HTTP/1.1 200 OK
{
- "error": false,
- "data": {
- "analysis": {
- "uuid": "cb81908f-f6b0-4bf4-bac0-a3b05ee0adaf",
- "permanentUrl": https://app.any.run/tasks/cb81908f-f6b0-4bf4-bac0-a3b05ee0adaf,
- "reports": {5 items},
- "sandbox": {2 items},
- "duration": 120,
- "creation": 1613126204332,
- "creationText": "2021-02-12T10:36:44.332Z",
- "tags": [],
- "options": {
- "timeout": 120,
- "additionalTime": 0,
- "fakeNet": false,
- "heavyEvasion": false,
- "mitm": false,
- "tor": {
- "used": false,
- "geo": "fastest"
2 items}, - "presentation": false,
- "video": false,
- "hideSource": false,
- "network": true,
- "privacy": "public",
- "privateSample": false,
- "automatization": {1 item}
13 items}, - "scores": {
- "verdict": {
- "score": 0,
- "threatLevel": 0,
- "threatLevelText": "No threats detected"
3 items}, - "specs": {
- "injects": false,
- "autostart": false,
- "cpuOverrun": false,
- "crashedApps": false,
- "crashedTask": false,
- "debugOutput": false,
- "executableDropped": false,
- "exploitable": false,
- "lowAccess": false,
- "memOverrun": false,
- "multiprocessing": false,
- "networkLoader": false,
- "networkThreats": false,
- "rebooted": false,
- "serviceLauncher": false,
- "spam": false,
- "staticDetections": false,
- "stealing": false,
- "suspStruct": false,
- "torUsed": false,
- "privEscalation": false,
- "notStarted": false
22 items}
2 items}, - "content": {
- "mainObject": {
- "type": "file",
- "permanentUrl": https://content.any.run/tasks/cb81908f-f6b0-4bf4-bac0-a3b05ee0adaf/download/files/b549d606-e875-415b-82fe-1d7211315559,
- "filename": 1.docx,
- "hashes": {
- "md5": "20e591688a00923b47f4fc9e8d822d5d",
- "sha1": "aa238889252ea97de5405939c17408cebfea5c5f",
- "sha256": "df3b43e02517d65a51dfbddbfdc05f9971b2629635b285c5e6f408a0c08c6dcd",
- "ssdeep": "192:9FzkQzod1w6fkz7HHCRzwMesAKCPQw1n62hNPdEre2xfCm2QxmkVykgtociY4rLy:9Fdz/3gwfn62ir9VFqaH3E1LsnREpHpn"
4 items}, - "info": {
- "ext": "docx",
- "file": "Microsoft Word 2007+",
- "mime": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
- "exif": {
- "ZIP": {
- "ZipRequiredVersion": 20,
- "ZipBitFlag": "0x0008",
- "ZipCompression": "Deflated",
- "ZipModifyDate": "2020:09:13 09:58:00",
- "ZipCRC": "0x3cdd8b4f",
- "ZipCompressedSize": 166,
- "ZipUncompressedSize": 284,
- "ZipFileName": "_rels/.rels"
8 items}
1 item}, - "trid": [
- {
- "procent": 52.2,
- "extension": ".docx",
- "filetype": "Word Microsoft Office Open XML Format document"
3 items}, - {
- "procent": 38.8,
- "extension": ".zip",
- "filetype": "Open Packaging Conventions container"
3 items}, - {
- "procent": 8.8,
- "extension": ".zip",
- "filetype": "ZIP compressed archive"
3 items}
3 items]
5 items}
5 items}, - "video": {1 item},
- "pcap": {2 items},
- "screenshots": [
- {4 items},
- {4 items},
- {4 items}
3 items]
4 items}
11 items}, - "environments": {
- "os": {
- "title": "Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)",
- "build": 7601,
- "product": "Windows",
- "variant": "Professional",
- "productType": "Client",
- "major": "7",
- "servicePack": "1",
- "softSet": "complete",
- "bitness": 32
9 items}, - "internetExplorer": {2 items},
- "software": [
- {
- "title": "Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005",
- "version": 12.0.21005
2 items}, - {
- "title": "Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501",
- "version": 12.0.30501.0
2 items}, - {
- "title": "Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219",
- "version": 10.0.40219
2 items}, - {2 items},
- {2 items},
- {
- "title": "Adobe Refresh Manager",
- "version": 1.8.0
2 items}, - {2 items},
- {
- "title": "Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161",
- "version": 9.0.30729.6161
2 items}, - {
- "title": "Microsoft .NET Framework 4.5.2",
- "version": 4.5.51209
2 items}, - {
- "title": "Microsoft Office Access Setup Metadata MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Shared Setup Metadata MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office X MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office X MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office X MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office X MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office X MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office X MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office X MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office X MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office X MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office O MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office O MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Groove MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Groove MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office OneNote MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office OneNote MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Shared MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Shared MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office InfoPath MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Single Image 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Proofing (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proofing (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Proofing (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proofing (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proofing (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proofing (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proofing (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proofing (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proofing (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Proofing (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office IME (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office IME (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Spanish) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Proof (Galician) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Basque) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Ukrainian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Proof (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Dutch) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (French) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Proof (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Proof (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Catalan) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Proof (Arabic) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Word MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Word MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Outlook MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Outlook MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Publisher MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Publisher MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office PowerPoint MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office SharePoint Designer MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Excel MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Excel MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (Spanish) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (Turkish) 2010",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Access MUI (Russian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (Portuguese (Brazil)) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (Korean) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (Japanese) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (Italian) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (French) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (English) 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Access MUI (German) 2010",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Google Update Helper",
- "version": 1.3.36.31
2 items}, - {
- "title": "Java Auto Updater",
- "version": 2.8.271.9
2 items}, - {
- "title": "Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.21.27702",
- "version": 14.21.27702.2
2 items}, - {
- "title": "Java 8 Update 271",
- "version": 8.0.2710.9
2 items}, - {
- "title": "Microsoft Visual C++ 2019 X86 Additional Runtime - 14.21.27702",
- "version": 14.21.27702
2 items}, - {
- "title": "Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.21.27702",
- "version": 14.21.27702
2 items}, - {
- "title": "Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005",
- "version": 12.0.21005
2 items}, - {
- "title": "WinRAR 5.91 (32-bit)",
- "version": 5.91.0
2 items}, - {
- "title": "VLC media player",
- "version": 3.0.11
2 items}, - {
- "title": "Skype version 8.29",
- "version": 8.29
2 items}, - {2 items},
- {
- "title": "Microsoft Office Professional 2010",
- "version": 14.0.6029.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - Turkish/Türkçe",
- "version": 14.0.4763.1013
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - Russian/русский",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - Portuguese/Português (Brasil)",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - Korean/한국어",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - Japanese/日本語",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - Italian/Italiano",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - French/Français",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - Spanish/Español",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Microsoft Office Language Pack 2010 - German/Deutsch",
- "version": 14.0.4763.1000
2 items}, - {
- "title": "Notepad++ (32-bit x86)",
- "version": 7.9.1
2 items}, - {
- "title": "Mozilla Maintenance Service",
- "version": 83.0.0.7621
2 items}, - {
- "title": "Mozilla Firefox 83.0 (x86 en-US)",
- "version": 83.0
2 items}, - {
- "title": "FileZilla Client 3.51.0",
- "version": 3.51.0
2 items}, - {
- "title": "CCleaner",
- "version": 5.74
2 items}, - {
- "title": "Adobe Flash Player 32 PPAPI",
- "version": 32.0.0.453
2 items}, - {
- "title": "Adobe Flash Player 32 NPAPI",
- "version": 32.0.0.453
2 items}, - {
- "title": "Adobe Flash Player 32 ActiveX",
- "version": 32.0.0.453
2 items}
194 items], - "hotfixes": [
- {
- "title": "WUClient SelfUpdate Core TopLevel"
1 item}, - {
- "title": "WUClient SelfUpdate Aux TopLevel"
1 item}, - {
- "title": "WUClient SelfUpdate ActiveX"
1 item}, - {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {1 item},
- {
- "title": "Package 7 for KB2984976"
1 item}, - {
- "title": "Package 76 for KB2984976"
1 item}, - {
- "title": "Package 59 for KB2984976"
1 item}, - {
- "title": "Package 45 for KB2984976"
1 item}, - {
- "title": "Package 38 for KB2984976"
1 item}, - {
- "title": "Package 21 for KB2984976"
1 item}, - {
- "title": "UltimateEdition"
1 item}, - {
- "title": "RDP WinIP Package TopLevel"
1 item}, - {
- "title": "RDP BlueIP Package TopLevel"
1 item}, - {
- "title": "ProfessionalEdition"
1 item}, - {
- "title": "PlatformUpdate Win7 SRV08R2 Package TopLevel"
1 item}, - {
- "title": "LocalPack ZA Package"
1 item}, - {
- "title": "LocalPack US Package"
1 item}, - {
- "title": "LocalPack GB Package"
1 item}, - {
- "title": "LocalPack CA Package"
1 item}, - {
- "title": "LocalPack AU Package"
1 item}, - {
- "title": "InternetExplorer Package TopLevel"
1 item}, - {
- "title": "InternetExplorer Optional Package"
1 item}, - {
- "title": "IE Troubleshooters Package"
1 item}, - {
- "title": "IE Spelling Parent Package English"
1 item}, - {
- "title": "IE Hyphenation Parent Package English"
1 item}, - {
- "title": "Foundation Package"
1 item}, - {
- "title": "CodecPack Basic Package"
1 item}, - {
- "title": "Client Refresh LanguagePack Package"
1 item}, - {
- "title": "Client LanguagePack Package"
1 item}
219 items]
4 items}, - "processes": [
- {
- "pid": 2308,
- "ppid": 1292,
- "uuid": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "image": "C:\Program Files\Microsoft Office\Office14\WINWORD.EXE",
- "commandLine": "\"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE\" /n \"C:\Users\admin\AppData\Local\Temp\1.docx\"",
- "fileName": WINWORD.EXE,
- "fileType": "MICROSOFT-OFFICE-WORD",
- "mainProcess": true,
- "times": {
- "start": 1613126220409,
- "monitoringSince": 1613126220409
2 items}, - "versionInfo": {
- "company": "Microsoft Corporation",
- "description": "Microsoft Word",
- "version": 14.0.6024.1000
3 items}, - "context": {
- "rebootNumber": 0,
- "integrityLevel": "MEDIUM",
- "userName": "admin"
3 items}, - "scores": {
- "verdict": {
- "score": 0,
- "threatLevel": 0,
- "threatLevelText": "No threat detected"
3 items}, - "monitoringReason": "Main process",
- "dropped": false,
- "injected": false,
- "loadsSusp": false,
- "specs": {
- "autoStart": false,
- "crashedApps": false,
- "debugOutput": false,
- "executableDropped": false,
- "exploitable": false,
- "injects": false,
- "knownThreat": false,
- "lowAccess": false,
- "network": false,
- "networkLoader": false,
- "stealing": false,
- "privEscalation": false
12 items}
6 items}, - "status": "STILL RUNNING",
- "modules": [
- {
- "time": 1613126220472,
- "image": "c:\windows\system32\msimg32.dll"
2 items}, - {
- "time": 1613126220472,
- "image": "c:\program files\microsoft office\office14\gfx.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\sechost.dll"
2 items}, - {
- "time": 1613126220441,
- "image": "c:\windows\system32\imm32.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\kernel32.dll"
2 items}, - {
- "time": 1613126220441,
- "image": "c:\windows\system32\usp10.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\ntdll.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\rpcrt4.dll"
2 items}, - {
- "time": 1613126220472,
- "image": "c:\windows\system32\ole32.dll"
2 items}, - {
- "time": 1613126220441,
- "image": "c:\windows\system32\user32.dll"
2 items}, - {
- "time": 1613126220472,
- "image": "c:\windows\system32\oleaut32.dll"
2 items}, - {
- "time": 1613126220456,
- "image": "c:\program files\microsoft office\office14\wwlib.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\program files\microsoft office\office14\winword.exe"
2 items}, - {
- "time": 1613126220441,
- "image": "c:\windows\system32\msctf.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\kernelbase.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\advapi32.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\gdi32.dll"
2 items}, - {
- "time": 1613126220441,
- "image": "c:\windows\system32\lpk.dll"
2 items}, - {
- "time": 1613126220425,
- "image": "c:\windows\system32\msvcrt.dll"
2 items}, - {
- "time": 1613126220472,
- "image": "c:\windows\system32\wtsapi32.dll"
2 items}, - {
- "time": 1613126220691,
- "image": "c:\windows\system32\dwmapi.dll"
2 items}, - {
- "time": 1613126220644,
- "image": "c:\program files\common files\microsoft shared\office14\1033\msointl.dll"
2 items}, - {
- "time": 1613126220691,
- "image": "c:\windows\system32\cryptbase.dll"
2 items}, - {
- "time": 1613126220691,
- "image": "c:\program files\common files\microsoft shared\office14\msores.dll"
2 items}, - {
- "time": 1613126220628,
- "image": "c:\program files\microsoft office\office14\1033\wwintl.dll"
2 items}, - {
- "time": 1613126220534,
- "image": "c:\windows\system32\shlwapi.dll"
2 items}, - {
- "time": 1613126220566,
- "image": "c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll"
2 items}, - {
- "time": 1613126220581,
- "image": "c:\program files\common files\microsoft shared\office14\cultures\office.odf"
2 items}, - {
- "time": 1613126220534,
- "image": "c:\windows\system32\shell32.dll"
2 items}, - {
- "time": 1613126220534,
- "image": "c:\windows\system32\apphelp.dll"
2 items}, - {
- "time": 1613126220534,
- "image": "c:\windows\system32\msi.dll"
2 items}, - {
- "time": 1613126220534,
- "image": "c:\program files\common files\microsoft shared\office14\mso.dll"
2 items}, - {
- "time": 1613126220487,
- "image": "c:\program files\microsoft office\office14\oart.dll"
2 items}, - {
- "time": 1613126220800,
- "image": "c:\windows\system32\cfgmgr32.dll"
2 items}, - {
- "time": 1613126220753,
- "image": "c:\windows\system32\mscoree.dll"
2 items}, - {
- "time": 1613126220800,
- "image": "c:\windows\system32\devobj.dll"
2 items}, - {
- "time": 1613126220784,
- "image": "c:\windows\system32\winspool.drv"
2 items}, - {
- "time": 1613126220800,
- "image": "c:\windows\system32\powrprof.dll"
2 items}, - {
- "time": 1613126220800,
- "image": "c:\windows\system32\setupapi.dll"
2 items}, - {
- "time": 1613126220816,
- "image": "c:\windows\system32\clbcatq.dll"
2 items}, - {
- "time": 1613126220737,
- "image": "c:\windows\system32\uxtheme.dll"
2 items}, - {
- "time": 1613126220769,
- "image": "c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppc.dll"
2 items}, - {
- "time": 1613126220753,
- "image": "c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll"
2 items}, - {
- "time": 1613126220753,
- "image": "c:\program files\common files\microsoft shared\office14\riched20.dll"
2 items}, - {
- "time": 1613126220722,
- "image": "c:\program files\common files\microsoft shared\office14\msptls.dll"
2 items}, - {
- "time": 1613126220862,
- "image": "c:\windows\system32\propsys.dll"
2 items}, - {
- "time": 1613126220862,
- "image": "c:\windows\system32\wldap32.dll"
2 items}, - {
- "time": 1613126220862,
- "image": "c:\windows\system32\version.dll"
2 items}, - {
- "time": 1613126220909,
- "image": "c:\windows\system32\cryptsp.dll"
2 items}, - {
- "time": 1613126220862,
- "image": "c:\windows\system32\ntmarta.dll"
2 items}, - {
- "time": 1613126220909,
- "image": "c:\windows\system32\rpcrtremote.dll"
2 items}, - {
- "time": 1613126220909,
- "image": "c:\windows\system32\rsaenh.dll"
2 items}, - {
- "time": 1613126220925,
- "image": "c:\windows\system32\bcrypt.dll"
2 items}, - {
- "time": 1613126220925,
- "image": "c:\windows\system32\msxml6.dll"
2 items}, - {
- "time": 1613126220972,
- "image": "c:\windows\system32\profapi.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll"
2 items}, - {
- "time": 1613126221253,
- "image": "c:\program files\microsoft office\office14\genko.dll"
2 items}, - {
- "time": 1613126221316,
- "image": "c:\windows\system32\sspicli.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\userenv.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\wininet.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\urlmon.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\normaliz.dll"
2 items}, - {
- "time": 1613126221316,
- "image": "c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll"
2 items}, - {
- "time": 1613126221316,
- "image": "c:\windows\system32\secur32.dll"
2 items}, - {
- "time": 1613126221237,
- "image": "c:\windows\system32\sxs.dll"
2 items}, - {
- "time": 1613126221300,
- "image": "c:\windows\system32\iertutil.dll"
2 items}, - {
- "time": 1613126221394,
- "image": "c:\program files\common files\microsoft shared\office14\usp10.dll"
2 items}, - {
- "time": 1613126221362,
- "image": "c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.24542_none_5c0717c7a00ddc6d\gdiplus.dll"
2 items}, - {
- "time": 1613126221362,
- "image": "c:\windows\system32\windowscodecs.dll"
2 items}, - {
- "time": 1613126221503,
- "image": "c:\windows\system32\msxml3.dll"
2 items}, - {
- "time": 1613126221597,
- "image": "c:\windows\system32\shdocvw.dll"
2 items}, - {
- "time": 1613126221737,
- "image": "c:\program files\common files\microsoft shared\vba\vba7\vbe7.dll"
2 items}, - {
- "time": 1613126221722,
- "image": "c:\program files\microsoft office\office14\msproof7.dll"
2 items}, - {
- "time": 1613126221737,
- "image": "c:\program files\common files\microsoft shared\vba\vba7\1033\vbe7intl.dll"
2 items}, - {
- "time": 1613126223722,
- "image": "c:\program files\common files\microsoft shared\proof\mslid.dll"
2 items}, - {
- "time": 1613126223831,
- "image": "c:\program files\microsoft office\office14\mscss7en.dll"
2 items}, - {
- "time": 1613126223847,
- "image": "c:\program files\microsoft office\office14\css7data0009.dll"
2 items}, - {
- "time": 1613126223800,
- "image": "c:\program files\microsoft office\office14\proof\mssp7en.dll"
2 items}, - {
- "time": 1613126223847,
- "image": "c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll"
2 items}, - {
- "time": 1613126223878,
- "image": "c:\program files\microsoft office\office14\mscss7cm_en.dub"
2 items}, - {
- "time": 1613126223878,
- "image": "c:\program files\microsoft office\office14\mscss7wre_en.dub"
2 items}, - {
- "time": 1613126223925,
- "image": "c:\program files\microsoft office\office14\proof\1033\msgr3en.dll"
2 items}, - {
- "time": 1613126230519,
- "image": "c:\windows\system32\fontsub.dll"
2 items}, - {
- "time": 1613126230503,
- "image": "c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll"
2 items}, - {
- "time": 1613126230503,
- "image": "c:\windows\system32\spool\drivers\w32x86\3\sendtoonenoteui.dll"
2 items}, - {
- "time": 1613126230503,
- "image": "c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll"
2 items}
93 items]
14 items}
1 item], - "modified": {
- "files": [
- {
- "time": 1613126223847,
- "filename": "C:\Users\admin\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex",
- "size": 2,
- "type": "text",
- "threatLevel": "LOW",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "info": {1 item},
- "hashes": {
- "head_hash": "f3b25701fe362ec84616a93a45ce9998",
- "md5": "f3b25701fe362ec84616a93a45ce9998",
- "sha1": "d62636d8caec13f04e28442a0a6fa1afeb024bbb",
- "sha256": "b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209",
- "ssdeep": "3:Qn:Qn"
5 items}, - "permanentUrl": https://content.any.run/tasks/cb81908f-f6b0-4bf4-bac0-a3b05ee0adaf/download/files/0da4cc7e-1d1d-4e34-9a42-6cf9c5287329
9 items}, - {
- "time": 1613126221347,
- "filename": "C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\1ABBFBE7.wmf",
- "size": 148548,
- "type": "wmf",
- "threatLevel": "UNKNOWN",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "info": {1 item},
- "hashes": {
- "head_hash": "5e5627ed1f40946f20e6e4e962b4f5c3",
- "md5": "11dfbe3096622fea5639d0882739e7d2",
- "sha1": "2062049e4049d3160cb101faaebd70d9fcbdede6",
- "sha256": "73bc270490bfc1e97acafff9ddb3bb3460e822d2170464c03fe9e46d2fd906eb",
- "ssdeep": "192:DlzAdyNcDdkOYWLcGWpctSMZttbTF8pUdhF/peBeiuBMHUe5GlxiPIjWVDUfmVN2:JPKKOYWLD4IjA0SYu+ApC4jng"
5 items}, - "permanentUrl": https://content.any.run/tasks/cb81908f-f6b0-4bf4-bac0-a3b05ee0adaf/download/files/7de5e416-a17b-468a-a9ed-e2c9987d4b62
9 items}, - {
- "time": 1613126221316,
- "filename": "C:\Users\admin\AppData\Local\Temp\~$1.docx",
- "size": 162,
- "type": "pgc",
- "threatLevel": "UNKNOWN",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "info": {
- "file": "application/octet-stream"
1 item}, - "hashes": {
- "head_hash": "fbf6e68c19f9bc79c9d2c0a6f71ea255",
- "md5": "fbf6e68c19f9bc79c9d2c0a6f71ea255",
- "sha1": "e75de1fea792c1061963cbfd73e454b0ba51dfd9",
- "sha256": "3e16ccb631322881c8fbef5a7a144e008324c86417a6258ccf605482070e78d5",
- "ssdeep": "3:BBxLBlBlI4lll3L7YMlbK7g7lxItJIxmlZkt9OAt:3xV+4hlxK7ghqJIQ2PO"
5 items}, - "permanentUrl": https://content.any.run/tasks/cb81908f-f6b0-4bf4-bac0-a3b05ee0adaf/download/files/de8e1a6f-1d7d-4baa-b45c-b45b5a5c4a39
9 items}, - {
- "time": 1613126220925,
- "filename": "C:\Users\admin\AppData\Roaming\Microsoft\Templates\~$Normal.dotm",
- "size": 162,
- "type": "pgc",
- "threatLevel": "UNKNOWN",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "info": {
- "file": "application/octet-stream"
1 item}, - "hashes": {
- "head_hash": "c1ccba585cef6fbd262f0dd4cbfd9598",
- "md5": "c1ccba585cef6fbd262f0dd4cbfd9598",
- "sha1": "0415d58370677eff10b8069b334ad5bd2f757a86",
- "sha256": "91d9e342165c3a73274c137da6ebac291026602a50dfa7f5fb5b53a81dc323e2",
- "ssdeep": "3:BBxLBlBlI4lll3L7YMlbK7g7lxItTg/lylZkt9OAt:3xV+4hlxK7ghqTp2PO"
5 items}, - "permanentUrl": https://content.any.run/tasks/cb81908f-f6b0-4bf4-bac0-a3b05ee0adaf/download/files/5eee9629-3ec3-4dc1-9841-dfbe8f76b30f
9 items}, - {
- "time": 1613126220566,
- "filename": "C:\Users\admin\AppData\Local\Temp\CVREAE.tmp",
- "size": 0,
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0"
4 items}
5 items], - "registry": [
- {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": "(default)",
- "value": "",
- "operation": "delete key",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221534
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1049",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": ".\"8",
- "value": "2E22380004090000010000000000000000000000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220566
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1031",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1036",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1042",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1041",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "3082",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1040",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1033",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1055",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1046",
- "value": "Off",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220581
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1040",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1031",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "3082",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1036",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1049",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1046",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1033",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1055",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1042",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages",
- "name": "1041",
- "value": "On",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220628
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10021400000000000F01FEC\Usage",
- "name": "StemmerFiles_1042",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220722
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word",
- "name": "MTTT",
- "value": "040900002AB4B2FE2A01D70100000000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220784
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000000000000F01FEC\Usage",
- "name": "ProductFiles",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220722
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000000000000F01FEC\Usage",
- "name": "WORDFiles",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220706
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": "w#8",
- "value": "772338000409000004000000000000008C00000001000000840000003E0043003A005C00550073006500720073005C00610064006D0069006E005C0041007000700044006100740061005C0052006F0061006D0069006E0067005C004D006900630072006F0073006F00660074005C00540065006D0070006C0061007400650073005C004E006F0072006D0061006C002E0064006F0074006D00000000000000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126220862
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": "c$8",
- "value": "632438000409000002000000000000008E00000001000000500000003200000063003A005C00700072006F006700720061007E0031005C006D006900630072006F0073007E0031005C006F0066006600690063006500310034005C00670065006E006B006F002E0064006C006C0000006D006900630072006F0073006F0066007400200077006F00720064002000D0C6E0ACC0C9200094CD00AC200030AEA5B20000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221003
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap",
- "name": "ProxyBypass",
- "value": "1",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221316
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap",
- "name": "UNCAsIntranet",
- "value": "1",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221316
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap",
- "name": "IntranetName",
- "value": "1",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221316
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap",
- "name": "AutoDetect",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221316
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": "<%8",
- "value": "3C2538000409000006000000010000006200000002000000520000000400000063003A005C00750073006500720073005C00610064006D0069006E005C0061007000700064006100740061005C006C006F00630061006C005C00740065006D0070005C0031002E0064006F0063007800000000000000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221316
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221456
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221456
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "name": "Max Display",
- "value": "25",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221456
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": "w&8",
- "value": "772638000409000002000000000000008E00000001000000500000003200000063003A005C00700072006F006700720061007E0031005C006D006900630072006F0073007E0031005C006F0066006600690063006500310034005C00670065006E006B006F002E0064006C006C0000006D006900630072006F0073006F0066007400200077006F00720064002000D0C6E0ACC0C9200094CD00AC200030AEA5B20000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221534
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFiles_3082",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221675
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10021400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp6_1042",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221675
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10091400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp1_1049",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221659
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10065400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp2_1110",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221659
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100F1400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp1_1055",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221675
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100D2400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp2_1069",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221675
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10030400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp2_1027",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221675
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10022400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp2_1058",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221659
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": "g&8",
- "value": "672638000409000002000000000000008E00000001000000500000003200000063003A005C00700072006F006700720061007E0031005C006D006900630072006F0073007E0031005C006F0066006600690063006500310034005C00670065006E006B006F002E0064006C006C0000006D006900630072006F0073006F0066007400200077006F00720064002000D0C6E0ACC0C9200094CD00AC200030AEA5B20000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221519
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10001400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp1_1040",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221659
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10070400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFiles_1031",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221644
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10010400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp1_1025",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221659
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFiles_1033",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221644
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10031400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp1_1043",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221644
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10061400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFilesExp1_1046",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221644
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400000000000F01FEC\Usage",
- "name": "SpellingAndGrammarFiles_1036",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221644
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": "h&8",
- "value": "682638000409000002000000000000008E00000001000000500000003200000063003A005C00700072006F006700720061007E0031005C006D006900630072006F0073007E0031005C006F0066006600690063006500310034005C00670065006E006B006F002E0064006C006C0000006D006900630072006F0073006F0066007400200077006F00720064002000D0C6E0ACC0C9200094CD00AC200030AEA5B20000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221487
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\291249",
- "name": "291249",
- "value": "04000000040900002800000043003A005C00550073006500720073005C00610064006D0069006E005C0041007000700044006100740061005C004C006F00630061006C005C00540065006D0070005C0031002E0064006F00630078000600000031002E0064006F00630078000000000001000000000000001C8DABFE2A01D701491229004912290000000000DB040000000000000000000000000000000000000000000000000000FFFFFFFF0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FFFFFFFF",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221487
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Max Display",
- "value": "25",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221472
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems",
- "name": " '8",
- "value": "202738000409000002000000000000008E00000001000000500000003200000063003A005C00700072006F006700720061007E0031005C006D006900630072006F0073007E0031005C006F0066006600690063006500310034005C00670065006E006B006F002E0064006C006C0000006D006900630072006F0073006F0066007400200077006F00720064002000D0C6E0ACC0C9200094CD00AC200030AEA5B20000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221800
6 items}, - {
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000000000000F01FEC\Usage",
- "name": "VBAFiles",
- "value": "",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126221737
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Licensing",
- "name": "019C826E445A4649A5B00BF08FCC4EEE",
- "value": "01000000270000007B39303134303030302D303033442D303030302D303030302D3030303030303046463143457D005A0000004F00660066006900630065002000310034002C0020004F0066006600690063006500500072006F00660065007300730069006F006E0061006C002D00520065007400610069006C002000650064006900740069006F006E000000",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126222909
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSGothicM",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGMinchoB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Vrinda",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Viner Hand ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Simplified Arabic Fixed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Segoe Print",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "PMingLiU",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Parchment",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Franklin Gothic Demi Cond",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Eras Medium ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Ebrima",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "CordiaUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Century Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Niagara Engraved",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MT Extra",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Agency FB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@SimHei",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Leelawadee",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Kristen ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYGothic-Extra",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSSoeiKakugothicUB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGMaruGothicMPRO",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Goudy Old Style",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Vladimir Script",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Rockwell Extra Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Estrangelo Edessa",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Eras Light ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Engravers MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "NSimSun",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft JhengHei",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Bright",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Book Antiqua",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Arial Black",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Arial",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Kalinga",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPKyokashotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Webdings",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Tw Cen MT Condensed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "System",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Stencil",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "SimHei",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Segoe UI Light",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Pristina",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Euphemia",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "DFKai-SB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS Reference Specialty",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Berlin Sans FB Demi",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bell MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bauhaus 93",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Arial Unicode MS",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Arial Rounded MT Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Pyunji R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Magic R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Impact",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPSoeiKakupoptai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPMinchoB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Headline R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Tw Cen MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Trebuchet MS",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Pyunji R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "FrankRuehl",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Fixedsys",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "FangSong",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MoolBoran",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft YaHei",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft Himalaya",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "BatangChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Angsana New",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Andalus",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Ami R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@New Gulim",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MingLiU-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Malgun Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Jokerman",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSoeiKakugothicUB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Harlow Solid Italic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gill Sans Ultra Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gill Sans MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Yet R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Wingdings",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Rod",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Plantagenet Cherokee",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Felix Titling",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Copperplate Gothic Light",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Calisto MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Meiryo UI",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Malgun Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bodoni MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@SimSun",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MS PMincho",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MS Mincho",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Microsoft YaHei",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@KaiTi",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lao UI",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "KaiTi",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "JasmineUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gulim",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gautami",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Vijaya",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Segoe UI Symbol",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "DotumChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Dotum",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Century Schoolbook",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Candara",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Cambria Math",
- "value": "1",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Calibri",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft Yi Baiti",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Meiryo",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@SimSun-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Informal Roman",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSoeiPresenceEB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "GungsuhChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gill Sans Ultra Bold Condensed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Vani",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Tahoma",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Snap ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Small Fonts",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Rage Italic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Raavi",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Freestyle Script",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Footlight MT Light",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Corbel",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Californian FB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Browallia New",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "New Gulim",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Monotype Corsiva",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MingLiU_HKSCS",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft Sans Serif",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft PhagsPa",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Aparajita",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@PMingLiU-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@NSimSun",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Microsoft JhengHei",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Latha",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Kartika",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Iskoola Pota",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYPost-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYGothic-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGMinchoE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gigi",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Symbol",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Segoe UI",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Sakkal Majalla",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "DilleniaUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Centaur",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "BrowalliaUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Yet R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MingLiU_HKSCS",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYPost-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYPMokGak-Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "IrisUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYHeadLine-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPSoeiKakugothicUB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGGothicE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Wingdings 3",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Vivaldi",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gabriola",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "French Script MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "FreesiaUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "DaunPenh",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Mongolian Baiti",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Miriam",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft Uighur",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Aharoni",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Juice ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYPost-Light",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSGyoshotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSeikaishotaiPRO",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gisha",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Tw Cen MT Condensed Extra Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Ravie",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Franklin Gothic Medium Cond",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Expo M",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "David",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Consolas",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Colonna MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Castellar",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Palatino Linotype",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Onyx",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MoeumT R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Modern No. 20",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Matura MT Script Capitals",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Mangal",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Magneto",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Handwriting",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bookshelf Symbol 7",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Blackadder ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Berlin Sans FB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Batang",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Arabic Typesetting",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@PMingLiU",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Meiryo UI",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Kokila",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Khmer UI",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSKyokashotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPGyoshotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPGothicM",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGGothicM",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Haettenschweiler",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gill Sans MT Ext Condensed Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Wide Latin",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Terminal",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Showcard Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Script MT Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Poor Richard",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "PMingLiU-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Century",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Mistral",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Maiandra GD",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "LilyUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bradley Hand ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bernard MT Condensed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MingLiU_HKSCS-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYSinMyeongJo-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "High Tower Text",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSoeiKakupoptai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSMinchoE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPMinchoE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gungsuh",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Traditional Arabic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Simplified Arabic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Shonar Bangla",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Rockwell",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Franklin Gothic Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Franklin Gothic Book",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Curlz MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Comic Sans MS",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Old English Text MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS Sans Serif",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS PGothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MingLiU-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MingLiU",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft Tai Le",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Broadway",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bodoni MT Black",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "AngsanaUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MS UI Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MoeumT R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Meiryo",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYMyeongJo-Extra",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gloucester MT Extra Condensed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Garamond",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Utsaah",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Tunga",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Times New Roman",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Playbill",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Papyrus",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "EucrosiaUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Eras Demi ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Cooper Black",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Chiller",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Palace Script MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Narkisim",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Sans Unicode",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Fax",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Levenim MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bodoni MT Condensed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYShortSamul-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "KodchiangUPC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Imprint MT Shadow",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYGraphic-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSSoeiPresenceEB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "GulimChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Goudy Stout",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Gill Sans MT Condensed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Wingdings 2",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Tempus Sans ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "SimSun-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Shruti",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Segoe Script",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Constantia",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Cambria",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "OCRB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "OCR A Extended",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS Serif",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS Outlook",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MingLiU_HKSCS-ExtB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Sans",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Calligraphy",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Baskerville Old Face",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Arial Narrow",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MS PGothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MS Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYSinMyeongJo-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSGothicE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGKyokashotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Verdana",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Segoe UI Semibold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Rockwell Condensed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Perpetua Titling MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Perpetua",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Forte",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Eras Bold ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Edwardian Script ITC",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Courier New",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Courier",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Cordia New",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Brush Script MT",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Nyala",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS UI Gothic",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Miriam Fixed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Microsoft New Tai Lue",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bookman Old Style",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Bodoni MT Poster Compressed",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYPost-Light",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYShortSamul-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYPMokGak-Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HYGungSo-Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSSoeiKakupoptai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGSMinchoB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPSoeiPresenceEB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGPGothicE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "HGGyoshotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Harrington",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Georgia",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Sylfaen",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "SimSun",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Franklin Gothic Heavy",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Franklin Gothic Demi",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Elephant",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "DokChampa",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Copperplate Gothic Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Calibri Light",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Niagara Solid",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MV Boli",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS Reference Sans Serif",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS PMincho",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "MS Mincho",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Marlett",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Magic R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Sans Typewriter",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Lucida Console",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Britannic Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Algerian",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@MingLiU",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "Kunstler Script",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230987
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Gungsuh",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYHeadLine-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSSoeiKakupoptai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSoeiPresenceEB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSMinchoB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSSoeiPresenceEB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYMyeongJo-Extra",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGMinchoB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Gulim",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYGothic-Extra",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSoeiKakugothicUB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSSoeiKakugothicUB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYGraphic-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYGungSo-Bold",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Batang",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSGothicM",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGGothicM",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@GungsuhChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSMinchoE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSGyoshotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPSoeiKakupoptai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPGyoshotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPGothicE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGKyokashotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Ami R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSeikaishotaiPRO",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPMinchoE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGMinchoE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGGothicE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSKyokashotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPSoeiPresenceEB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@DotumChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPMinchoB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Dotum",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPKyokashotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPGothicM",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@GulimChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@BatangChe",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSoeiKakupoptai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@DFKai-SB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGPSoeiKakugothicUB",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Headline R",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGMaruGothicMPRO",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HYGothic-Medium",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230972
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGSGothicE",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Expo M",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@HGGyoshotai",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@FangSong",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts",
- "name": "@Arial Unicode MS",
- "value": "0",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126230956
6 items}, - {
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Security\Trusted Documents",
- "name": "LastPurgeTime",
- "value": "26885438",
- "operation": "write",
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0",
- "time": 1613126288378
6 items}
457 items]
2 items}, - "network": {
- "dnsRequests": [],
- "httpRequests": [],
- "connections": [],
- "threats": []
4 items}, - "debugStrings": [],
- "incidents": [
- {
- "threatLevel": 0,
- "title": "Reads the computer name",
- "desc": "Environment",
- "source": "registry",
- "firstSeen": 1613126220769,
- "count": 2,
- "mitre": [
- "T1082"
1 item], - "events": [],
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0"
9 items}, - {
- "threatLevel": 0,
- "title": "Checks supported languages",
- "desc": "Unusual activities",
- "source": "registry",
- "firstSeen": 1613126220425,
- "count": 449,
- "mitre": [
- "T1012",
- "T1082"
2 items], - "events": [],
- "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0"
9 items}, - {
- "threatLevel": 0,
- "title": "Creates files in the user directory",
- "desc": "System destruction",
- "source": "files",
- "firstSeen": 1613126220925,
- "count": 2,
- "mitre": null,
- "events": [
- {
- "_id": "60265a4ddc5d25784d1fc999",
- "time": 1613126220925,
- "operation": "CREATE",
- "device": "DISK_FILE_SYSTEM",
- "object": "FILE",
- "name": "C:\Users\admin\AppData\Roaming\Microsoft\Templates\~$Normal.dotm",
- "status": 0,
- "created": "CREATED",
- "access": "READ_CONTROL, SYNCHRONIZE, FILE_WRITE_DATA, FILE_APPEND_DATA, FILE_WRITE_EA, FILE_READ_ATTRIBUTES, FILE_WRITE_ATTRIBUTES"
9 items}, - {
- "_id": "60265a50dc5d25784d1fe820",
- "time": 1613126223847,
- "operation": "CREATE",
- "device": "DISK_FILE_SYSTEM",
- "object": "FILE",
- "name": "C:\Users\admin\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex",
- "status": 0,
- "created": "CREATED",
- "access": "READ_CONTROL, SYNCHRONIZE, FILE_READ_DATA, FILE_WRITE_DATA, FILE_APPEND_DATA, FILE_READ_EA, FILE_WRITE_EA, FILE_READ_ATTRIBUTES, FILE_WRITE_ATTRIBUTES"
9 items}
2 items], - "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0"
9 items}, - {
- "threatLevel": 0,
- "title": "Reads Microsoft Office registry keys",
- "desc": "Environment",
- "source": "registry",
- "firstSeen": 1613126220581,
- "count": 171,
- "mitre": [
- "T1012"
1 item], - "events": [
- {
- "_id": "60265a4ddc5d25784d1fc8dd",
- "time": 1613126220862,
- "operation": "read",
- "name": "Toolbars",
- "value": "4C000000A301000000000000",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Data",
- "typeValue": "REG_BINARY"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc3f3",
- "time": 1613126220581,
- "operation": "read",
- "name": "InstallLanguage",
- "value": "1033",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9a4",
- "time": 1613126221003,
- "operation": "read",
- "name": "LoadBehavior",
- "value": "8",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\WordJRPostcardWizard20.Connect",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc8db",
- "time": 1613126220862,
- "operation": "read",
- "name": "Microsoft Word",
- "value": "0101000000000000000006000000",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Toolbars\Settings",
- "typeValue": "REG_BINARY"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9a3",
- "time": 1613126221003,
- "operation": "read",
- "name": "FriendlyName",
- "value": "???????????????",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\WordJRPostcardWizard20.Connect",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc8de",
- "time": 1613126220862,
- "operation": "read",
- "name": "Toolbars",
- "value": "4C000000A301000000000000",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Data",
- "typeValue": "REG_BINARY"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9b1",
- "time": 1613126221003,
- "operation": "read",
- "name": "AddIns",
- "value": "AddIns",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\General",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9ab",
- "time": 1613126221003,
- "operation": "read",
- "name": "LoadBehavior",
- "value": "0",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesService",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc8dc",
- "time": 1613126220862,
- "operation": "read",
- "name": "Microsoft Word",
- "value": "0101000000000000000006000000",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Toolbars\Settings",
- "typeValue": "REG_BINARY"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9a6",
- "time": 1613126221003,
- "operation": "read",
- "name": "LoadBehavior",
- "value": "8",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\WordJPostcardWizard20.Connect",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9a9",
- "time": 1613126221003,
- "operation": "read",
- "name": "Description",
- "value": "Enable OneNote Linked Notes Content Service for Word",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesService",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9af",
- "time": 1613126221003,
- "operation": "read",
- "name": "FriendlyName",
- "value": "Microsoft Word ??? ?? ??",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\Genko.Connect12",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9b2",
- "time": 1613126220972,
- "operation": "read",
- "name": "DeveloperTools",
- "value": "1",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9aa",
- "time": 1613126221003,
- "operation": "read",
- "name": "FriendlyName",
- "value": "OneNote Notes about Word Documents",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesService",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc8df",
- "time": 1613126220862,
- "operation": "read",
- "name": "MacroRecord",
- "value": "1",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\StatusBar",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9a8",
- "time": 1613126221003,
- "operation": "read",
- "name": "LoadBehavior",
- "value": "8",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\WordJBunreiWizard20.Connect",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9ae",
- "time": 1613126221003,
- "operation": "read",
- "name": "LoadBehavior",
- "value": "9",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9a7",
- "time": 1613126221003,
- "operation": "read",
- "name": "FriendlyName",
- "value": "??????????",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\WordJBunreiWizard20.Connect",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9ac",
- "time": 1613126221003,
- "operation": "read",
- "name": "Description",
- "value": "Adds Take Notes in Onenote button to the command bar",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9b0",
- "time": 1613126221003,
- "operation": "read",
- "name": "LoadBehavior",
- "value": "3",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\Genko.Connect12",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9ad",
- "time": 1613126221003,
- "operation": "read",
- "name": "FriendlyName",
- "value": "OneNote Linked Notes Add-In",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\OneNote.WordAddinTakeNotesButton",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9a5",
- "time": 1613126221003,
- "operation": "read",
- "name": "FriendlyName",
- "value": "????????????????",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\WordJPostcardWizard20.Connect",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fc9c7",
- "time": 1613126220941,
- "operation": "read",
- "name": "LocationOfComponents",
- "value": "",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Common\Internet",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4ddc5d25784d1fd345",
- "time": 1613126221253,
- "operation": "read",
- "name": "Startup",
- "value": "STARTUP",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\General",
- "typeValue": "REG_SZ"
7 items}, - {7 items},
- {
- "_id": "60265a4edc5d25784d1fd446",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd448",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd44c",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd445",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd452",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd457",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd456",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd451",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd44f",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd444",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd453",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd459",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd450",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd458",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd44d",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd447",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd454",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd455",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd463",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd45c",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd449",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd44b",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd45a",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd47f",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd470",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd475",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd462",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd47b",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd44e",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd47e",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd45b",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd44a",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd479",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd472",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd483",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd48d",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd48a",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd464",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd47c",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd477",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd48c",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd48b",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd496",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd465",
- "time": 1613126221456,
- "operation": "read",
- "name": "Max Display",
- "value": "25",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd461",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd45d",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd482",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd486",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd491",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd481",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd474",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd48e",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd480",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd49c",
- "time": 1613126221441,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd49f",
- "time": 1613126221441,
- "operation": "read",
- "name": "Max Display",
- "value": "25",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd492",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd738",
- "time": 1613126221487,
- "operation": "read",
- "name": "UserInitials",
- "value": "a",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Common\UserInfo",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd45e",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd493",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd499",
- "time": 1613126221441,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd473",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd47a",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd476",
- "time": 1613126221456,
- "operation": "read",
- "name": "Max Display",
- "value": "25",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd478",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd737",
- "time": 1613126221487,
- "operation": "read",
- "name": "Company",
- "value": "",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Common\UserInfo",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd49d",
- "time": 1613126221441,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd736",
- "time": 1613126221487,
- "operation": "read",
- "name": "ATUserAdded",
- "value": "1",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd497",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd487",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd489",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd498",
- "time": 1613126221456,
- "operation": "read",
- "name": "Max Display",
- "value": "25",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd49a",
- "time": 1613126221441,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd488",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd460",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd47d",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd471",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd485",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd49e",
- "time": 1613126221441,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd45f",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd495",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd48f",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd73a",
- "time": 1613126221487,
- "operation": "read",
- "name": "UserName",
- "value": "admin",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\Common\UserInfo",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd4a2",
- "time": 1613126221378,
- "operation": "read",
- "name": "ReviewToken",
- "value": "{E3D2FEEA-970A-40D8-B366-602D6F4CBEA2}",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd735",
- "time": 1613126221487,
- "operation": "read",
- "name": "ATUserAdded",
- "value": "1",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd484",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd49b",
- "time": 1613126221441,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd494",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd490",
- "time": 1613126221456,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd72d",
- "time": 1613126221487,
- "operation": "read",
- "name": Genko.Connect12.Microsoft.Word.Document,
- "value": "",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\CustomUIValidationCache",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fd745",
- "time": 1613126221487,
- "operation": "read",
- "name": "UpdateReliabilityData",
- "value": "0",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf46",
- "time": 1613126221831,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf49",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf4c",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf50",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf66",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf52",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf65",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdeaf",
- "time": 1613126221706,
- "operation": "read",
- "name": "Proof",
- "value": "Proof",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\General",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf6b",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf4a",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf62",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf58",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf6e",
- "time": 1613126221816,
- "operation": "read",
- "name": "Max Display",
- "value": "25",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf5a",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf68",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf63",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf5b",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf55",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf51",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf6d",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf60",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf5e",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf59",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 5",
- "value": "[F00000000][T01D6D955FB16F480][O00000000]*C:\Users\admin\Documents\unitsactual.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf4d",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf6c",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D56F995041B2E0][O00000000]*C:\Users\admin\Documents\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf57",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf5f",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 3",
- "value": "[F00000000][T01D4672A5F54F180][O00000000]*C:\Users\admin\Desktop\codecanada.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf69",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf44",
- "time": 1613126221831,
- "operation": "read",
- "name": "019C826E445A4649A5B00BF08FCC4EEE",
- "value": "01000000270000007B39303134303030302D303033442D303030302D303030302D3030303030303046463143457D005A0000004F00660066006900630065002000310034002C0020004F0066006600690063006500500072006F00660065007300730069006F006E0061006C002D00520065007400610069006C002000650064006900740069006F006E000000",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Licensing",
- "typeValue": "REG_BINARY"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf5c",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf4f",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 8",
- "value": "[F00000000][T01D4C2B495283E80][O00000000]*C:\Users\admin\Documents\matureweek.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf45",
- "time": 1613126221831,
- "operation": "read",
- "name": "InstallCount",
- "value": "1",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Common\InstallRoot",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf42",
- "time": 1613126221831,
- "operation": "read",
- "name": "019C826E445A4649A5B00BF08FCC4EEE",
- "value": "01000000270000007B39303134303030302D303033442D303030302D303030302D3030303030303046463143457D005A0000004F00660066006900630065002000310034002C0020004F0066006600690063006500500072006F00660065007300730069006F006E0061006C002D00520065007400610069006C002000650064006900740069006F006E000000",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Licensing",
- "typeValue": "REG_BINARY"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf56",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 6",
- "value": "[F00000000][T01D6F1E0FD3EBA00][O00000000]*C:\Users\admin\Documents\buyingdirections.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf4b",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 10",
- "value": "[F00000000][T01D5190C9A0B1A00][O00000000]*C:\Users\admin\Documents\placescollection.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf43",
- "time": 1613126221831,
- "operation": "read",
- "name": "019C826E445A4649A5B00BF08FCC4EEE",
- "value": "01000000270000007B39303134303030302D303033442D303030302D303030302D3030303030303046463143457D005A0000004F00660066006900630065002000310034002C0020004F0066006600690063006500500072006F00660065007300730069006F006E0061006C002D00520065007400610069006C002000650064006900740069006F006E000000",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Licensing",
- "typeValue": "REG_BINARY"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf47",
- "time": 1613126221831,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf6a",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D56F98784E7EE0][O00000000]*C:\Users\admin\Downloads\",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf67",
- "time": 1613126221816,
- "operation": "read",
- "name": "Max Display",
- "value": "25",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf48",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 11",
- "value": "[F00000000][T01D4705282C82F80][O00000000]*C:\Users\admin\Documents\professionalowner.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf53",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf54",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 7",
- "value": "[F00000000][T01D4A1392C256100][O00000000]*C:\Users\admin\Documents\foodage.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf5d",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 4",
- "value": "[F00000000][T01D5664D3E8DB180][O00000000]*C:\Users\admin\Desktop\boxpain.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf61",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 2",
- "value": "[F00000000][T01D3C256EF350580][O00000000]*C:\Users\admin\Desktop\octoberwin.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf64",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 1",
- "value": "[F00000000][T01D2C32BAE4CD980][O00000000]*C:\Users\admin\Desktop\hugeremote.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4edc5d25784d1fdf4e",
- "time": 1613126221816,
- "operation": "read",
- "name": "Item 9",
- "value": "[F00000000][T01D5C1D774CF5600][O00000000]*C:\Users\admin\Documents\evidencewatches.rtf",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\File MRU",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe398",
- "time": 1613126222862,
- "operation": "read",
- "name": "ProductCode",
- "value": "{90140000-003D-0000-0000-0000000FF1CE}",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Registration\{8B559C37-0117-413E-921B-B853AEB6E210}",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe404",
- "time": 1613126222941,
- "operation": "read",
- "name": "Authorized",
- "value": "",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\General",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe406",
- "time": 1613126222941,
- "operation": "read",
- "name": "EULADIS",
- "value": "1",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Registration\{90140000-003D-0000-0000-0000000FF1CE}",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe408",
- "time": 1613126222909,
- "operation": "read",
- "name": "WordName",
- "value": "Microsoft Word",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Registration\{90140000-003D-0000-0000-0000000FF1CE}",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe403",
- "time": 1613126222941,
- "operation": "read",
- "name": "ShownFirstRunOptin",
- "value": "1",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\General",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe402",
- "time": 1613126222941,
- "operation": "read",
- "name": "ShownFileFmtPrompt",
- "value": "1",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\General",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe407",
- "time": 1613126222909,
- "operation": "read",
- "name": "WordName",
- "value": "Microsoft Word",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe405",
- "time": 1613126222941,
- "operation": "read",
- "name": "OEM",
- "value": "1",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Registration\{90140000-003D-0000-0000-0000000FF1CE}",
- "typeValue": "REG_SZ"
7 items}, - {
- "_id": "60265a4fdc5d25784d1fe40a",
- "time": 1613126222909,
- "operation": "read",
- "name": "InstallCount",
- "value": "1",
- "key": "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Common\InstallRoot",
- "typeValue": "REG_DWORD"
7 items}, - {
- "_id": "60265a50dc5d25784d1fe7df",
- "time": 1613126223706,
- "operation": "read",
- "name": "ShowDates",
- "value": "ON",
- "key": "HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources",
- "typeValue": "REG_SZ"
7 items}
171 items], - "process": "c42bdb93-25b7-41f0-b645-6f1f6be6ffc0"
9 items}
4 items], - "counters": {
- "processes": {
- "total": 34,
- "monitored": 1,
- "suspicious": 0,
- "malicious": 0
4 items}, - "network": {
- "http": 0,
- "connections": 0,
- "dns": 0,
- "threats": 0
4 items}, - "files": {
- "unknown": 3,
- "text": 1,
- "suspicious": 0,
- "malicious": 0
4 items}, - "registry": {
- "total": 3241,
- "read": 2648,
- "write": 538,
- "delete": 55
4 items}
4 items}, - "mitre": [
- {3 items},
- {
- "id": "T1082",
- "phases": [
- "discovery"
1 item], - "name": "System Information Discovery"
3 items}
2 items], - "status": "done"
10 items}
}