28:T4ca,"\Sessions\1\BaseNamedObjects\Local\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511" "\Sessions\1\BaseNamedObjects\Local\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000" "Local\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511" "Local\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000" "\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_3884" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_f2c_IE_EarlyTabStart_0xf64_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_f2c_ConnHashTable<3884>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\IsoScope_f2c_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_f2c_IESQMMUTEX_0_331" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}"29:T406,"Nullsoft Install System v2.46.5-Unicode" (Indicator: "requestedExecutionLevel level="highestAvailable"")2a:T4bc,"action_4_21_2_setup.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EMPTY") "action_4_21_2_setup.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "EN-US") "action_4_21_2_setup.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EN-US") "action_4_21_2_setup.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409") "preinstall.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EMPTY") "iexplore.exe" (Path: "HKCU\CONTROL PANEL\INTERNATIONAL\GEO"; Key: "NATION") "iexplore.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409") "iexplore.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "EN-US") "iexplore.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EN-US") "booter.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EMPTY") "IEXPLORE.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\EXTENDEDLOCALE"; Key: "EN-US") "IEXPLORE.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EN-US") "IEXPLORE.EXE" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EMPTY")2b:T424,The input sample is signed with a certificate issued by "C=PL, O=Mirillis Sp. z o.o., L=Zielona Gra, S=lubuskie, STREET=Fabryczna 14B/1, PostalCode=65-410, OID.1.3.6.1.4.1.311.60.2.1.3=PL, OID.1.3.6.1.4.1.311.60.2.1.1=Zielona Gra, OID.1.3.6.1.4.1.311.60.2.1.2=lubuskie, SERIALNUMBER=0000356397, OID.2.5.4.15=Private Organization, CN=Mirillis Sp. z o.o." (SHA1: CE:92:E0:3E:B5:82:25:91:81:C9:C6:67:EB:2D:E3:B6:2B:08:6C:E3: (1.2.840.113549.1.1.11); see report for more information) The input sample is signed with a certificate issued by "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification