBridge-32.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\JAWTAccessBridge.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\JavaAccessBridge-32.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\JavaAccessBridge.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\WindowsAccessBridge-32.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\WindowsAccessBridge.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\awt.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\bci.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\client\Xusage.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\client\jvm.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\dcpr.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\decora_sse.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\deploy.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\dt_shmem.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\dt_socket.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\dtplugin\deployJava1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\dtplugin\npdeployJava1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\eula.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\fontmanager.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\fxplugins.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\glass.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\glib-lite.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\gstreamer-lite.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\hprof.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\instrument.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\j2pcsc.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\j2pkcs11.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jaas_nt.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jabswitch.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\java-rmi.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\java.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\java.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\java_crw_demo.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\javacpl.cpl
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\javacpl.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\javafx_font.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\javafx_font_t2k.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\javafx_iio.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\javaw.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\javaws.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jawt.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jdwp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jfr.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jfxmedia.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jfxwebkit.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jjs.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jli.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jp2iexp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jp2launcher.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jp2native.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jp2ssv.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jpeg.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jsdt.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jsound.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\jsoundds.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\kcms.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\keytool.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\kinit.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\klist.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\ktab.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\lcms.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\management.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\mlib_image.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\msvcp120.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\msvcr100.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\msvcr120.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\net.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\nio.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\npt.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\orbd.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\pack200.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\plugin2\msvcr100.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\plugin2\npjp2.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\policytool.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\prism_common.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\prism_d3d.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\prism_sw.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\resource.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\rmid.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\rmiregistry.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\servertool.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\splashscreen.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\ssv.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\ssvagent.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\sunec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\sunmscapi.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\t2k.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\tnameserv.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\unpack.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\unpack200.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\verify.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\w2k_lsa_auth.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\wsdetect.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\zip.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\lib\accessibility.properties
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\lib\calendars.properties
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\lib\charsets.jar
|
Java archive data (JAR)
|
dropped
|
||
|
C:\Windows\Installer\44a926.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Security: 0, Code page: 1252,
Revision Number: {724C7FF5-7662-4A2A-8276-3C06997B6B85}, Number of Words: 10, Subject: Micro K, Author: Micro K, Name of Creating
Application: Micro K, Template: ;1046, Comments: A base dados do instalador contm a lgica e os dados necessrios para instalar
o Micro K., Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Thu Aug 22 19:52:54 2024,
Last Saved Time/Date: Thu Aug 22 19:52:54 2024, Last Printed: Thu Aug 22 19:52:54 2024, Number of Pages: 450
|
dropped
|
||
|
C:\Windows\Installer\MSIB470.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSIB4FE.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSIB52E.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSIB56D.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSIB5AD.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSIB705.tmp
|
data
|
dropped
|
||
|
C:\Windows\Installer\SourceHash{8AAF0A6E-F707-4842-B769-4A894B3B322D}
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Installer\inprogressinstallinfo.ipi
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\~DF19492B0723AF824B.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF29EEDB704D6F2C71.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF61032BAB00B86E66.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF8233EDC092DF1605.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFAA44DBB19E8F2503.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFDDF272426E0B4B2A.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DFE958AF5EFDD8BEBD.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFFC418F71E1FE4BA3.TMP
|
data
|
dropped
|
There are 109 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\msiexec.exe
|
"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\SSCBOLGZFXVJMEICRNQMJOCDIF.msi"
|
|
|
|
C:\Windows\System32\msiexec.exe
|
C:\Windows\system32\msiexec.exe /V
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding 38158D9497D4C550C29A4EC337EC1FF4
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://HTTP/1.1GETRange:
|
unknown
|
||
|
ftp://http://base%.20s%ddefault%d%.20scopying
|
unknown
|
||
|
http://www.jclark.com/xt
|
unknown
|
||
|
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
||
|
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd-//W3C//DTD
|
unknown
|
||
|
http://www.symauth.com/rpa00
|
unknown
|
||
|
http://exslt.org/commonnode-setdata-typexsltDoSortFunction:
|
unknown
|
||
|
http://exslt.org/common
|
unknown
|
||
|
http://ocsp.thawte.com0
|
unknown
|
||
|
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd
|
unknown
|
||
|
http://icl.com/saxon
|
unknown
|
||
|
http://icl.com/saxonorg.apache.xalan.xslt.extensions.RedirectxsltDocumentElem:
|
unknown
|
||
|
http://javafx.com/
|
unknown
|
||
|
http://javafx.com/vp6decoderflvdemux
|
unknown
|
||
|
https://javadl.oracle.com/webapps/download/AutoDL%s?BundleId=%s%s
|
unknown
|
||
|
http://xmlsoft.org/XSLT/Templates:
|
unknown
|
||
|
http://xmlsoft.org/XSLT/
|
unknown
|
||
|
http://xmlsoft.org/XSLT/namespace
|
unknown
|
||
|
https://javadl.oracle.com/webapps/download/AutoDL%s?BundleId=%surl%s%stmp1.8%s.0%s
|
unknown
|
||
|
http://tools.ietf.org/html/rfc3986#section-2.1.
|
unknown
|
||
|
http://www.symauth.com/cps0(
|
unknown
|
||
|
http://www.khronos.org/registry/typedarray/specs/latest/#7
|
unknown
|
There are 12 hidden URLs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\42112CAB75FB99A42AA1B59724538D4F
|
E6A0FAA8707F24847B96A498B4B323D2
|
|
|
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Config.Msi\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\44a928.rbs
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\44a928.rbsLow
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Microsoft\Installer\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\CD652FD9B1E29EA4DA638A3535A0ED78
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\4C8DADF619CA5D740B05E1226F76FA63
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\6AE4E5DFC4885214998E22F08357F5C5
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\F9E1DECACC8AA0F4FB436EB25C4D8F2A
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\199F4CEBFDDB4A5409DC07E8EE8E6F93
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\4A539F79ACA8F794CB3AC4645156B35B
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\76CEA4C74D1A47843B285055363DB428
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\F92876F756935874493A371BDBB1268F
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\2CC593B8ACAC2F041BEC090608EC13FE
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\B60667D38F5111F4491CEB12F7B53D79
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\D6E253792737D7F49B3883FEFEE87385
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\A0A7217273F14CF48BD696E4D23BBC60
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\DFD708667903E0549B9A77FD4AE5CE6B
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\AABB58E7D578CC746A1D5A1021F36519
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\6E2F64535ABAFEF48AE91CDCDD0637F2
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\7894DA332F05E524BAEEC91CA2FE73C1
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\C920D1107A2B4AC4B832A9C0A6CFF305
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\8F6B493D6DA02464D91CFE68BA51A361
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\2B29768C1F0A8BF47BFFF84A633621C6
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\49FD78469974AB64BBD74BD76BC76951
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\91A51CCC167053141B601C509F534F8A
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\077458E8B14A31B469EECB91A8D7FB99
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\6439ECDC900E5F64A911F0B1FB685104
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\6A3B34B48576E904D98EB7CC3DA4A8A3
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\01AEEE31A361C704D9B9E2CDB0D3847F
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\8CFAA496599FBCC4F89E6A417F3AE195
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\4A83B0F2E53E8B74EBC717B7EE437CE8
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\17AFE2D69C49E9F49ADC82FC7A52B482
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\4AA4ACA17A6472A43B0E8BEAF1F67808
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\43B5439C9C7713F4A8989CF4957E2270
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\60297191CF5D9784F9A53EE6A85CEF95
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\D9500682D5D00D142B63AF32499F36CE
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\3E08630174D96044D98E81C226603B7B
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\FCCBEA59D95A2B34AA8650F84FEF987D
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\EE4102B79C13080499E3DADD10EF1142
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\9E73302AE6CF3F944AF644A428A7700B
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\90B1D0CB89FD78C488B5AB566478975E
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\84381D59BEB9D514A9D2DA8EAE614357
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\F1EE2D27583800C41A61B76F5CB4710E
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\591A92305381F124481B9F82EC12FEBE
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\A065DA2933B61EC4A9A012344BD065AE
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\F3DED70F6F7DF6A459921F3FA6C82E13
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\479216615023A7643A1C4EAFAF6D941F
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\6FD27F7C4EDECCF439AE7299D127F165
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\831B68FD907FCCC4891B1EC771FB49F2
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\25E22770DCCA5124DB01297C87583C8E
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\565776F01C978E340AE0CBF5E4A57B25
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\3D634EB05D96FEE45B9D0F14F0D47B04
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\FE5FB880E1A298B4EBB4E4235A59335F
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\67022D3EC771F4B468AD36A6D71B5890
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\95503D806018540408F9E74702613CA9
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\3F5F74B4A3E89CE4DA2B9B7E388F5E2D
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\9C120A9798C469D4B99BE6B1C24DF044
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\E8EA5DB3D6BF8BC4396B9BE19AEE9489
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\14A8A93935D956D49B18276BB3113F26
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\91C83153B1BCBD543857C01EA12B5646
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\8296C4F11B54A3644854344CFEFCF597
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\57186039C253B30488E1882E47164A69
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\4F668F73D3A11B542A16C01F059DF3CD
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\1271B16D2F50AA745BDAC20DD478688C
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\4ACBC9C4C6FAD004993488C974E93B90
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\47EFE85156995EF40BA3787A6D799E5C
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\E798CE0072B49264E9706F957DAE1114
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\45CAD3363C0748E4A822643D5E85B408
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\15628A51839023847B197DBF660E3404
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\3E72D458C1736354BB46028B4BAA36B0
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\6D727A85EEA617B499B9FF27E71D89DB
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\40D98507CC6DAC44B8C5B571026F3B71
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\C2BC432A2C9833341B896CD705837B64
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\C48E1DF0CC8202D4C9321F412C38717C
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\2CA0DF2B6D8B64D48AE76F4A5B75D7FC
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\362E5230976AA684F959E1A09AFFBF92
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\3EA5CB46C851173409EB0219A6F1A7F3
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\85CF7C2C9FFA8F8418CDE7F73641B376
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\3FB2A852CF3A86A46B74A9D647AF96F0
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\C9B42FAF3B4F48B4FB57EC8FDF14571E
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\7D57302A91E9A2A4597C15DB168DC9D1
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\6E7ADD9901BBB58408C6A25AC0647FB8
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\0D3B7C9E27F8A074CB47C86161A1BD41
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\AE902F37279ABAA4283681CD48C24625
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\15FC83AE03C7A1044BCBA6FDE519B3FA
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\27252326951F30B4B82BEB26B25F03E3
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\AC3545BBA06D8DC4FB3C66C0E1A255FC
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\D12A0CA80C9CC534EA37E6EF9616A5EF
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\8884A434A797D4244BD6D998A88A6F5D
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\A2F57FCFEE35D144E892B267D82420EE
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\0FC1E76B38E607B44985649782BA7655
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\2724ACAE11EE4884796D73B4E6D4916B
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\E9C9A3B7938B4854396A2089D4BDD1D3
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\59CAF26787580634DAD958D2CF4F98B1
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\D88C1B434F587B64A857B0324BF31AE4
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\1D9A6B0CD42689B4D9E5AB3BBFD254D3
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\27D47C4875A5BC34D8A389FA50317ED5
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\5700680109800A648AB41E38BED11E75
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\CFDE712A03C2D8740A38C781F4637F63
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\996F4E10F760910429E1238AEA655DD6
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\5FC3F6CB584D9F1478EB828D16954539
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\E471C3B5D8F3D674BB7B709BF9485D53
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\0058F84912CDC77419F07339DA02AFD2
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\747E12BB5BE91B949B13C2293FDBC84B
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\5235802ECD36A5147BFDBF5F13847374
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\996334DEA321E9649BD24C07A1D2E233
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\3A8F613C11621244DA9C3C6F018E197B
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\DE3A651920213914A9D8E4C0E7F59045
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\7DB88B2D713B2FC4690347327DFB28C4
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\932B0BBACB26F9D4E81463F03D602FF4
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\137089A55322BAC49965217A119DF42E
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1002\Components\88A5BC050215EC148B138317A0CFE342
|
E6A0FAA8707F24847B96A498B4B323D2
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\client\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\dtplugin\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\bin\plugin2\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Micro K\Micro K\dist\jre\lib\
|
There are 115 hidden registries, click here to show them.