Donat Was Here

DonatShell
Server IP : 180.180.241.3 / Your IP : 216.73.216.252
Web Server : Microsoft-IIS/7.5
System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586
User : IUSR ( 0)
PHP Version : 5.3.28
Disable Function : NONE
MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF
Directory : C:/Program Files/Sophos/Endpoint Defense/
Upload File :
[ HOME SHELL ]
Current File : C:/Program Files/Sophos/Endpoint Defense/integrity.dat
ProtectDetails 000d:integrity.dat 0005:1.0.7 000e:Sophos Limited 0003:SED 000b:2.2.0.11405 2020-01-13T15:32:38Z
ProtectService 0017:Sophos Endpoint Defense 2 0 1 001d:system32\DRIVERS\SophosED.sys
ProtectService 001f:Sophos Endpoint Defense Service 10 2 1 003a:%SophosProgramFilesNative%\Endpoint Defense\SEDService.exe ObjectName 000b:LocalSystem
ProtectService 0020:Sophos System Protection Service 10 2 1 003a:%SophosProgramFilesNative%\Endpoint Defense\SSPService.exe ObjectName 000b:LocalSystem
ProtectApplication 0049:%SophosProgramFilesNative%\Endpoint Defense\FileAnalyzerSubmitterTool.exe
ProtectApplication 0043:%SophosProgramFilesNative%\Endpoint Defense\SophosFileSubmitter.exe
ProtectApplication 0036:%SophosProgramFilesNative%\Endpoint Defense\SspEdr.exe
ProtectApplication 0036:%SophosProgramFilesNative%\Endpoint Defense\SEDcli.exe
ProtectApplication 003c:%SophosProgramFilesNative%\Endpoint Defense\SEDTelemetry.exe
ProtectApplication 003f:%SophosProgramFilesNative%\Endpoint Defense\TelemetryPlugin.exe
ProtectApplication 003c:%SophosProgramFilesNative%\Endpoint Defense\SSPTelemetry.exe
ProtectApplication 0022:%SystemRoot%\System32\SophosNA.exe
ProtectRegKey 0021:\REGISTRY\MACHINE\SOFTWARE\Sophos AllowChangeValues
ProtectRegKey 002d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Sophos AllowChangeValues
ProtectRegKey 0031:\REGISTRY\MACHINE\SOFTWARE\Sophos\EndpointDefense RecursiveReadOnly
ProtectRegKey 0044:\REGISTRY\MACHINE\SOFTWARE\Sophos\EndpointDefense\LocalConfiguration AllowChangeValues
ProtectRegKey 004b:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense AllowChangeSubKeys
ProtectRegKey 0055:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\Instances RecursiveReadOnly
ProtectRegKey 0051:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\Paths RecursiveReadOnly
ProtectRegKey 0054:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\Scanning RecursiveReadOnly
ProtectRegKey 0058:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\EventJournal RecursiveReadOnly
ProtectRegKey 005c:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection RecursiveReadOnly
ProtectRegKey 0067:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Components AllowChangeSubKeys
ProtectRegKey 006b:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Components\SED RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Services AllowChangeSubKeys
ProtectRegKey 007d:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Services\Sophos Endpoint Defense RecursiveReadOnly
ProtectRegKey 0085:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Services\Sophos Endpoint Defense Service RecursiveReadOnly
ProtectRegKey 0086:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Services\Sophos System Protection Service RecursiveReadOnly
ProtectRegKey 0053:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense Service RecursiveReadOnly
ProtectRegKey 0054:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\Sophos System Protection Service RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Sophos System Protection RecursiveReadOnly
ProtectRegKey 005d:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos Endpoint Defense RecursiveReadOnly
ProtectRegKey 0051:%HKLMSophosSoftware32%\AutoUpdate\Products\{1129226C-32AB-4B72-85E1-A9CC8DFBC859} RecursiveReadOnly
ProtectRegKey 002c:%HKLMSophosSoftware32%\Telemetry\Plugins\SED RecursiveReadOnly
ProtectRegKey 002c:%HKLMSophosSoftware32%\Telemetry\Plugins\SSP RecursiveReadOnly
ProtectRegKey 004c:%HKLMSophosSoftware32%\Remote Management System\ManagementAgent\Adapters\SED RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVService.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVAdminService.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosBootTasks.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ssr32.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ssr64.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swc_service.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_service.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_filter.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_update.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_update_64.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_lsp32_util.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_lspdiag.exe RecursiveReadOnly
ProtectRegKey 0066:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_di.exe RecursiveReadOnly
ProtectRegKey 0066:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_fc.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WSCClient.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVCleanupService.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVTelem.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sav32cli.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDCService.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDCDevCon.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDCDevCon64.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SavProxy.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ConfigureSAV.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ALSvc.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosUpdate.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlMon.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GatherTelem.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SubmitTelem.exe RecursiveReadOnly
ProtectRegKey 0067:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AUTelem.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFileScanner.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFS.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ssp.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDRService.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDService.exe RecursiveReadOnly
ProtectRegKey 0066:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDcli.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDTelemetry.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDuninstall.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SSPService.exe RecursiveReadOnly
ProtectRegKey 0079:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FileAnalyzerSubmitterTool.exe RecursiveReadOnly
ProtectRegKey 0073:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFileSubmitter.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SSPTelemetry.exe RecursiveReadOnly
ProtectRegKey 0066:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SspEdr.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosNA.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\McsAgent.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\McsClient.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosNtpService.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSnort.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Sophos UI.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSafeStore32.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSafeStore64.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosCleanM.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hmpalert.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EXPTelem.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SLDService.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFIMService.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFIMTelemetry.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosHealth.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosHealthClient.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFSTelemetry.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFSVerify.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosNtpTelemetry.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosUITelemetry.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosUpdateMgr.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SUMService.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSSEUninstall.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSSEValidator.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSMEUninstall.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSMEValidator.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosDiag.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosESH.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\su-repair.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\su-setup32.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\su-setup64.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVService.exe RecursiveReadOnly
ProtectRegKey 007b:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVAdminService.exe RecursiveReadOnly
ProtectRegKey 007b:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosBootTasks.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ssr32.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ssr64.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swc_service.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_service.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_filter.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_update.exe RecursiveReadOnly
ProtectRegKey 0079:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_update_64.exe RecursiveReadOnly
ProtectRegKey 007a:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_lsp32_util.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_lspdiag.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_di.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\swi_fc.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WSCClient.exe RecursiveReadOnly
ProtectRegKey 007d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVCleanupService.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SAVTelem.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sav32cli.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDCService.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDCDevCon.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDCDevCon64.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SavProxy.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ConfigureSAV.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ALSvc.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosUpdate.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlMon.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GatherTelem.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SubmitTelem.exe RecursiveReadOnly
ProtectRegKey 0073:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AUTelem.exe RecursiveReadOnly
ProtectRegKey 007d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFileScanner.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFS.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ssp.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDRService.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDService.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDcli.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDTelemetry.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SEDuninstall.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SSPService.exe RecursiveReadOnly
ProtectRegKey 0085:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FileAnalyzerSubmitterTool.exe RecursiveReadOnly
ProtectRegKey 007f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFileSubmitter.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SSPTelemetry.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SspEdr.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosNA.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\McsAgent.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\McsClient.exe RecursiveReadOnly
ProtectRegKey 007c:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosNtpService.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSnort.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Sophos UI.exe RecursiveReadOnly
ProtectRegKey 007d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSafeStore32.exe RecursiveReadOnly
ProtectRegKey 007d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSafeStore64.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosCleanM.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hmpalert.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EXPTelem.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SLDService.exe RecursiveReadOnly
ProtectRegKey 007c:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFIMService.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFIMTelemetry.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosHealth.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosHealthClient.exe RecursiveReadOnly
ProtectRegKey 007d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFSTelemetry.exe RecursiveReadOnly
ProtectRegKey 007a:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosFSVerify.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosNtpTelemetry.exe RecursiveReadOnly
ProtectRegKey 007d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosUITelemetry.exe RecursiveReadOnly
ProtectRegKey 007b:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosUpdateMgr.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SUMService.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSSEUninstall.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSSEValidator.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSMEUninstall.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosSMEValidator.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosDiag.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SophosESH.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\su-repair.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\su-setup32.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\su-setup64.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVService.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVAdminService.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosBootTasks.exe RecursiveReadOnly
ProtectRegKey 005e:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ssr32.exe RecursiveReadOnly
ProtectRegKey 005e:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ssr64.exe RecursiveReadOnly
ProtectRegKey 0064:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swc_service.exe RecursiveReadOnly
ProtectRegKey 0064:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_service.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_filter.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_update.exe RecursiveReadOnly
ProtectRegKey 0066:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_update_64.exe RecursiveReadOnly
ProtectRegKey 0067:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_lsp32_util.exe RecursiveReadOnly
ProtectRegKey 0064:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_lspdiag.exe RecursiveReadOnly
ProtectRegKey 005f:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_di.exe RecursiveReadOnly
ProtectRegKey 005f:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_fc.exe RecursiveReadOnly
ProtectRegKey 0062:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\WSCClient.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVCleanupService.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVTelem.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\sav32cli.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDCService.exe RecursiveReadOnly
ProtectRegKey 0062:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDCDevCon.exe RecursiveReadOnly
ProtectRegKey 0064:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDCDevCon64.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SavProxy.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ConfigureSAV.exe RecursiveReadOnly
ProtectRegKey 005e:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ALSvc.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosUpdate.exe RecursiveReadOnly
ProtectRegKey 005e:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\AlMon.exe RecursiveReadOnly
ProtectRegKey 0064:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\GatherTelem.exe RecursiveReadOnly
ProtectRegKey 0064:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SubmitTelem.exe RecursiveReadOnly
ProtectRegKey 0060:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\AUTelem.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFileScanner.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFS.exe RecursiveReadOnly
ProtectRegKey 005c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ssp.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDRService.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDService.exe RecursiveReadOnly
ProtectRegKey 005f:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDcli.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDTelemetry.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDuninstall.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SSPService.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\FileAnalyzerSubmitterTool.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFileSubmitter.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SSPTelemetry.exe RecursiveReadOnly
ProtectRegKey 005f:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SspEdr.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosNA.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\McsAgent.exe RecursiveReadOnly
ProtectRegKey 0062:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\McsClient.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosNtpService.exe RecursiveReadOnly
ProtectRegKey 0064:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSnort.exe RecursiveReadOnly
ProtectRegKey 0062:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\Sophos UI.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSafeStore32.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSafeStore64.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosCleanM.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\hmpalert.exe RecursiveReadOnly
ProtectRegKey 0061:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\EXPTelem.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SLDService.exe RecursiveReadOnly
ProtectRegKey 0069:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFIMService.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFIMTelemetry.exe RecursiveReadOnly
ProtectRegKey 0065:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosHealth.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosHealthClient.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFSTelemetry.exe RecursiveReadOnly
ProtectRegKey 0067:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFSVerify.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosNtpTelemetry.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosUITelemetry.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosUpdateMgr.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SUMService.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSSEUninstall.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSSEValidator.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSMEUninstall.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSMEValidator.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosDiag.exe RecursiveReadOnly
ProtectRegKey 0062:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosESH.exe RecursiveReadOnly
ProtectRegKey 0062:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\su-repair.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\su-setup32.exe RecursiveReadOnly
ProtectRegKey 0063:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\su-setup64.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVService.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVAdminService.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosBootTasks.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ssr32.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ssr64.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swc_service.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_service.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_filter.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_update.exe RecursiveReadOnly
ProtectRegKey 0072:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_update_64.exe RecursiveReadOnly
ProtectRegKey 0073:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_lsp32_util.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_lspdiag.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_di.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\swi_fc.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\WSCClient.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVCleanupService.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SAVTelem.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\sav32cli.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDCService.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDCDevCon.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDCDevCon64.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SavProxy.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ConfigureSAV.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ALSvc.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosUpdate.exe RecursiveReadOnly
ProtectRegKey 006a:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\AlMon.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\GatherTelem.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SubmitTelem.exe RecursiveReadOnly
ProtectRegKey 006c:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\AUTelem.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFileScanner.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFS.exe RecursiveReadOnly
ProtectRegKey 0068:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ssp.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SDRService.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDService.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDcli.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDTelemetry.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SEDuninstall.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SSPService.exe RecursiveReadOnly
ProtectRegKey 007e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\FileAnalyzerSubmitterTool.exe RecursiveReadOnly
ProtectRegKey 0078:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFileSubmitter.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SSPTelemetry.exe RecursiveReadOnly
ProtectRegKey 006b:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SspEdr.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosNA.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\McsAgent.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\McsClient.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosNtpService.exe RecursiveReadOnly
ProtectRegKey 0070:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSnort.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\Sophos UI.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSafeStore32.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSafeStore64.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosCleanM.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\hmpalert.exe RecursiveReadOnly
ProtectRegKey 006d:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\EXPTelem.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SLDService.exe RecursiveReadOnly
ProtectRegKey 0075:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFIMService.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFIMTelemetry.exe RecursiveReadOnly
ProtectRegKey 0071:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosHealth.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosHealthClient.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFSTelemetry.exe RecursiveReadOnly
ProtectRegKey 0073:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosFSVerify.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosNtpTelemetry.exe RecursiveReadOnly
ProtectRegKey 0076:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosUITelemetry.exe RecursiveReadOnly
ProtectRegKey 0074:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosUpdateMgr.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SUMService.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSSEUninstall.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSSEValidator.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSMEUninstall.exe RecursiveReadOnly
ProtectRegKey 0077:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosSMEValidator.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosDiag.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\SophosESH.exe RecursiveReadOnly
ProtectRegKey 006e:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\su-repair.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\su-setup32.exe RecursiveReadOnly
ProtectRegKey 006f:\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\su-setup64.exe RecursiveReadOnly
ProtectDirectory 0013:%SophosProgramData% AllowChangeSubDirs
ProtectDirectory 0020:%SophosProgramData%\Certificates AllowChangeSubDirs
ProtectDirectory 001a:%SophosProgramFilesNative% AllowChangeSubDirs
ProtectDirectory 0016:%SophosProgramFiles32% AllowChangeSubDirs
ProtectDirectory 002b:%SophosProgramFilesNative%\Endpoint Defense RecursiveReadOnly
ProtectDirectory 0024:%SophosProgramData%\Endpoint Defense RecursiveReadOnly
DigitalSignature 0005:TP001 RSA-2048_SHA-256 0158:BktHRNAZiFZHhuO7gzV61IwAXaym4dqakAqB3GPSu2Kk0f8FHri++9PUC8GpCh5FhnCr539EkUAJCKct1AN1HXsFsVMeVxA8dTHB11ICtxQSE8s6hX1DvX64dSa0iYse+COewq1Z0tDkc/slnW9TXZlwvggGmZPQ32ASYPBKRvrUdUu75uKCBqJMhcOM2N5qxQ4WevL5BjUp/QjWBi3+rctLgQnvAOkD3erZVKUltS5TV7bMbI3cnVIZvChECUum3XNcfLRnjQKJSKDYnN6YKrgcoaAqz2dIzDhVu+u/wHgnVeknV+ve5rVGfigdI+N5xMuncYDUjJIpqIsH9TWnpw==
Anon7 - 2022
AnonSec Team