Colony

Reads
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox
HKEY_CURRENT_USER\Software\Apple Computer, Inc.\Safari
HKEY_CURRENT_USER\Software\Opera Software
HKEY_CURRENT_USER\Software\Tencent\QQBrowser
HKEY_CURRENT_USER\Software\SogouExplorer
HKEY_CURRENT_USER\Software\Baidu\BaiduBrowser
HKEY_CURRENT_USER\Software\UCBrowser
HKEY_CURRENT_USER\Software\liebao

HKEY_LOCAL_MACHINE\SOFTWARE\F-Secure
HKEY_LOCAL_MACHINE\SOFTWARE\webroot
HKEY_LOCAL_MACHINE\SOFTWARE\Bitdefender Agent
HKEY_LOCAL_MACHINE\SOFTWARE\Emsisoft

Writes
C:\Windows\System32\MS.dat
C:\Windows\System32\spoolsr.exe
C:\Windows\System32\KeyHook64.dll
C:\Windows\System32\KH.dat
C:\Windows\System32\usp20.dll
C:\Windows\System32\UP.dat
C:\Windows\System32\drivers\iaStorE.sys