I explored the VirusTotal sandboxes and compiled a large database of information about bots
Enjoy! :)
`(UserDomainName) \ (UserName)
[SystemState] TickCount=(TickCount) ms SystemPageSize=(SystemPageSize)
[CurProcState] CurrentDirectory=(AppPath) CommandLine=(CommandLine)
RUN LIST: (LIST OF "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RunMRU")
STARTUP LIST: [Run] (LIST OF "SOFTWARE\Microsoft\Windows\CurrentVersion\Run") [RunOnce] (LIST OF "SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce")
DISKS: (LIST OF GetLogicalDrives)}
TEMP FILES: (TempFilesList)
RECENT FILES: (RecentFilesList)
DESKTOP FILES: (DesktopFilesList)
PROCESSES: (ProcList)`