e1a3d8c2...7869 | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Downloader
Trojan
Spyware
Threat Names:
Gen:Variant.Ser.Razy.7042
Gen:Variant.Babar.17561
Mal/HTMLGen-A
...

vfqvtn.exe

Windows Exe (x86-32)

Created at 2020-01-16T21:28:00

...

Remarks (2/2)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "7 minutes, 30 seconds" to "3 minutes, 10 seconds" to reveal dormant functionality.

(0x0200003A): A task was rescheduled ahead of time to reveal dormant functionality.

Indicators

File (58)
ยป
Filename Hash Operations Category Severity
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vfqvtn.exe MD5: 0c1e3ca75491b6da7f7319e60f8034be
SHA1: 96043bda6eb96ef40a69aa945ca316f3440503ae
SHA256: e1a3d8c2c842801a2e94c3d737a0336f5cc9dd837b0cebf63bcfd96fe5aa7869
SSDeep: 3072:BGLrVCMxzXgDSdpp/518+oHdwZA5E/YfNtrISwCe3wwbA1L0nmDOBna/jlkbMhm6:2NTgDSdpp4GQEQfNVx43wwbA1YnmDX/P
ImpHash: - 		Access, Create, Delete Sample File
Malicious
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Data.bak MD5: 3067eb8025ae0262c7a5c681d7982d67
SHA1: 534976f915f2dd49adcf09677f9d38a0d0cfee63
SHA256: 9260dd9c2b2253e0a886f4d66e22c561d23604fe0010bbac8240f8fdc3aaf945
SSDeep: 96:byNQIoYnMvqyWx7pnqH+w/fVIrECuKdPraBdUDBBVWqwmKT/WTPepeWbtxYB+tCX:blkMvuzzTP6btWutle
ImpHash: - 		Access, Create, Read Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\Data\mshareDll64 MD5: 0b52f7cf3cbd22936f995b55a296fb13
SHA1: 6b122541ec858f228f922c9a73632a5fd1ad0501
SHA256: 7504d909fb236fcc87526db632700f84df3eef119997073d3391778969bd009e
SSDeep: 384:A3MIMmMfdQRyKcCr3mR3GjcI3DR4SW7oS5PH3z/lF:Gc2yKcC23Gjc8DR4Sl2PH3xF
ImpHash: - 		Access, Create, Write Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\Data\mwormDll64 MD5: eaebb1253112cd759c45521c341b1615
SHA1: 34844f26193556b73f08d26321186323b7a882d3
SHA256: aafd8ff358dbc1f1abfefa55efe52500e5c1a9193c1b313808029d40425fcb2d
SSDeep: 768:o1rAgcN/4PWUAhTqCkpk7G1ErFKdiz3nIl8S57:Kk9N/+WUAtDp3E8Y7
ImpHash: - 		Access, Create, Write Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\Data\networkDll64 MD5: 9b1f38f5282d6f4bd59103595f290493
SHA1: e555604826f0c8dd51e6aaf0ae60126768c064c0
SHA256: 63f458f39f36e537b12f465eb7d019cfab447893af0616a8c3d40611821c2e2d
SSDeep: 384:87z6U7GqQ16/VtQ/8pIyVwF3hOPv16HhtiErpfqEDartZYv5flQqOa+294:87z37B4wQgwzOPdCtiEr1qEOOv5yx
ImpHash: - 		Access, Create, Write Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\Data\pwgrab64 MD5: a9ad136b547532401b4e4026d6e07205
SHA1: 3720e1c45734406eb590fd6d27f7690042817461
SHA256: 443078f74a0a6a831fd5f5348a3323065e94284cb632078700f1acc039dbc2da
SSDeep: 24576:pWxJIWRaw2tC/70u1NjIsjYxTc8dxB576hke+CIq:QzIW0w2Du1NjD+dJm+e+CB
ImpHash: - 		Access, Create, Write Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\Data\tabDll64 MD5: 01c7925be09f98d03146e99ee7be8f68
SHA1: ef20f8cb42949fe8beec44c510782fe27c87bcf8
SHA256: 3df90616e4e2914fd119f23eaeb99c4f5542f66a0035d9a1747732159040ea79
SSDeep: 12288:L8EM1JBFBz+b48nXLxRhywwXwamXT1SuJEwJso5jt4r00TAp9aP89KUocgAIOt3:LBSf7z+pXvgmXTcwJso5RMMVoc5Iq
ImpHash: - 		Access, Create, Write Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\data\pwgrab64_configs\dpost MD5: 6be6c96c499d0925073e2ae3bf7e34df
SHA1: d9e36fcedf70f2785252091708af6c7a76846103
SHA256: 38c4ac71f25bdea86b8a8eed3561245afcb775143720fbf026b3555a3190ef82
SSDeep: 24:zz2SLkNVzPMKpMAtLwMqgyUeUfR+a/fClfNQi50mL0SBXAZr:zJLyVzLBxFqgnR+aCVjgT5
ImpHash: - 		Access, Create, Write Dropped File
Unknown
log_install.tmp MD5: f008475b33f126969f99289c46aa4aba
SHA1: 3ae5e623d774b76f59773c4b1a0281d341b56976
SHA256: 172c62a5dae0a6cd53acaf382dacdc3a89e7ef39a5cf32159f53f8cafca94175
SSDeep: 6144:+DRdk/aRqDoepJkaDC0vu4psV+odLlonFQvpL+BIiOQhRfaweEeRe0in:Wk/aRqDoAqaDCKs5R2nFQvRKR32bi
ImpHash: f59d56ee665fe6d5f4a2507d251d8bf6 		Access, Create, Write Downloaded File
Unknown
settings.ini MD5: 7e20ed78388bbe597750cf89025f5432
SHA1: ad4cbdc627fe4138a0ea23b2ba3d0352b4578a26
SHA256: 62816d2dfa4198b1e2b467f53aa20904c6bea50126a0446e24d6ae650d5b5436
SSDeep: 192:ohcdyt+C7+LRvQY9dV6X0lLZFdQnUTQeMTns693nH7zdVxRpWG3:oiyH7YiSdgXElo+PMTs6JH7BVXpV
ImpHash: - 		Access, Create, Read, Write Dropped File
Unknown
settings.ini MD5: cfbca4c1f12c2908b39f14143cffc82e
SHA1: fbec2560e4f0b8b682fa57cceb3cf3d10c25b072
SHA256: 7c64fe385cedc48f01db1d5db72c86020003f600f7ab1e6b14b613907fd402cb
SSDeep: 192:ohcdyt+C7+LRvQY9dV6X0lLZFdQnUTQeMQqaC4PfNavFVc2pWG3:oiyH7YiSdgXElo+PMkC4P6FK2pV
ImpHash: - 		Dropped File
Unknown
install.txt MD5: 4625d030e0270c2016ff4616bf21d402
SHA1: 396da2de65d8e516cdc6484d2a6944e51f24a04e
SHA256: 76904f8379749a1aea8eb72c903e0796e77c8f8b786f6bbe375570083b1039b8
SSDeep: 6144:+DRdk/aRqDoepJkaDC0vuwpsV+odLlonFQvpL+BIiOQhRfaweEeRe0in:Wk/aRqDoAqaDCis5R2nFQvRKR32bi
ImpHash: f59d56ee665fe6d5f4a2507d251d8bf6 		Access, Create, Write
Not Queried
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Login Data.bak MD5: 29844404ae855e9df054833f71888eb1
SHA1: 3e86f08def08fc14ddec0227d0643319562666db
SHA256: c381401ea96dfe9b926126dcbbc0dd6ab541dbf549732cc6c66f20096b1f663e
SSDeep: 24:LLijhJ0KL7G0TMJHUyyJtmCm0u6lOKQAE9V8FsffDVOzeCmly6UwcTa/HMQW:wz+JH3yJUhJCVE9V8FsXhFlNU1Ts3W
ImpHash: - 		Access, Create, Read Dropped File
Whitelisted
C:\ - Access
Not Available
C:\Program Files (x86)\\UltraVNC\ultravnc.ini - Access, Read
Not Available
C:\Program Files (x86)\uvnc bvba\UltraVNC\ultravnc.ini - Access, Read
Not Available
C:\Program Files\\UltraVNC\ultravnc.ini - Access, Read
Not Available
C:\Program Files\uvnc bvba\UltraVNC\ultravnc.ini - Access, Read
Not Available
C:\Users - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Login Data - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Login Data.bak-journal - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Login Data.bak-wal - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Data - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Data.bak-journal - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Google\Chrome\User Data\Default\Web Data.bak-wal - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth - Access, Create
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\data\networkDll64_configs\ - Access, Create
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\data\pwgrab64_configs\ - Access, Create
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\gpuhealth\data\tabDll64_configs\ - Access, Create
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\desktop.ini - Access, Read
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 - Access
Not Available
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WindowsPowerShell\profile.ps1 - Access
Not Available
C:\Windows - Access
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0 - Access
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\Certificate.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\Diagnostics.Format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\DotNetTypes.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\FileSystem.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\GetEvent.types.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\Help.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1 - Access
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\PowerShellCore.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\PowerShellTrace.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\Registry.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\WSMan.format.ps1xml - Access, Read
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.config - Access
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe - Access
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\profile.ps1 - Access
Not Available
C:\Windows\System32\WindowsPowerShell\v1.0\types.ps1xml - Access, Read
Not Available
C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll - Access
Not Available
C:\Windows\system32 - Access
Not Available
C:\Windows\system32\cmd.exe - Access
Not Available
C:\Windows\system32\net1.exe - Access
Not Available
C:\Windows\system32\svchost.exe - Access
Not Available
data\ - Access, Create
Not Available
ver.txt - Access
Not Available
Registry (624)
ยป
Registry Key Name Operations
HKEY_CURRENT_USER\Environment Access
HKEY_CURRENT_USER\Environment\PSMODULEPATH Access, Read
HKEY_CURRENT_USER\SOFTWARE\ORL\WinVNC3 Access
HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Sessions\ Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2 Access
HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook Access
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\05cb6f136411cf4daf1f74e966b0a7dc Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\3517490d76624c419a828607e2a54604 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\4b62e5f8c092a64ea9b79fd559a5a15e Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\609a848a708f544697003a34105400ef Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\63cba20b08018a458b6edb5d87fb54da Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\828cd3a417cead4ab3a214070dce1c3d Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\8503020000000000c000000000000046 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\88d17fec23cbdd4fb54ad1d34c0dce09 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9207f3e0a3b11019908b08002b2a56c2 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Server Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Server Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Port Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Server Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 User Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Port Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Server Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP User Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\Email Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\a533ec91a4f74549ac2130b6908c8aac Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\b70c659765f94740b657fee657d05ab4 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\cce6b8ce16bac4458e5e40e3530d6f1d Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\dd7f40a823cda64b92e9a96e9e46e406 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\ddb0922fc50b8d42be5a821ede840761 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\f86ed2903a4a11cfb57e524153480001 Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E} Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary Access
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\Email Access, Read
HKEY_CURRENT_USER\Software\OpenVPN-GUI\Configs Access
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System Access
HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions Access
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet Access
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell\path Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\PipelineMaxStackSizeMB Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PRJPROR\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUSR\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.VISIOR\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37B8F9C7-03FB-3253-8781-2517C99D7C00}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0015-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0016-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0018-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0019-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001A-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001B-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{0242505C-4E90-407F-9299-B5B275F50D86}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-1000-0000000FF1CE}_Office14.VISIOR_{0242505C-4E90-407F-9299-B5B275F50D86}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-040C-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUSR_{B51389C8-2890-4633-81D8-47D2A7402274}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-040C-1000-0000000FF1CE}_Office14.VISIOR_{B51389C8-2890-4633-81D8-47D2A7402274}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0C0A-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0C0A-1000-0000000FF1CE}_Office14.PROPLUSR_{1779650B-2E44-4A19-8DF6-3866D645764A}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0C0A-1000-0000000FF1CE}_Office14.VISIOR_{1779650B-2E44-4A19-8DF6-3866D645764A}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{270CA0B9-9881-44DB-BC3B-37C7E66A044A}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0409-1000-0000000FF1CE}_Office14.VISIOR_{270CA0B9-9881-44DB-BC3B-37C7E66A044A}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0043-0000-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0043-0000-1000-0000000FF1CE}_Office14.VISIOR_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0043-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0043-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{FCD1C311-8B02-4DBD-BA46-1079C629577E}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0043-0409-1000-0000000FF1CE}_Office14.VISIOR_{FCD1C311-8B02-4DBD-BA46-1079C629577E}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0044-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0054-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0054-0409-1000-0000000FF1CE}_Office14.VISIOR_{7DC2B20B-31B9-4C7C-B8DC-8492A9A3095E}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{516CA4A9-98E6-4F77-A863-CBD8487368E4}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0409-1000-0000000FF1CE}_Office14.VISIOR_{516CA4A9-98E6-4F77-A863-CBD8487368E4}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00A1-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00B4-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00B4-0409-1000-0000000FF1CE}_Office14.PRJPROR_{316A864B-0547-40CE-B136-B02B4D18BF09}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00BA-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0115-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0115-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{516CA4A9-98E6-4F77-A863-CBD8487368E4}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0115-0409-1000-0000000FF1CE}_Office14.VISIOR_{516CA4A9-98E6-4F77-A863-CBD8487368E4}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0117-0409-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91140000-0011-0000-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91140000-003B-0000-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91140000-003B-0000-1000-0000000FF1CE}_Office14.PRJPROR_{E6F88893-86F0-4CFB-B7E0-733575D1DEB4}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91140000-0057-0000-1000-0000000FF1CE}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{91140000-0057-0000-1000-0000000FF1CE}_Office14.VISIOR_{9081486B-B26D-42DB-8D31-81C525A9526A}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{929FBD26-9020-399B-9A7A-751D61F0B942}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\StackVersion Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\RealVNC\WinVNC4 Access
HKEY_LOCAL_MACHINE\SOFTWARE\RealVNC\vncserver Access
HKEY_LOCAL_MACHINE\SOFTWARE\TigerVNC\WinVNC4 Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest\UseLogonCredential Access, Read, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Data\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking 4.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET Data Provider for Oracle\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET Data Provider for SqlServer\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET Memory Cache 4.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NETFramework\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\1394ohci\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACPI\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ALG\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ASP.NET\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ASP.NET_4.0.30319\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AcpiPmi\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdobeFlashPlayerUpdateSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AeLookupSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AmdK8\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AmdPPM\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppIDSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppID\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Appinfo\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AsyncMac\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioEndpointBuilder\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioSrv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AxInstSV\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BDESVC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHMODEM\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BattC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Beep\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrFiltLo\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrFiltUp\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrSerWdm\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrUsbMdm\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrUsbSer\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Brserid\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CLFS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CNG\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSysApp\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertPropSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CmBatt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Compbatt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CompositeBus\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CscService\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DCLocator\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DXGKrnl\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DcomLaunch\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DfsC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Disk\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\E1G60\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EFS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ESENT\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EapHost\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ErrDev\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\HardwareEvents Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\HardwareEvents\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Internet Explorer Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Internet Explorer\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Key Management Service Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Key Management Service\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Media Center Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Media Center\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\OAlerts Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\OAlerts\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Windows PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Windows PowerShell\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventSystem\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FDResPub\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fax\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FileInfo\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Filetrace\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FltMgr\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FontCache3.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FontCache\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FsDepends\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fs_Rec\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HDAudBus\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HdAudAddService\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HidBatt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HidBth\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HidIr\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HidUsb\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HomeGroupListener\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HomeGroupProvider\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HpSAMD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPBusEnum\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPMIDRV\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPNAT\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRENUM\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IpFilterDriver\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KSecDD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KSecPkg\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KeyIso\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KtmRm\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LSI_FC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LSI_SAS2\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LSI_SAS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LSI_SCSI\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lsa\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MMCSS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MRxDAV\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC Bridge 3.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC Bridge 4.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSKSSRV\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSPCLOCK\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSPQM\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSCNTRS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSTEE\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MTConfig\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mcx2Svc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MegaSR\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Microsoft SharePoint Workspace Audit Service\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Modem\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MozillaMaintenance\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MsRPC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Msfs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mup\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDIS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDProxy\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NativeWifiP\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NdisCap\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NdisTapi\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NdisWan\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ndisuio\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBIOS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetMsmqActivator\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetPipeActivator\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetTcpActivator\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetTcpPortSharing\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netman\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Npfs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ntfs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Null\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Outlook\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PEAUTH\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Parport\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PcaSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PeerDistSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PerfHost\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PlugPlay\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Power\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PptpMiniport\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Processor\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProfSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProtectedStorage\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Psched\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVE\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVEdrv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPCDD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPDD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPDR\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPENCDD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPNP\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPREFMP\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPWD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAcd\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAgileVpn\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasPppoe\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasSstp\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Rasl2tp\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcEptMapper\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardSvr\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SDRSVC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMSvcHost 3.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMSvcHost 4.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMPTRAP\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SamSs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensrSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Serenum\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Serial\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelEndpoint 3.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelOperation 3.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelService 3.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ShellHWDetection\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SiSRaid2\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SiSRaid4\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Smb\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SstpSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\StorSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMain\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TBS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6TUNNEL\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIPTUNNEL\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TDPIPE\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TDTCP\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\THREADORDER\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TSDDD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TabletInputService\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\{ECF237EA-3AD2-4D35-B4FE-425EFF427D86} Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\{ECF237EA-3AD2-4D35-B4FE-425EFF427D86}\Dhcpv6ClassId Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ECF237EA-3AD2-4D35-B4FE-425EFF427D86} Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{ECF237EA-3AD2-4D35-B4FE-425EFF427D86}\DhcpClassId Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermDD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrkWks\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TsUsbFlt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TsUsbGD\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGTHRSVC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGatherer\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UI0Detect\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmPass\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UxSms\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VMBusHID\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VaultSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VgaSave\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WANARP\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WIMMount\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPCSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPDBusEnum\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearchIdxPi\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WacomPen\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wanarpv6\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WbioSrvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WcsPlugInService\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wd\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wdf01000\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiServiceHost\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiSystemHost\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WfpLwf\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Workflow Foundation 3.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Workflow Foundation 4.0.0.0\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winmgmt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wlansvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmiAcpi\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmiApRpl\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WudfPf\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WwanSvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adp94xx\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adpahci\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adpu320\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adsi\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\agp440\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aliide\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amdide\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amdsata\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amdsbs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amdxata\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\arc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\arcsas\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aspnet_state\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\atapi\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b06bdrv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b57nd60a\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\blbdrive\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bowser\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cdfs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cdrom\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\circlass\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\clr_optimization_v2.0.50727_32\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\clr_optimization_v2.0.50727_64\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\clr_optimization_v4.0.30319_32\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\clr_optimization_v4.0.30319_64\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdide\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crcdisk\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\defragsvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\discache\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dmvsc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot3svc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\drmkaud\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ebdrv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehRecvr\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehSched\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\elxstor\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eventlog\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\exfat\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fastfat\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fdPHost\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fdc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\flpydisk\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fvevol\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gagp30kx\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hcw85cir\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidserv\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hkmsvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hwpolicy\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iScsiPrt\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iaStorV\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\idsvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iirsp\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\inetaccs\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\intelide\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\intelppm\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\isapnp\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdclass\DisplayName Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\DisplayName Access, Read
For performance reasons, the remaining 124 entries are omitted.
The remaining entries can be found in ioc_export.txt or ioc_export.json .
Mutex (1)
ยป
Mutex Name Operations
Global\386A96845A11128 Access
Domain (3)
ยป
Domain Sources Severity
api.ip.sb Function Log
Blacklisted
189.167.222.95.zen.spamhaus.org PCAP, Function Log
Unknown
xduwtfono Function Log
Unknown
URL (40)
ยป
URL Operations Category Severity
api.ip.sb/ip GET Contacted
Blacklisted
107.173.26.231/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/mshareDll64/ GET Contacted
Unknown
107.173.26.231/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/mwormDll64/ GET Contacted
Unknown
107.173.26.231/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/networkDll64/ GET Contacted
Unknown
107.173.26.231/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/pwgrab64/ GET Contacted
Unknown
107.173.26.231/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/tabDll64/ GET Contacted
Unknown
172.245.186.147/images/lastimg.png GET Contacted
Unknown
172.245.186.147/images/mini.png GET Contacted
Unknown
203.176.135.102/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/81/ POST Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/0/Windows 7 x64 SP1/1083/95.222.167.189/1AE717BD464F4D285AA14E7BD4C1F7EA7FA0B3C79A9E80BF3A068E0746E60CA3/C84yumgaUME820wum/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/1/1vnhdbZRNJB73ztnlfbVTLJD51xtphfX/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/1/420ywokecUOME62ws/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/1/RLF75zvphbTRJHB3xtphdbZVPNLD91z/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/1/kigaYWOGA2wuokgYUQICNJD7/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/1/woicWOKIA20yskiaSKGA2womk/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/10/62/90985299/1/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/10/62/90985308/1/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/10/62/90985318/1/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/10/62/90985329/1/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/10/62/LTZFLRZHTBNXFPXJT/1/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/14/DNSBL/listed/0/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/14/NAT%20status/client%20is%20behind%20NAT/0/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/14/user/SYSTEM/0/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/dpost/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/spk/ GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/63/mshareDll/infect/// GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/63/mwormDll/infect/// GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/63/networkDll/start/// GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/63/tabDll/infect/// GET Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/64/pwgrab/DEBG/browser/ POST Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/64/pwgrab/DPST/browser/ POST Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/64/pwgrab/VERS/browser/ POST Contacted
Unknown
212.109.220.111/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/64/tabDll/InfectMachine/infect/ POST Contacted
Unknown
23.95.231.187/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/0/Windows 7 x64 SP1/1083/95.222.167.189/1AE717BD464F4D285AA14E7BD4C1F7EA7FA0B3C79A9E80BF3A068E0746E60CA3/uskcWSKE80ywskcYSOGA2yskcUMIECA/ GET Contacted
Unknown
23.95.231.187/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/14/NAT%20status/client%20is%20behind%20NAT/0/ GET Contacted
Unknown
23.95.231.187/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/14/path/C:%5CUsers%5C5p5NrGJn0jS%20HALPmcxz%5CAppData%5CRoaming%5Cgpuhealth%5Cvdqvtl.exe/0/ GET Contacted
Unknown
23.95.231.187/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/14/user/SYSTEM/0/ GET Contacted
Unknown
23.95.231.187/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/23/1000495/ GET Contacted
Unknown
23.95.231.187/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/5/spk/ GET Contacted
Unknown
23.95.231.187/ddd5/XDUWTFONO_W617601.313667336C1F720D3DAA9B5A6F9B8891/63/systeminfo/GetSystemInfo/c3VjY2Vzcw==/systeminfo/ POST Contacted
Unknown
IP (265)
ยป
IP Protocols Sources
107.173.26.231 TCP, HTTPS PCAP, Function Log
127.0.0.10 DNS PCAP, Function Log
127.0.0.3 DNS PCAP, Function Log
127.0.0.4 DNS PCAP, Function Log
172.245.186.147 TCP, HTTP PCAP, Function Log
185.255.55.29 TCP, HTTPS PCAP, Function Log
192.168.0.1 TCP, UDP, DNS PCAP, Function Log
192.168.0.10 TCP Function Log
192.168.0.100 TCP Function Log
192.168.0.101 TCP Function Log
192.168.0.102 TCP Function Log
192.168.0.103 TCP Function Log
192.168.0.104 TCP Function Log
192.168.0.105 TCP Function Log
192.168.0.106 TCP Function Log
192.168.0.107 TCP Function Log
192.168.0.108 TCP Function Log
192.168.0.109 TCP Function Log
192.168.0.11 TCP Function Log
192.168.0.110 TCP Function Log
192.168.0.111 TCP Function Log
192.168.0.112 TCP Function Log
192.168.0.113 TCP Function Log
192.168.0.114 TCP Function Log
192.168.0.115 TCP Function Log
192.168.0.116 TCP Function Log
192.168.0.117 TCP Function Log
192.168.0.118 TCP Function Log
192.168.0.119 TCP Function Log
192.168.0.12 TCP Function Log
192.168.0.120 TCP Function Log
192.168.0.121 TCP Function Log
192.168.0.122 TCP Function Log
192.168.0.123 TCP Function Log
192.168.0.124 TCP Function Log
192.168.0.125 TCP Function Log
192.168.0.126 TCP Function Log
192.168.0.127 TCP Function Log
192.168.0.128 TCP Function Log
192.168.0.129 TCP Function Log
192.168.0.13 TCP Function Log
192.168.0.130 TCP Function Log
192.168.0.131 TCP Function Log
192.168.0.132 TCP Function Log
192.168.0.133 TCP Function Log
192.168.0.134 TCP Function Log
192.168.0.135 TCP Function Log
192.168.0.136 TCP Function Log
192.168.0.137 TCP Function Log
192.168.0.138 TCP Function Log
192.168.0.139 TCP Function Log
192.168.0.14 TCP Function Log
192.168.0.140 TCP Function Log
192.168.0.141 TCP Function Log
192.168.0.142 TCP Function Log
192.168.0.143 TCP Function Log
192.168.0.144 TCP Function Log
192.168.0.145 TCP Function Log
192.168.0.146 TCP Function Log
192.168.0.147 TCP Function Log
192.168.0.148 TCP Function Log
192.168.0.149 TCP Function Log
192.168.0.15 TCP Function Log
192.168.0.150 TCP Function Log
192.168.0.151 TCP Function Log
192.168.0.152 TCP Function Log
192.168.0.153 TCP Function Log
192.168.0.154 TCP Function Log
192.168.0.155 TCP Function Log
192.168.0.156 TCP Function Log
192.168.0.157 TCP Function Log
192.168.0.158 TCP Function Log
192.168.0.159 TCP Function Log
192.168.0.16 TCP Function Log
192.168.0.160 TCP Function Log
192.168.0.161 TCP Function Log
192.168.0.162 TCP Function Log
192.168.0.163 TCP Function Log
192.168.0.164 TCP Function Log
192.168.0.165 TCP Function Log
192.168.0.166 TCP Function Log
192.168.0.167 TCP Function Log
192.168.0.168 TCP Function Log
192.168.0.169 TCP Function Log
192.168.0.17 TCP Function Log
192.168.0.170 TCP Function Log
192.168.0.171 TCP Function Log
192.168.0.172 TCP Function Log
192.168.0.173 TCP, DNS Function Log
192.168.0.174 TCP Function Log
192.168.0.175 TCP Function Log
192.168.0.176 TCP Function Log
192.168.0.177 TCP Function Log
192.168.0.178 TCP Function Log
192.168.0.179 TCP Function Log
192.168.0.18 TCP Function Log
192.168.0.180 TCP Function Log
192.168.0.181 TCP Function Log
192.168.0.182 TCP Function Log
192.168.0.183 TCP Function Log
192.168.0.184 TCP Function Log
192.168.0.185 TCP Function Log
192.168.0.186 TCP Function Log
192.168.0.187 TCP Function Log
192.168.0.188 TCP Function Log
192.168.0.189 TCP Function Log
192.168.0.19 TCP Function Log
192.168.0.190 TCP Function Log
192.168.0.191 TCP Function Log
192.168.0.192 TCP Function Log
192.168.0.193 TCP Function Log
192.168.0.194 TCP Function Log
192.168.0.195 TCP Function Log
192.168.0.196 TCP Function Log
192.168.0.197 TCP Function Log
192.168.0.198 TCP Function Log
192.168.0.199 TCP Function Log
192.168.0.2 TCP Function Log
192.168.0.20 TCP Function Log
192.168.0.200 TCP Function Log
192.168.0.201 TCP Function Log
192.168.0.202 TCP Function Log
192.168.0.203 TCP Function Log
192.168.0.204 TCP Function Log
192.168.0.205 TCP Function Log
192.168.0.206 TCP Function Log
192.168.0.207 TCP Function Log
192.168.0.208 TCP Function Log
192.168.0.209 TCP Function Log
192.168.0.21 TCP Function Log
192.168.0.210 TCP Function Log
192.168.0.211 TCP Function Log
192.168.0.212 TCP Function Log
192.168.0.213 TCP Function Log
192.168.0.214 TCP Function Log
192.168.0.215 TCP Function Log
192.168.0.216 TCP Function Log
192.168.0.217 TCP Function Log
192.168.0.218 TCP Function Log
192.168.0.219 TCP Function Log
192.168.0.22 TCP Function Log
192.168.0.220 TCP Function Log
192.168.0.221 TCP Function Log
192.168.0.222 TCP Function Log
192.168.0.223 TCP Function Log
192.168.0.224 TCP Function Log
192.168.0.225 TCP Function Log
192.168.0.226 TCP Function Log
192.168.0.227 TCP Function Log
192.168.0.228 TCP Function Log
192.168.0.229 TCP Function Log
192.168.0.23 TCP Function Log
192.168.0.230 TCP Function Log
192.168.0.231 TCP Function Log
192.168.0.232 TCP Function Log
192.168.0.233 TCP Function Log
192.168.0.234 TCP Function Log
192.168.0.235 TCP Function Log
192.168.0.236 TCP Function Log
192.168.0.237 TCP Function Log
192.168.0.238 TCP Function Log
192.168.0.239 TCP Function Log
192.168.0.24 TCP Function Log
192.168.0.240 TCP Function Log
192.168.0.241 TCP Function Log
192.168.0.242 TCP Function Log
192.168.0.243 TCP Function Log
192.168.0.244 TCP Function Log
192.168.0.245 TCP Function Log
192.168.0.246 TCP Function Log
192.168.0.247 TCP Function Log
192.168.0.248 TCP Function Log
192.168.0.249 TCP Function Log
192.168.0.25 TCP Function Log
192.168.0.250 TCP Function Log
192.168.0.251 TCP Function Log
192.168.0.252 TCP Function Log
192.168.0.253 TCP Function Log
192.168.0.254 TCP Function Log
192.168.0.255 TCP Function Log
192.168.0.26 TCP Function Log
192.168.0.27 TCP Function Log
192.168.0.28 TCP Function Log
192.168.0.29 TCP Function Log
192.168.0.3 TCP Function Log
192.168.0.30 TCP Function Log
192.168.0.31 TCP Function Log
192.168.0.32 TCP Function Log
192.168.0.33 TCP Function Log
192.168.0.34 TCP Function Log
192.168.0.35 TCP Function Log
192.168.0.36 TCP Function Log
192.168.0.37 TCP Function Log
192.168.0.38 TCP Function Log
192.168.0.39 TCP Function Log
192.168.0.4 TCP Function Log
192.168.0.40 TCP Function Log
192.168.0.41 TCP Function Log
192.168.0.42 TCP Function Log
192.168.0.43 TCP Function Log
192.168.0.44 TCP Function Log
192.168.0.45 TCP Function Log
192.168.0.46 TCP Function Log
192.168.0.47 TCP Function Log
192.168.0.48 TCP Function Log
192.168.0.49 TCP Function Log
192.168.0.5 TCP Function Log
192.168.0.50 TCP Function Log
192.168.0.51 TCP Function Log
192.168.0.52 TCP Function Log
192.168.0.53 TCP Function Log
192.168.0.54 TCP Function Log
192.168.0.55 TCP Function Log
192.168.0.56 TCP Function Log
192.168.0.57 TCP Function Log
192.168.0.58 TCP Function Log
192.168.0.59 TCP Function Log
192.168.0.6 TCP Function Log
192.168.0.60 TCP Function Log
192.168.0.61 TCP Function Log
192.168.0.62 TCP Function Log
192.168.0.63 TCP Function Log
192.168.0.64 TCP Function Log
192.168.0.65 TCP Function Log
192.168.0.66 TCP Function Log
192.168.0.67 TCP Function Log
192.168.0.68 TCP Function Log
192.168.0.69 TCP Function Log
192.168.0.7 TCP Function Log
192.168.0.70 TCP Function Log
192.168.0.71 TCP Function Log
192.168.0.72 TCP Function Log
192.168.0.73 TCP Function Log
192.168.0.74 TCP Function Log
192.168.0.75 TCP Function Log
192.168.0.76 TCP Function Log
192.168.0.77 TCP Function Log
192.168.0.78 TCP Function Log
192.168.0.79 TCP Function Log
192.168.0.8 TCP Function Log
192.168.0.80 TCP Function Log
192.168.0.81 TCP Function Log
192.168.0.82 TCP Function Log
192.168.0.83 TCP Function Log
192.168.0.84 TCP Function Log
192.168.0.85 TCP Function Log
192.168.0.86 TCP Function Log
192.168.0.87 TCP Function Log
192.168.0.88 TCP Function Log
192.168.0.89 TCP Function Log
192.168.0.9 TCP Function Log
192.168.0.90 TCP Function Log
192.168.0.91 TCP Function Log
192.168.0.92 TCP Function Log
192.168.0.93 TCP Function Log
192.168.0.94 TCP Function Log
192.168.0.95 TCP Function Log
192.168.0.96 TCP Function Log
192.168.0.97 TCP Function Log
192.168.0.98 TCP Function Log
192.168.0.99 TCP Function Log
203.176.135.102 TCP, HTTP PCAP, Function Log
212.109.220.111 TCP, HTTPS PCAP, Function Log
23.95.231.187 TCP, HTTPS PCAP, Function Log
fe80:0000:0000:0000:a89e:d7fe:9a2e:2a1e DNS Function Log
Export to TXT Export to JSON
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image