%SystemDrive%\Config.Msi\18f68a.rbf
new file created
%SystemDrive%\Config.Msi\18f68a.rbf
file moved
%SystemDrive%\Config.Msi\18f68b.rbf
new file created
%SystemDrive%\Config.Msi\18f68b.rbf
file moved
%SystemDrive%\Config.Msi\18f68c.rbf
new file created
%SystemDrive%\Config.Msi\18f68c.rbf
file moved
%SystemDrive%\Config.Msi\18f68d.rbf
new file created
%SystemDrive%\Config.Msi\18f68d.rbf
file moved
%SystemDrive%\Config.Msi\18f68e.rbf
new file created
%SystemDrive%\Config.Msi\18f68e.rbf
file moved
%SystemDrive%\Config.Msi\18f68f.rbf
new file created
%SystemDrive%\Config.Msi\18f68f.rbf
file moved
%SystemDrive%\Config.Msi\18f690.rbf
new file created
%SystemDrive%\Config.Msi\18f690.rbf
file moved
%SystemDrive%\Config.Msi\18f691.rbf
new file created
%SystemDrive%\Config.Msi\18f691.rbf
file moved
%SystemDrive%\Config.Msi\18f692.rbf
new file created
%SystemDrive%\Config.Msi\18f692.rbf
file moved
%SystemDrive%\Config.Msi\18f693.rbf
new file created
%SystemDrive%\Config.Msi\18f693.rbf
file moved
%SystemDrive%\Config.Msi\18f694.rbf
new file created
%SystemDrive%\Config.Msi\18f694.rbf
file moved
%SystemDrive%\Config.Msi\18f695.rbf
new file created
%SystemDrive%\Config.Msi\18f695.rbf
file moved
%SystemDrive%\Config.Msi\18f696.rbf
new file created
%SystemDrive%\Config.Msi\18f696.rbf
file moved
%SystemDrive%\Config.Msi\18f697.rbf
new file created
%SystemDrive%\Config.Msi\18f697.rbf
file moved
%SystemDrive%\Config.Msi\18f698.rbf
new file created
%SystemDrive%\Config.Msi\18f698.rbf
file moved
%SystemDrive%\Config.Msi\18f699.rbf
new file created
%SystemDrive%\Config.Msi\18f699.rbf
file moved
%SystemDrive%\Config.Msi\18f69a.rbf
new file created
%SystemDrive%\Config.Msi\18f69a.rbf
file moved
%SystemDrive%\Config.Msi\18f69b.rbf
new file created
%SystemDrive%\Config.Msi\18f69b.rbf
file moved
%SystemDrive%\Config.Msi\18f69c.rbf
new file created
%SystemDrive%\Config.Msi\18f69c.rbf
file moved
%SystemDrive%\Config.Msi\18f69d.rbf
new file created
%SystemDrive%\Config.Msi\18f69d.rbf
file moved
%SystemDrive%\Config.Msi\18f6a0.rbs
new file created
%SystemDrive%\Config.Msi\18f6a1.rbf
new file created
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Diagnostic Utility\desktop.ini
new file created
%SystemDrive%\Config.Msi\18f6a2.rbf
new file created
%SystemDrive%\Config.Msi\18f6a2.rbf
file moved
%SystemDrive%\Config.Msi\18f6a3.rbf
new file created
%SystemDrive%\Config.Msi\18f6a3.rbf
file moved
%SystemDrive%\Config.Msi\18f6a4.rbf
new file created
%SystemDrive%\Config.Msi\18f6a4.rbf
file moved
%SystemDrive%\Config.Msi\18f6a5.rbf
new file created
%SystemDrive%\Config.Msi\18f6a5.rbf
file moved
%SystemDrive%\Config.Msi\18f6a6.rbf
new file created
%SystemDrive%\Config.Msi\18f6a6.rbf
file moved
%SystemDrive%\Config.Msi\18f6a7.rbf
new file created
%SystemDrive%\Config.Msi\18f6a7.rbf
file moved
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\System32\ci.dll,-100
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\System32\ci.dll,-101
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\System32\fveui.dll,-843
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\System32\fveui.dll,-844
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\System32\wuaueng.dll,-400
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\b9\E27DDEF7\\@%SystemRoot%\system32\NgcRecovery.dll,-100
new registry key parameter created
%ALLUSERSPROFILE%\Sophos\Sophos Home\Drop\HomeUninstall-{7F163667-881A-409A-839E-0C3AD15079F2}.json
new file created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\UpdateStatus\\IsUninstalling
new registry key parameter created
%SystemDrive%\Config.Msi\18f5bf.rbs
new file created
%SystemDrive%\Config.Msi\18f5c0.rbf
new file created
%SystemDrive%\Config.Msi\18f5c0.rbf
file moved
%SystemDrive%\Config.Msi\18f5c1.rbf
new file created
%SystemDrive%\Config.Msi\18f5c1.rbf
file moved
%SystemDrive%\Config.Msi\18f5c2.rbf
new file created
%SystemDrive%\Config.Msi\18f5c2.rbf
file moved
%SystemDrive%\Config.Msi\18f5c3.rbf
new file created
%SystemDrive%\Config.Msi\18f5c3.rbf
file moved
%SystemDrive%\Config.Msi\18f5c4.rbf
new file created
%SystemDrive%\Config.Msi\18f5c4.rbf
file moved
%SystemDrive%\Config.Msi\18f5c5.rbf
new file created
%SystemDrive%\Config.Msi\18f5c5.rbf
file moved
%SystemDrive%\Config.Msi\18f5c6.rbf
new file created
%SystemDrive%\Config.Msi\18f5c6.rbf
file moved
%SystemDrive%\Config.Msi\18f5c7.rbf
new file created
%SystemDrive%\Config.Msi\18f5c7.rbf
file moved
%SystemDrive%\Config.Msi\18f5c8.rbf
new file created
%SystemDrive%\Config.Msi\18f5c8.rbf
file moved
%SystemDrive%\Config.Msi\18f5c9.rbf
new file created
%SystemDrive%\Config.Msi\18f5c9.rbf
file moved
%SystemDrive%\Config.Msi\18f5ca.rbf
new file created
%SystemDrive%\Config.Msi\18f5ca.rbf
file moved
%SystemDrive%\Config.Msi\18f5cb.rbf
new file created
%SystemDrive%\Config.Msi\18f5cb.rbf
file moved
%SystemDrive%\Config.Msi\18f5cc.rbf
new file created
%SystemDrive%\Config.Msi\18f5cc.rbf
file moved
%SystemDrive%\Config.Msi\18f5cd.rbf
new file created
%SystemDrive%\Config.Msi\18f5cd.rbf
file moved
%SystemDrive%\Config.Msi\18f5ce.rbf
new file created
%SystemDrive%\Config.Msi\18f5ce.rbf
file moved
%SystemDrive%\Config.Msi\18f5cf.rbf
new file created
%SystemDrive%\Config.Msi\18f5cf.rbf
file moved