top of page

Threat Round up for February 17 to February 24

C45-2023-02-25-5

Indicators of Compromise (IOC) List

Indicator of Compromise (IOC)
Date Published
IOC Type
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS
25/02/2023
Win_Registry
5eaa9f5769a034d4f29a1d0d10654a04cbc046a43c48a52c0bae0e531d98cfe4
25/02/2023
SHA-256
HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\DFWOFIK32HKCU\SOFTWARE\MICROSOFT\DFWOFIK
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\AHUQ
25/02/2023
Win_Registry
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RSTRUI.EXE1HKCU\SOFTWARE\APPDATALOW\SOFTWARE\MYMAILCLIENT1HKCU\SOFTWARE\APPDATALOW\GOOGLE UPDATER1HKCU\SOFTWARE\APPDATALOW\SOFTWARE
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\AKEDUP
25/02/2023
Win_Registry
301b5fcf8ce2fab8868e80b6c1f912fe
25/02/2023
MD5
HKCU\SOFTWARE\MICROSOFT\PAYXPO
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\ACTION CENTER\CHECKS
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE
25/02/2023
Win_Registry
9adf00c647589ae33d841040666e28987e5a88aaf1f08e20a33bfb0c89280380
25/02/2023
SHA-256
HKCU\SOFTWARE\MICROSOFT\DFWOFIK
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\YWZI
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\GUZUDU
25/02/2023
Win_Registry
93f19dda2412c86ad7520ba4198f39a0
25/02/2023
MD5
HKCU\SOFTWARE\APPDATALOW\SOFTWARE
25/02/2023
Win_Registry
5feca7d20b950f2b4a4498ae29a0b4abcdaa38e8e4da4cf1dc2786683ec2526c
25/02/2023
SHA-256
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED
25/02/2023
Win_Registry
8515eb34d8f9de5af815466e9715b3e5
25/02/2023
MD5
HKCR\LOCAL SETTINGS\MUICACHE\82\52C64B7E
25/02/2023
Win_Registry
HKCU\SOFTWARE\ZWCCUKGLY8ABX3HKCU\SOFTWARE\ZWCCUKGLY8ABX
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\GUTID1HKCU\SOFTWARE\MICROSOFT\KEMOA1HKCU\SOFTWARE\MICROSOFT\IPCAEM1HKCU\SOFTWARE\MICROSOFT\F12
25/02/2023
Win_Registry
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS
25/02/2023
Win_Registry
HKLM\SYSTEM\CONTROLSET001\SERVICES\VSS\DIAG\VSSAPIPUBLISHER5HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS
25/02/2023
Win_Registry
HKCU\Software\Microsoft\random
25/02/2023
Win_Registry
HKCU\SOFTWARE\ZWCCUKGLY8ABX
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\PRIVACY
25/02/2023
Win_Registry
0decb4d54983bae4fe244fd05f37c44552dd41026ce2f7476e324d0d70528a20
25/02/2023
SHA-256
bb62e28591030e826081bf1f4a74c0b8
25/02/2023
MD5
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\OXWU
25/02/2023
Win_Registry
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
25/02/2023
Win_Registry
HKCU\SOFTWARE
25/02/2023
Win_Registry
HKCU\ENVIRONMENT
25/02/2023
Win_Registry
HKCU\SOFTWARE\MICROSOFT\ICONF
25/02/2023
Win_Registry
3fc0f2282a8aad20e9973738d93f539b
25/02/2023
MD5
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
25/02/2023
Win_Registry
Download as CSV
bottom of page