Test.Interesting

By CagedTech in Crack/Activator bad

Threat Scorecard

Popularity Rank: 7,898
Threat Level: 80 % (High)
Infected Computers: 8,649
First Seen: August 19, 2021
Last Seen: July 14, 2026
OS(es) Affected: Windows

The detection of Test.Interesting on your system indicates a potential security threat that requires immediate attention. This detection name suggests a Trojan-type threat, which is a broad category of malware designed to deceive users into installing or running it, often by disguising itself as legitimate software. Trojans can lead to a variety of malicious activities, including data theft, unauthorized access to the system, and further malware distribution.

What Is Test.Interesting?

Given the nature of the detection, Test.Interesting is classified as a Trojan-type threat. Trojans are known for their versatility and can be used for various malicious purposes, including but not limited to, stealing sensitive information, installing additional malware, or providing unauthorized access to the infected system. The specific capabilities and intentions behind Test.Interesting would depend on its design and the goals of its creators, which can vary widely among different types of Trojans.

How Test.Interesting Operates

Trojans, in general, operate by exploiting vulnerabilities in software or human psychology to gain access to a system. They can be distributed through various means, including email attachments, downloads from untrusted websites, infected software downloads, or exploits of operating system and application vulnerabilities. Once installed, a Trojan can execute a range of malicious activities, depending on its programming. This can include keylogging, screen scraping, data exfiltration, or even turning the infected machine into a botnet node. The operational specifics of Test.Interesting would align with these general tactics but could be tailored to achieve specific malicious objectives.

Symptoms of Infection

Symptoms of a Trojan infection can be subtle and may not always be immediately apparent. Common indicators include unusual system behavior, such as unexpected pop-ups, slow system performance, or frequent crashes. Additionally, users might notice unfamiliar programs or toolbars in their browsers, changes in system settings, or unexpected network activity. However, some Trojans are designed to operate stealthily, making them difficult to detect without specific security tools.

How to Remove Test.Interesting

  1. Boot your system into Safe Mode with Networking to limit the malware's ability to interfere with the removal process.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove Test.Interesting and any associated malware.
  3. Manually uninstall any recently installed programs that you do not recognize or that were installed around the time the malware was detected.
  4. Reset your web browsers (e.g., Chrome, Firefox, Edge) to their default settings to remove any malicious extensions or settings changes made by the malware.
  5. Reboot your system and perform another full scan with your anti-malware tool to ensure that all components of the malware have been removed.

Conclusion

The detection and removal of Test.Interesting highlight the importance of maintaining robust security practices. This includes keeping your operating system and software up to date, using reputable anti-malware tools, being cautious with email attachments and downloads, and regularly backing up important data. By following the removal steps outlined and adopting a proactive approach to security, you can help protect your system against Test.Interesting and other malware threats, ensuring the integrity and safety of your digital environment.

Analysis Report

General information

Family Name: Test.Interesting
Signature status: No Signature

Known Samples

MD5: 8710dbccb8291585dbc9163761d5be49
SHA1: 78d89fff52b3bddc78fe03615e57e047f8cd3e43
SHA256: B609C31958238C19A13D138B91A2683EB1E4D5F3C4EA9563F697BE832E451B25
File Size: 1.21 MB, 1206272 bytes
MD5: ea43a0a5d43b7da29f17c3f9f578c554
SHA1: 20ed2d44bf4f0d4c0ca395aa331b27fbd64b418f
SHA256: 1A5C8CEF9EA03A7381450195EAF915BB99AAF2E38933A295BEB7DBF93B2F436E
File Size: 294.91 KB, 294912 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have security information
  • File is .NET application
  • File is 32-bit executable
  • File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
Show More
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

Windows PE Version Information

Name Value
Assembly Version 1.0.0.0
File Description PoC_AbortHydration_ArbitraryRegKey_EoP
File Version 1.0.0.0
Internal Name Mini_Runner.exe
Legal Copyright Copyright © 2020
Original Filename Mini_Runner.exe
Product Name PoC_AbortHydration_ArbitraryRegKey_EoP
Product Version 1.0.0.0

File Traits

  • .NET
  • Agile.net
  • Fody
  • HighEntropy
  • No Version Info
  • UPX!
  • x86

Block Information

Total Blocks: 36
Potentially Malicious Blocks: 14
Whitelisted Blocks: 22
Unknown Blocks: 0

Visual Map

x x x 0 x x x x x x x x x 0 0 0 0 0 0 0 0 0 x x 0 0 0 0 0 0 0 0 0 0 0 0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Files Modified

File Attributes
c:\programdata\mp_1b9fbebf.cfg Generic Write,Read Attributes

Registry Modifications

Key::Value Data API Name
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps::symboliclinkvalue \Registry\User\.DEFAULT\Volatile Environment RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
Show More
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKU\.DEFAULT\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::enabled  RegNtPreCreateKey
HKCU\software\policies\microsoft\cloudfiles\blockedapps\83bcf1b1dc99187a2a17c263bd2f45d54b81c11485c29cf3e3f1e6aeba9a9d7::imagepath \Device\HarddiskVolume2\Users\user\Downloads\78d89fff52b3bddc78fe03615e57e047f8cd3e43_0001206272 RegNtPreCreateKey

385 additional registry modifications are not displayed above.

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtAssociateWaitCompletionPacket
  • ntdll.dll!NtCancelTimer2
  • ntdll.dll!NtCancelWaitCompletionPacket
  • ntdll.dll!NtClearEvent
  • ntdll.dll!NtClose
  • ntdll.dll!NtCompareSigningLevels
Show More
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateIoCompletion
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreatePrivateNamespace
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtCreateThreadEx
  • ntdll.dll!NtCreateTimer2
  • ntdll.dll!NtCreateWaitCompletionPacket
  • ntdll.dll!NtCreateWorkerFactory
  • ntdll.dll!NtDelayExecution
  • ntdll.dll!NtDeleteKey
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtEnumerateValueKey
  • ntdll.dll!NtFlushProcessWriteBuffers
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtGetCachedSigningLevel
  • ntdll.dll!NtGetContextThread
  • ntdll.dll!NtGetWriteWatch
  • ntdll.dll!NtImpersonateAnonymousToken
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtNotifyChangeKey
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenProcess
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtOpenThreadTokenEx
  • ntdll.dll!NtPowerInformation
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryDefaultLocale
  • ntdll.dll!NtQueryDirectoryFileEx
  • ntdll.dll!NtQueryFullAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationJobObject
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryObject
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryVolumeInformationFile
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadFile
  • ntdll.dll!NtReadRequestData
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtResetWriteWatch
  • ntdll.dll!NtResumeThread
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSetSecurityObject
  • ntdll.dll!NtSetTimer2
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtSuspendThread
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtUnsubscribeWnfStateChange
  • ntdll.dll!NtWaitForMultipleObjects
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWorkerFactoryWorkerReady
  • ntdll.dll!NtWriteFile
  • ntdll.dll!NtYieldExecution
  • UNKNOWN
User Data Access
  • GetUserDefaultLocaleName
  • GetUserObjectInformation

Trending

Most Viewed

Loading...