|
4/5
|
OS
|
Disables a crucial system tool
|
-
|
|
-
Disables the Task Manager.
|
|
4/5
|
File System
|
Renames user files
|
Ransomware
|
|
-
Renames multiple user files. This is an indicator for an encryption attempt.
|
|
3/5
|
Persistence
|
Modifies startup configuration
|
-
|
|
-
Modifies the boot configuration by editing "c:\autoexec.bat".
|
|
2/5
|
Anti Analysis
|
Resolves APIs dynamically to possibly evade static detection
|
-
|
|
-
Resolves an unusually high number of APIs.
|
|
2/5
|
Browser
|
Reads data related to browser cookies
|
-
|
|
-
Accesses Cookies for "Microsoft Internet Explorer".
|
|
1/5
|
File System
|
Modifies operating system directory
|
-
|
|
-
Creates file "C:\\Windows\inf\.NET CLR Networking 4.0.0.0\5F4E6574776F726B696E6750657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\.NET Memory Cache 4.0\6E65746D656D6F727963616368652E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\ASP.NET\6173706E65745F706572662E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\ASP.NET_4.0.30319\6173706E65745F706572662E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\aspnet_state\6173706E65745F73746174655F706572662E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\MSDTC Bridge 3.0.0.0\5F5472616E73616374696F6E42726964676550657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\MSDTC Bridge 4.0.0.0\5F5472616E73616374696F6E42726964676550657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\ServiceModelEndpoint 3.0.0.0\5F536572766963654D6F64656C456E64706F696E7450657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\ServiceModelOperation 3.0.0.0\5F536572766963654D6F64656C4F7065726174696F6E50657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\ServiceModelService 3.0.0.0\5F536572766963654D6F64656C5365727669636550657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\SMSvcHost 3.0.0.0\5F534D537663486F737450657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\SMSvcHost 4.0.0.0\5F534D537663486F737450657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\Windows Workflow Foundation 3.0.0.0\50657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\Windows Workflow Foundation 4.0.0.0\50657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\inf\WmiApRpl\576D69417052706C2E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\4170706C69636174696F6E436F6E66696775726174696F6E506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\4E617669676174696F6E4261722E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\50617373776F726456616C756554657874426F782E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\50726F766964657273506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\5365637572697479506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\57656241646D696E506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\57697A617264506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\616C6572745F6C72672E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\415350646F744E45545F6C6F676F2E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\617370785F66696C652E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6272616E64696E675F46756C6C322E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6461726B426C75655F475241442E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\646573656C65637465645461625F3178312E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\666F6C6465722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E426C75652E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E57686974652E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6865616465724752414449454E545F54616C6C2E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\68656C702E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\48656C7049636F6E5F736F6C69642E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\696D616765312E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\696D616765322E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\726571756972656442616E672E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656375726974795F77617465726D61726B2E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656C65637465645461625F3178312E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\746F70477261645265706561742E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\79656C6C6F77434F524E45522E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C526F6C65732E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C526F6C65732E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\53716C50657273697374656E6365536572766963655F4C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\53716C50657273697374656E6365536572766963655F536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\547261636B696E675F4C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\547261636B696E675F536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\4170706C69636174696F6E436F6E66696775726174696F6E506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\4E617669676174696F6E4261722E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\50617373776F726456616C756554657874426F782E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\50726F766964657273506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\5365637572697479506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\57656241646D696E506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\57697A617264506167652E6373.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\616C6572745F6C72672E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\415350646F744E45545F6C6F676F2E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\617370785F66696C652E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6272616E64696E675F46756C6C322E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6461726B426C75655F475241442E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\646573656C65637465645461625F3178312E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\666F6C6465722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E426C75652E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E57686974652E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6865616465724752414449454E545F54616C6C2E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\68656C702E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\48656C7049636F6E5F736F6C69642E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\696D616765312E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\696D616765322E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\726571756972656442616E672E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656375726974795F77617465726D61726B2E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656C65637465645461625F3178312E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\746F70477261645265706561742E6A7067.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\79656C6C6F77434F524E45522E676966.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\6173706E65745F706572662E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\6173706E65745F73746174655F706572662E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\434F52506572664D6F6E53796D626F6C732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C526F6C65732E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\6E65746D656D6F727963616368652E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\50657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1025\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1028\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1029\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1030\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1031\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1032\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1033\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1035\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1036\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1037\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1038\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1040\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1041\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1042\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1043\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1044\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1045\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1046\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1049\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1053\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1055\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\2052\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\2070\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\3082\65756C612E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\6865616465722E626D70.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\53706C61736853637265656E2E626D70.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\77617465726D61726B2E626D70.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C50657273697374656E636550726F76696465724C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C50657273697374656E636550726F7669646572536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C576F726B666C6F77496E7374616E636553746F72654C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C576F726B666C6F77496E7374616E636553746F7265536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E636550726F76696465724C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E636550726F7669646572536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E6365536572766963655F4C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E6365536572766963655F536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C576F726B666C6F77496E7374616E636553746F72654C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C576F726B666C6F77496E7374616E636553746F7265536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C576F726B666C6F77496E7374616E636553746F7265536368656D61557067726164652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\547261636B696E675F4C6F6769632E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\547261636B696E675F536368656D612E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\546869726450617274794E6F74696365732E747874.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C526F6C65732E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F446174614F7261636C65436C69656E7450657266436F756E746572735F73686172656431325F6E65757472616C2E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F4461746150657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F6461746170657266636F756E746572735F73686172656431325F6E65757472616C2E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F4E6574776F726B696E6750657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F4E6574776F726B696E6750657266436F756E746572735F76322E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F534D537663486F737450657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F5472616E73616374696F6E42726964676550657266436F756E746572732E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\41674170704C61756E63682E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\416743785F5343342E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\4167476C4661756C74486973746F72792E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\4167476C4667417070486973746F72792E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\4167476C476C6F62616C486973746F72792E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\4167476C5541445F505F532D312D352D32312D333738353431383038352D323537323438353233382D3839353832393333362D313030302E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\4167476C5541445F532D312D352D32312D333738353431383038352D323537323438353233382D3839353832393333362D313030302E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Prefetch\4167526F627573742E6462.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\SoftwareDistribution\SelfUpdate\77756964656E742E747874.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\System32\catroot2\64626572722E747874.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\System32\6C6963656E73652E727466.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\System32\wbem\Performance\576D69417052706C2E68.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\System32\WindowsPowerShell\v1.0\Examples\70726F66696C652E707331.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Temp\46585341504944656275674C6F6746696C652E747874.desu" in the OS directory.
|
|
-
Creates file "C:\\Windows\Temp\4658535449464644656275674C6F6746696C652E747874.desu" in the OS directory.
|
|
1/5
|
Process
|
Process crashed
|
-
|
|
-
Process "c:\windows\explorer.exe" crashed.
|