VMRay Analyzer Report for Sample #76042
VMRay Analyzer
3.0.2
Process
1
2464
ohbdap.exe
1116
ohbdap.exe
"C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ohbdap.exe"
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\users\5p5nrgjn0js halpmcxz\desktop\ohbdap.exe
Child_Of
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Opened
Opened
Created
Created
Opened
Opened
Opened
Opened
Process
2
2484
cmd.exe
2464
cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\cmd.exe
Child_Of
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Process
3
2564
mode.com
2484
mode.com
mode con cp select=1251
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\mode.com
Process
4
2580
vssadmin.exe
2484
vssadmin.exe
vssadmin delete shadows /all /quiet
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\vssadmin.exe
Child_Of
Process
5
2604
vssvc.exe
460
vssvc.exe
C:\Windows\system32\vssvc.exe
C:\Windows\system32\
c:\windows\system32\vssvc.exe
Process
7
1372
ohbdap.exe
1120
ohbdap.exe
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ohbdap.exe"
C:\Windows\system32\
c:\programdata\microsoft\windows\start menu\programs\startup\ohbdap.exe
Process
8
1380
ohbdap.exe
1120
ohbdap.exe
"C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ohbdap.exe"
C:\Windows\system32\
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\ohbdap.exe
File
$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
c:\
c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
ini
File
boot\bcd
boot\bcd
c:\
c:\boot\bcd
File
boot\bcd.log
boot\bcd.log
c:\
c:\boot\bcd.log
log
File
boot\bcd.log1
boot\bcd.log1
c:\
c:\boot\bcd.log1
log1
File
boot\bootstat.dat
boot\bootstat.dat
c:\
c:\boot\bootstat.dat
dat
File
boot\bcd.log2
boot\bcd.log2
c:\
c:\boot\bcd.log2
log2
File
bootsect.bak
bootsect.bak
c:\
c:\bootsect.bak
bak
File
boot\cs-cz\bootmgr.exe.mui
boot\cs-cz\bootmgr.exe.mui
c:\
c:\boot\cs-cz\bootmgr.exe.mui
mui
File
boot\da-dk\bootmgr.exe.mui
boot\da-dk\bootmgr.exe.mui
c:\
c:\boot\da-dk\bootmgr.exe.mui
mui
File
boot\de-de\bootmgr.exe.mui
boot\de-de\bootmgr.exe.mui
c:\
c:\boot\de-de\bootmgr.exe.mui
mui
File
boot\el-gr\bootmgr.exe.mui
boot\el-gr\bootmgr.exe.mui
c:\
c:\boot\el-gr\bootmgr.exe.mui
mui
File
boot\en-us\bootmgr.exe.mui
boot\en-us\bootmgr.exe.mui
c:\
c:\boot\en-us\bootmgr.exe.mui
mui
File
boot\en-us\memtest.exe.mui
boot\en-us\memtest.exe.mui
c:\
c:\boot\en-us\memtest.exe.mui
mui
File
boot\es-es\bootmgr.exe.mui
boot\es-es\bootmgr.exe.mui
c:\
c:\boot\es-es\bootmgr.exe.mui
mui
File
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
c:\
c:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
xml
File
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab
c:\
c:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab
cab
File
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.msi
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.msi
c:\
c:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.msi
msi
File
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
c:\
c:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
xml
File
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
c:\
c:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
cab
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
xml
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
xml
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml
xml
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml
xml
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.xml
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.xml
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.xml
xml
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml
xml
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.xml
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.xml
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.xml
xml
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml
xml
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml
xml
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml
xml
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi
msi
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml
xml
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm
chm
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm
chm
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\branding.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\branding.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\branding.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
xml
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.xml
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.xml
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.xml
xml
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.xml
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.xml
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.xml
xml
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.xml
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.xml
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.xml
xml
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.xml
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.xml
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.xml
xml
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
cab
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.xml
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.xml
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.xml
xml
File
program files\common files\microsoft shared\grphflt\ms.eps
program files\common files\microsoft shared\grphflt\ms.eps
c:\
c:\program files\common files\microsoft shared\grphflt\ms.eps
eps
File
program files\common files\microsoft shared\grphflt\ms.gif
program files\common files\microsoft shared\grphflt\ms.gif
c:\
c:\program files\common files\microsoft shared\grphflt\ms.gif
gif
File
program files\common files\microsoft shared\grphflt\ms.jpg
program files\common files\microsoft shared\grphflt\ms.jpg
c:\
c:\program files\common files\microsoft shared\grphflt\ms.jpg
jpg
File
program files\common files\microsoft shared\grphflt\ms.png
program files\common files\microsoft shared\grphflt\ms.png
c:\
c:\program files\common files\microsoft shared\grphflt\ms.png
png
File
program files\common files\microsoft shared\ink\alphabet.xml
program files\common files\microsoft shared\ink\alphabet.xml
c:\
c:\program files\common files\microsoft shared\ink\alphabet.xml
xml
File
program files\common files\microsoft shared\ink\content.xml
program files\common files\microsoft shared\ink\content.xml
c:\
c:\program files\common files\microsoft shared\ink\content.xml
xml
File
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-join.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-split.avi
avi
File
program files\common files\microsoft shared\ink\en-us\correct.avi
program files\common files\microsoft shared\ink\en-us\correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\delete.avi
program files\common files\microsoft shared\ink\en-us\delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\delete.avi
avi
File
program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\keypad\ea.xml
program files\common files\microsoft shared\ink\fsdefinitions\keypad\ea.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\keypad\ea.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml
program files\common files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml
program files\common files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\keypad.xml
program files\common files\microsoft shared\ink\fsdefinitions\keypad.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\keypad.xml
xml
File
program files\common files\microsoft shared\ink\ipshrv.xml
program files\common files\microsoft shared\ink\ipshrv.xml
c:\
c:\program files\common files\microsoft shared\ink\ipshrv.xml
xml
File
program files\common files\microsoft shared\ink\ipsita.xml
program files\common files\microsoft shared\ink\ipsita.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsita.xml
xml
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
cab
File
program files\common files\microsoft shared\ink\ipsptb.xml
program files\common files\microsoft shared\ink\ipsptb.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsptb.xml
xml
File
program files\common files\microsoft shared\ink\ipsptg.xml
program files\common files\microsoft shared\ink\ipsptg.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsptg.xml
xml
File
program files\common files\microsoft shared\ink\ipsrom.xml
program files\common files\microsoft shared\ink\ipsrom.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsrom.xml
xml
File
program files\common files\microsoft shared\ink\ipsrus.xml
program files\common files\microsoft shared\ink\ipsrus.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsrus.xml
xml
File
program files\common files\microsoft shared\office14\1033\readme.htm
program files\common files\microsoft shared\office14\1033\readme.htm
c:\
c:\program files\common files\microsoft shared\office14\1033\readme.htm
htm
File
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml
xml
File
program files\common files\microsoft shared\ink\ipsplk.xml
program files\common files\microsoft shared\ink\ipsplk.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsplk.xml
xml
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi
msi
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
cab
File
program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml
xml
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi
msi
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm
chm
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
cab
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.msi
msi
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
cab
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.msi
msi
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab
cab
File
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml
program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.msi
msi
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi
msi
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi
msi
File
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml
program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml
program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml
xml
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab
cab
File
program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml
program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml
program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml
program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml
xml
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab
cab
File
program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml
program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml
program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml
program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml
program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml
program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml
program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml
xml
File
program files\common files\microsoft shared\smart tag\1033\mcabout.htm
program files\common files\microsoft shared\smart tag\1033\mcabout.htm
c:\
c:\program files\common files\microsoft shared\smart tag\1033\mcabout.htm
htm
File
program files\common files\microsoft shared\smart tag\1033\mcabout.htm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\1033\mcabout.htm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\1033\mcabout.htm.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\lists\1033\dates.xml
program files\common files\microsoft shared\smart tag\lists\1033\dates.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\dates.xml
xml
File
program files\common files\microsoft shared\smart tag\lists\1033\dates.xml.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\lists\1033\dates.xml.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\dates.xml.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\lists\1033\phone.xml
program files\common files\microsoft shared\smart tag\lists\1033\phone.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\phone.xml
xml
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi
msi
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab
cab
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi
msi
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\lists\1033\phone.xml.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\lists\1033\phone.xml.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\phone.xml.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat
program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat
dat
File
program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml
program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml
xml
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi
msi
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\lists\1033\time.xml
program files\common files\microsoft shared\smart tag\lists\1033\time.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\time.xml
xml
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab
cab
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi
msi
File
program files\common files\microsoft shared\smart tag\lists\basmla.xsl
program files\common files\microsoft shared\smart tag\lists\basmla.xsl
c:\
c:\program files\common files\microsoft shared\smart tag\lists\basmla.xsl
xsl
File
program files\common files\microsoft shared\smart tag\lists\basmla.xsl.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\lists\basmla.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\lists\basmla.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\metconv.txt
program files\common files\microsoft shared\smart tag\metconv.txt
c:\
c:\program files\common files\microsoft shared\smart tag\metconv.txt
txt
File
program files\common files\microsoft shared\smart tag\metconv.txt.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\metconv.txt.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\metconv.txt.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\stationery\bears.htm
program files\common files\microsoft shared\stationery\bears.htm
c:\
c:\program files\common files\microsoft shared\stationery\bears.htm
htm
File
program files\common files\microsoft shared\stationery\bears.jpg
program files\common files\microsoft shared\stationery\bears.jpg
c:\
c:\program files\common files\microsoft shared\stationery\bears.jpg
jpg
File
program files\common files\microsoft shared\stationery\blue_gradient.jpg
program files\common files\microsoft shared\stationery\blue_gradient.jpg
c:\
c:\program files\common files\microsoft shared\stationery\blue_gradient.jpg
jpg
File
program files\common files\microsoft shared\stationery\cave_drawings.gif
program files\common files\microsoft shared\stationery\cave_drawings.gif
c:\
c:\program files\common files\microsoft shared\stationery\cave_drawings.gif
gif
File
program files\common files\microsoft shared\stationery\connectivity.gif
program files\common files\microsoft shared\stationery\connectivity.gif
c:\
c:\program files\common files\microsoft shared\stationery\connectivity.gif
gif
File
program files\common files\microsoft shared\stationery\desktop.ini
program files\common files\microsoft shared\stationery\desktop.ini
c:\
c:\program files\common files\microsoft shared\stationery\desktop.ini
ini
File
program files\common files\microsoft shared\stationery\desktop.ini.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\stationery\desktop.ini.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\stationery\desktop.ini.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\stationery\dotted_lines.emf
program files\common files\microsoft shared\stationery\dotted_lines.emf
c:\
c:\program files\common files\microsoft shared\stationery\dotted_lines.emf
emf
File
program files\common files\microsoft shared\stationery\garden.htm
program files\common files\microsoft shared\stationery\garden.htm
c:\
c:\program files\common files\microsoft shared\stationery\garden.htm
htm
File
program files\common files\microsoft shared\stationery\garden.jpg
program files\common files\microsoft shared\stationery\garden.jpg
c:\
c:\program files\common files\microsoft shared\stationery\garden.jpg
jpg
File
program files\common files\microsoft shared\stationery\genko_1.emf
program files\common files\microsoft shared\stationery\genko_1.emf
c:\
c:\program files\common files\microsoft shared\stationery\genko_1.emf
emf
File
program files\common files\microsoft shared\stationery\genko_2.emf
program files\common files\microsoft shared\stationery\genko_2.emf
c:\
c:\program files\common files\microsoft shared\stationery\genko_2.emf
emf
File
program files\common files\microsoft shared\stationery\graph.emf
program files\common files\microsoft shared\stationery\graph.emf
c:\
c:\program files\common files\microsoft shared\stationery\graph.emf
emf
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab
cab
File
program files\common files\microsoft shared\smart tag\lists\1033\time.xml.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\smart tag\lists\1033\time.xml.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\time.xml.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\stationery\green bubbles.htm
program files\common files\microsoft shared\stationery\green bubbles.htm
c:\
c:\program files\common files\microsoft shared\stationery\green bubbles.htm
htm
File
program files\common files\microsoft shared\stationery\greenbubbles.jpg
program files\common files\microsoft shared\stationery\greenbubbles.jpg
c:\
c:\program files\common files\microsoft shared\stationery\greenbubbles.jpg
jpg
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab
cab
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi
msi
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll
dll
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
exe
File
program files\common files\microsoft shared\stationery\grid_(cm).wmf
program files\common files\microsoft shared\stationery\grid_(cm).wmf
c:\
c:\program files\common files\microsoft shared\stationery\grid_(cm).wmf
wmf
File
program files\common files\microsoft shared\stationery\grid_(inch).wmf
program files\common files\microsoft shared\stationery\grid_(inch).wmf
c:\
c:\program files\common files\microsoft shared\stationery\grid_(inch).wmf
wmf
File
program files\common files\microsoft shared\stationery\hand prints.htm
program files\common files\microsoft shared\stationery\hand prints.htm
c:\
c:\program files\common files\microsoft shared\stationery\hand prints.htm
htm
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll
dll
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe
exe
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest
manifest
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll
dll
File
program files\common files\microsoft shared\stationery\handprints.jpg
program files\common files\microsoft shared\stationery\handprints.jpg
c:\
c:\program files\common files\microsoft shared\stationery\handprints.jpg
jpg
File
program files\common files\microsoft shared\stationery\memo.emf
program files\common files\microsoft shared\stationery\memo.emf
c:\
c:\program files\common files\microsoft shared\stationery\memo.emf
emf
File
program files\common files\microsoft shared\stationery\notebook.jpg
program files\common files\microsoft shared\stationery\notebook.jpg
c:\
c:\program files\common files\microsoft shared\stationery\notebook.jpg
jpg
File
program files\common files\microsoft shared\stationery\orange circles.htm
program files\common files\microsoft shared\stationery\orange circles.htm
c:\
c:\program files\common files\microsoft shared\stationery\orange circles.htm
htm
File
program files\common files\microsoft shared\stationery\orangecircles.jpg
program files\common files\microsoft shared\stationery\orangecircles.jpg
c:\
c:\program files\common files\microsoft shared\stationery\orangecircles.jpg
jpg
File
program files\common files\microsoft shared\stationery\peacock.htm
program files\common files\microsoft shared\stationery\peacock.htm
c:\
c:\program files\common files\microsoft shared\stationery\peacock.htm
htm
File
program files\common files\microsoft shared\stationery\peacock.jpg
program files\common files\microsoft shared\stationery\peacock.jpg
c:\
c:\program files\common files\microsoft shared\stationery\peacock.jpg
jpg
File
program files\common files\microsoft shared\stationery\pine_lumber.jpg
program files\common files\microsoft shared\stationery\pine_lumber.jpg
c:\
c:\program files\common files\microsoft shared\stationery\pine_lumber.jpg
jpg
File
program files\common files\microsoft shared\themes14\aftrnoon\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\aftrnoon\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\aftrnoon\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png
program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\arctic\preview.gif
program files\common files\microsoft shared\themes14\arctic\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\arctic\preview.gif
gif
File
program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\axis\thmbnail.png
program files\common files\microsoft shared\themes14\axis\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\axis\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi
msi
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\blends\preview.gif
program files\common files\microsoft shared\themes14\blends\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\blends\preview.gif
gif
File
program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab
cab
File
program files\common files\microsoft shared\themes14\blends\thmbnail.png
program files\common files\microsoft shared\themes14\blends\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\blends\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\blends\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\blends\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\blends\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\bluecalm\preview.gif
program files\common files\microsoft shared\themes14\bluecalm\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\bluecalm\preview.gif
gif
File
program files\common files\microsoft shared\themes14\bluecalm\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\bluecalm\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\bluecalm\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi
msi
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll
dll
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\arctic\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\arctic\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\arctic\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\arctic\thmbnail.png
program files\common files\microsoft shared\themes14\arctic\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\arctic\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\arctic\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\arctic\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\arctic\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\blueprnt\preview.gif
program files\common files\microsoft shared\themes14\blueprnt\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\preview.gif
gif
File
program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\boldstri\preview.gif
program files\common files\microsoft shared\themes14\boldstri\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\preview.gif
gif
File
program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\breeze\preview.gif
program files\common files\microsoft shared\themes14\breeze\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\breeze\preview.gif
gif
File
program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\breeze\thmbnail.png
program files\common files\microsoft shared\themes14\breeze\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\breeze\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\canyon\preview.gif
program files\common files\microsoft shared\themes14\canyon\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\canyon\preview.gif
gif
File
program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\canyon\thmbnail.png
program files\common files\microsoft shared\themes14\canyon\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\canyon\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst
mst
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\capsules\preview.gif
program files\common files\microsoft shared\themes14\capsules\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\capsules\preview.gif
gif
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi
msi
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab
cab
File
program files\common files\microsoft shared\themes14\capsules\thmbnail.png
program files\common files\microsoft shared\themes14\capsules\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\cascade\preview.gif
program files\common files\microsoft shared\themes14\cascade\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\cascade\preview.gif
gif
File
program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\cascade\thmbnail.png
program files\common files\microsoft shared\themes14\cascade\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\cascade\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\compass\preview.gif
program files\common files\microsoft shared\themes14\compass\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\compass\preview.gif
gif
File
program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\compass\thmbnail.png
program files\common files\microsoft shared\themes14\compass\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\compass\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi
msi
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\concrete\preview.gif
program files\common files\microsoft shared\themes14\concrete\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\concrete\preview.gif
gif
File
program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\concrete\thmbnail.png
program files\common files\microsoft shared\themes14\concrete\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\concrete\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\deepblue\preview.gif
program files\common files\microsoft shared\themes14\deepblue\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\preview.gif
gif
File
program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
msi
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\echo\preview.gif
program files\common files\microsoft shared\themes14\echo\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\echo\preview.gif
gif
File
program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe
exe
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll
dll
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\echo\thmbnail.png
program files\common files\microsoft shared\themes14\echo\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png
png
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
cab
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll
dll
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
xrm-ms
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\eclipse\preview.gif
program files\common files\microsoft shared\themes14\eclipse\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\preview.gif
gif
File
program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\edge\preview.gif
program files\common files\microsoft shared\themes14\edge\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\edge\preview.gif
gif
File
program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\edge\thmbnail.png
program files\common files\microsoft shared\themes14\edge\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\edge\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\evrgreen\preview.gif
program files\common files\microsoft shared\themes14\evrgreen\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\preview.gif
gif
File
program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\expeditn\preview.gif
program files\common files\microsoft shared\themes14\expeditn\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\preview.gif
gif
File
program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\ice\preview.gif
program files\common files\microsoft shared\themes14\ice\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\ice\preview.gif
gif
File
program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\ice\thmbnail.png
program files\common files\microsoft shared\themes14\ice\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\ice\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\indust\thmbnail.png
program files\common files\microsoft shared\themes14\indust\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\indust\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\iris\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\iris\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\iris\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\iris\thmbnail.png
program files\common files\microsoft shared\themes14\iris\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png
png
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi
msi
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab
cab
File
program files\common files\microsoft shared\themes14\journal\preview.gif
program files\common files\microsoft shared\themes14\journal\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\journal\preview.gif
gif
File
program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab
cab
File
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\journal\thmbnail.png
program files\common files\microsoft shared\themes14\journal\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\layers\thmbnail.png
program files\common files\microsoft shared\themes14\layers\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\layers\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\level\thmbnail.png
program files\common files\microsoft shared\themes14\level\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\level\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\network\thmbnail.png
program files\common files\microsoft shared\themes14\network\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\network\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\papyrus\preview.gif
program files\common files\microsoft shared\themes14\papyrus\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\preview.gif
gif
File
program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\pixel\preview.gif
program files\common files\microsoft shared\themes14\pixel\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\pixel\preview.gif
gif
File
program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\pixel\thmbnail.png
program files\common files\microsoft shared\themes14\pixel\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\profile\preview.gif
program files\common files\microsoft shared\themes14\profile\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\profile\preview.gif
gif
File
program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\profile\thmbnail.png
program files\common files\microsoft shared\themes14\profile\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\quad\preview.gif
program files\common files\microsoft shared\themes14\quad\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\quad\preview.gif
gif
File
program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\quad\thmbnail.png
program files\common files\microsoft shared\themes14\quad\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\quad\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\radial\preview.gif
program files\common files\microsoft shared\themes14\radial\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\radial\preview.gif
gif
File
program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\radial\thmbnail.png
program files\common files\microsoft shared\themes14\radial\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\radial\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\refined\preview.gif
program files\common files\microsoft shared\themes14\refined\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\refined\preview.gif
gif
File
program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\refined\thmbnail.png
program files\common files\microsoft shared\themes14\refined\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\refined\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\ricepapr\preview.gif
program files\common files\microsoft shared\themes14\ricepapr\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\preview.gif
gif
File
program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe
exe
File
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\ripple\thmbnail.png
program files\common files\microsoft shared\themes14\ripple\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\ripple\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\satin\thmbnail.png
program files\common files\microsoft shared\themes14\satin\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\satin\thmbnail.png
png
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi
msi
File
program files\common files\microsoft shared\themes14\sky\preview.gif
program files\common files\microsoft shared\themes14\sky\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\sky\preview.gif
gif
File
program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\sky\thmbnail.png
program files\common files\microsoft shared\themes14\sky\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\sky\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\slate\preview.gif
program files\common files\microsoft shared\themes14\slate\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\slate\preview.gif
gif
File
program files\common files\microsoft shared\themes14\slate\thmbnail.png
program files\common files\microsoft shared\themes14\slate\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\sonora\preview.gif
program files\common files\microsoft shared\themes14\sonora\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\sonora\preview.gif
gif
File
program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\sonora\thmbnail.png
program files\common files\microsoft shared\themes14\sonora\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\sonora\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\spring\preview.gif
program files\common files\microsoft shared\themes14\spring\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\spring\preview.gif
gif
File
program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\spring\thmbnail.png
program files\common files\microsoft shared\themes14\spring\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png
png
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe
exe
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\strtedge\preview.gif
program files\common files\microsoft shared\themes14\strtedge\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif
gif
File
program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\studio\preview.gif
program files\common files\microsoft shared\themes14\studio\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\studio\preview.gif
gif
File
program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\studio\thmbnail.png
program files\common files\microsoft shared\themes14\studio\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\studio\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\sumipntg\preview.gif
program files\common files\microsoft shared\themes14\sumipntg\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\preview.gif
gif
File
program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\water\preview.gif
program files\common files\microsoft shared\themes14\water\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\water\preview.gif
gif
File
program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\water\thmbnail.png
program files\common files\microsoft shared\themes14\water\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\water\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\watermar\preview.gif
program files\common files\microsoft shared\themes14\watermar\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\watermar\preview.gif
gif
File
program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll
dll
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab
cab
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll
dll
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm
program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm
chm
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
xrm-ms
File
program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config
program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config
c:\
c:\program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config
config
File
program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg
program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg
c:\
c:\program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg
msg
File
program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\services\verisign.bmp
program files\common files\services\verisign.bmp
c:\
c:\program files\common files\services\verisign.bmp
bmp
File
program files\common files\system\ado\adojavas.inc
program files\common files\system\ado\adojavas.inc
c:\
c:\program files\common files\system\ado\adojavas.inc
inc
File
program files\common files\system\ado\adovbs.inc
program files\common files\system\ado\adovbs.inc
c:\
c:\program files\common files\system\ado\adovbs.inc
inc
File
program files\desktop.ini.id-9c354b42.[paydra@cock.li].html
program files\desktop.ini.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\desktop.ini.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[paydra@cock.li].html
html
File
program files\dvd maker\shared\dvdstyles\16to9squareframe_buttongraphic.png
program files\dvd maker\shared\dvdstyles\16to9squareframe_buttongraphic.png
c:\
c:\program files\dvd maker\shared\dvdstyles\16to9squareframe_buttongraphic.png
png
File
program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[paydra@cock.li].html
html
File
program files\dvd maker\shared\dvdstyles\16to9squareframe_videoinset.png
program files\dvd maker\shared\dvdstyles\16to9squareframe_videoinset.png
c:\
c:\program files\dvd maker\shared\dvdstyles\16to9squareframe_videoinset.png
png
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi
msi
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab
cab
File
program files\dvd maker\shared\dvdstyles\4to3squareframe_selectionsubpicture.png
program files\dvd maker\shared\dvdstyles\4to3squareframe_selectionsubpicture.png
c:\
c:\program files\dvd maker\shared\dvdstyles\4to3squareframe_selectionsubpicture.png
png
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe
exe
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
html
File
program files\dvd maker\shared\dvdstyles\heart_buttongraphic.png
program files\dvd maker\shared\dvdstyles\heart_buttongraphic.png
c:\
c:\program files\dvd maker\shared\dvdstyles\heart_buttongraphic.png
png
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi
msi
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe
exe
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll
dll
File
program files\dvd maker\shared\dvdstyles\heart_glass_thumbnail.bmp
program files\dvd maker\shared\dvdstyles\heart_glass_thumbnail.bmp
c:\
c:\program files\dvd maker\shared\dvdstyles\heart_glass_thumbnail.bmp
bmp
File
program files\dvd maker\shared\dvdstyles\heart_selectionsubpicture.png
program files\dvd maker\shared\dvdstyles\heart_selectionsubpicture.png
c:\
c:\program files\dvd maker\shared\dvdstyles\heart_selectionsubpicture.png
png
File
program files\dvd maker\shared\dvdstyles\heart_videoinset.png
program files\dvd maker\shared\dvdstyles\heart_videoinset.png
c:\
c:\program files\dvd maker\shared\dvdstyles\heart_videoinset.png
png
File
program files\dvd maker\shared\dvdstyles\huecycle\1047x576black.png
program files\dvd maker\shared\dvdstyles\huecycle\1047x576black.png
c:\
c:\program files\dvd maker\shared\dvdstyles\huecycle\1047x576black.png
png
File
program files\dvd maker\shared\dvdstyles\huecycle\15x15dot.png
program files\dvd maker\shared\dvdstyles\huecycle\15x15dot.png
c:\
c:\program files\dvd maker\shared\dvdstyles\huecycle\15x15dot.png
png
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab
cab
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll
dll
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
xrm-ms
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe
exe
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab
cab
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab.id-9c354b42.[paydra@cock.li].html
html
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi
msi
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi.id-9c354b42.[paydra@cock.li].html
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi.id-9c354b42.[paydra@cock.li].html
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi.id-9c354b42.[paydra@cock.li].html
html
File
pagefile.sys
pagefile.sys
c:\
c:\pagefile.sys
sys
File
program files\common files\designer\msaddndr.dll
program files\common files\designer\msaddndr.dll
c:\
c:\program files\common files\designer\msaddndr.dll
dll
File
program files\common files\microsoft shared\dw\dbghelp.dll
program files\common files\microsoft shared\dw\dbghelp.dll
c:\
c:\program files\common files\microsoft shared\dw\dbghelp.dll
dll
File
program files\common files\microsoft shared\dw\dw20.exe
program files\common files\microsoft shared\dw\dw20.exe
c:\
c:\program files\common files\microsoft shared\dw\dw20.exe
exe
File
program files\common files\designer\msaddndr.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\designer\msaddndr.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\designer\msaddndr.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\dw\dwtrig20.exe
program files\common files\microsoft shared\dw\dwtrig20.exe
c:\
c:\program files\common files\microsoft shared\dw\dwtrig20.exe
exe
File
program files\common files\microsoft shared\equation\1033\eeintl.dll
program files\common files\microsoft shared\equation\1033\eeintl.dll
c:\
c:\program files\common files\microsoft shared\equation\1033\eeintl.dll
dll
File
program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\equation\eqnedt32.cnt
program files\common files\microsoft shared\equation\eqnedt32.cnt
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.cnt
cnt
File
program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\equation\eqnedt32.exe
program files\common files\microsoft shared\equation\eqnedt32.exe
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe
exe
File
program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe.manifest
manifest
File
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\equation\eqnedt32.hlp
program files\common files\microsoft shared\equation\eqnedt32.hlp
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.hlp
hlp
File
program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl
program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl
program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl
program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl
program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl
program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\equation\mtextra.ttf
program files\common files\microsoft shared\equation\mtextra.ttf
c:\
c:\program files\common files\microsoft shared\equation\mtextra.ttf
ttf
File
program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\euro\msoeuro.dll
program files\common files\microsoft shared\euro\msoeuro.dll
c:\
c:\program files\common files\microsoft shared\euro\msoeuro.dll
dll
File
program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\filters\msgfilt.dll
program files\common files\microsoft shared\filters\msgfilt.dll
c:\
c:\program files\common files\microsoft shared\filters\msgfilt.dll
dll
File
program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\filters\odffilt.dll
program files\common files\microsoft shared\filters\odffilt.dll
c:\
c:\program files\common files\microsoft shared\filters\odffilt.dll
dll
File
program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00037_.gif
program files\microsoft office\clipart\pub60cor\ag00037_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00037_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00038_.gif
program files\microsoft office\clipart\pub60cor\ag00038_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00038_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00040_.gif
program files\microsoft office\clipart\pub60cor\ag00040_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00040_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00052_.gif
program files\microsoft office\clipart\pub60cor\ag00052_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00057_.gif
program files\microsoft office\clipart\pub60cor\ag00057_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00057_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00057_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00057_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00057_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00021_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00021_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00021_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00090_.gif
program files\microsoft office\clipart\pub60cor\ag00090_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00090_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00090_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00090_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00090_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00092_.gif
program files\microsoft office\clipart\pub60cor\ag00092_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00092_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00092_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00092_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00092_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl
program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[paydra@cock.li].html
program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\filters\offfiltx.dll
program files\common files\microsoft shared\filters\offfiltx.dll
c:\
c:\program files\common files\microsoft shared\filters\offfiltx.dll
dll
File
program files\common files\microsoft shared\filters\visfilt.dll
program files\common files\microsoft shared\filters\visfilt.dll
c:\
c:\program files\common files\microsoft shared\filters\visfilt.dll
dll
File
program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00126_.gif
program files\microsoft office\clipart\pub60cor\ag00126_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00126_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00126_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00126_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00126_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00129_.gif
program files\microsoft office\clipart\pub60cor\ag00129_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00129_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00129_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00129_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00129_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00130_.gif
program files\microsoft office\clipart\pub60cor\ag00130_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00130_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00130_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00130_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00130_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00135_.gif
program files\microsoft office\clipart\pub60cor\ag00135_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00135_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00135_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00135_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00135_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00139_.gif
program files\microsoft office\clipart\pub60cor\ag00139_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00139_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00139_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00139_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00139_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\grphflt\cgmimp32.cfg
program files\common files\microsoft shared\grphflt\cgmimp32.cfg
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.cfg
cfg
File
program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\grphflt\cgmimp32.flt
program files\common files\microsoft shared\grphflt\cgmimp32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.flt
flt
File
program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\grphflt\cgmimp32.fnt
program files\common files\microsoft shared\grphflt\cgmimp32.fnt
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.fnt
fnt
File
program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[paydra@cock.li].html
html
File
program files\common files\microsoft shared\grphflt\epsimp32.flt
program files\common files\microsoft shared\grphflt\epsimp32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\epsimp32.flt
flt
File
program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[paydra@cock.li].html
program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00142_.gif
program files\microsoft office\clipart\pub60cor\ag00142_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00142_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00142_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00142_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00142_.gif.id-9c354b42.[paydra@cock.li].html
html
File
program files\microsoft office\clipart\pub60cor\ag00154_.gif
program files\microsoft office\clipart\pub60cor\ag00154_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00154_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00154_.gif.id-9c354b42.[paydra@cock.li].html
program files\microsoft office\clipart\pub60cor\ag00154_.gif.id-9c354b42.[paydra@cock.li].html
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00154_.gif.id-9c354b42.[paydra@cock.li].html
html
Mutex
Global\syncronize_ODYV39A
Mutex
Global\syncronize_ODYV39U
Mutex
Global\syncronize_ODYV39A
Mutex
Global\syncronize_ODYV39U
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE
ohbdap.exe
C:\Windows\System32\ohbdap.exe
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Common Startup
File
STD_OUTPUT_HANDLE
File
STD_INPUT_HANDLE
WinRegistryKey
Software\Policies\Microsoft\Windows\System
HKEY_CURRENT_USER
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_CURRENT_USER
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
Analyzed Sample #76042
Malware Artifacts
76042
Sample-ID: #76042
Job-ID: #184530
This sample was analyzed by VMRay Analyzer 3.0.2 on a Windows 7 system
100
VTI Score based on VTI Database Version 3.3
Metadata of Sample File #76042
Submission-ID: #121332
4e1729be38023e15056914fab40c9ff3e04990c998c5c9711b4376acb919fdaeexe
MD5
9d8ec52d23428089ecb33e5c70c26cf8
SHA1
782ad57dd19d9cf1fec67480bcca1b8445c203fe
SHA256
4e1729be38023e15056914fab40c9ff3e04990c998c5c9711b4376acb919fdae
Opened_By
Metadata of Analysis for Job-ID #184530
True
Timeout
True
266.838
XDUWTFONO
win7_64_sp1
x86 64-bit
Windows 7
6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa)
5p5NrGJn0jS HALPmcxz
XDUWTFONO
This is a property collection for additional information of VMRay analysis
VMRay Analyzer
Anti Analysis
VTI rule match with VTI rule score 2/5
vmray_dynamic_api_usage_by_api
Resolves an unusually high number of APIs.
Resolves APIs dynamically to possibly evade static detection
Process
VTI rule match with VTI rule score 1/5
vmray_install_ipc_endpoint
Creates mutex with name "Global\syncronize_ODYV39A".
Creates system object
Process
VTI rule match with VTI rule score 1/5
vmray_install_ipc_endpoint
Creates mutex with name "Global\syncronize_ODYV39U".
Creates system object
Process
VTI rule match with VTI rule score 0/5
vmray_enumerate_processes
Enumerates running processes.
Enumerates running processes
File System
VTI rule match with VTI rule score 1/5
vmray_create_file_in_os_dir
Creates file "C:\Windows\System32\ohbdap.exe" in the OS directory.
Modifies operating system directory
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "C:\Windows\System32\ohbdap.exe" to Windows startup via registry.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\ohbdap.exe" to Windows startup folder.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\programdata\microsoft\windows\start menu\programs\startup\ohbdap.exe" to Windows startup folder.
Installs system startup script or application
Process
VTI rule match with VTI rule score 1/5
vmray_create_process_with_hidden_window
The process "C:\Windows\system32\cmd.exe" starts with hidden window.
Creates process with hidden window
Process
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\Windows\system32\mode.com".
Reads from memory of another process
Process
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\Windows\system32\vssadmin.exe".
Reads from memory of another process
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 4/5
vmray_modify_user_files
Modifies the content of multiple user files. This is an indicator for an encryption attempt.
Modifies content of user files
File System
VTI rule match with VTI rule score 4/5
vmray_delete_user_files
Deletes multiple user files. This is an indicator for ransomware or wiper malware.
Deletes user files
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.eps".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.eps.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.jpg.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\ado210.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\readme.htm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\1033\mcabout.htm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\dates.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\phone.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\metconv.txt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\basmla.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files\common files\microsoft shared\stationery" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\desktop.ini.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\time.xml.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\graph.emf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\grid_(inch).wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\hand prints.htm".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\aftrnoon\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\bluecalm\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\preview.gif".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\network\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\desktop.ini.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\heart_buttongraphic.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\designer\msaddndr.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\designer\msaddndr.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00057_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00090_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00092_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00126_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00129_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00130_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00135_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00142_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00154_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00157_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00158_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00160_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00120_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00163_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00164_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00165_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00167_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00103_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00170_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00171_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00172_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00139_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00174_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00175_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00176_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00015_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00790_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00853_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00914_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00932_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00161_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00169_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01039_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01044_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01060_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01084_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01173_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01184_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01216_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01218_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01251_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01545_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02122_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02559_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00965_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01174_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02724_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an03500_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04108_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04117_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04134_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04174_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04195_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04196_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04206_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04225_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04235_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04267_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04269_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04326_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04332_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04355_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04369_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04384_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04323_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04191_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00141_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00146_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00155_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00160_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00116_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd05119_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd06102_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd06200_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07804_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07831_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08758_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08773_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08808_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04385_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09031_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09194_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09662_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00173_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd10890_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09664_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19563_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19582_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19695_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd10972_.gif.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19828_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19986_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19988_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08868_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19827_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.wpg.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\pictim32.flt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\png32.flt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\jpegim32.flt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd20013_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00008_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00012_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00045_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00098_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00122_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00130_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00148_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00152_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00105_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.cgm.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\help\hxds.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\wpgimp32.flt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\help\msitss55.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00194_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\help\itircl55.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\gifimp32.flt.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\ar-sa\tipresx.dll.mui".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00195_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00234_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00247_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00242_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00248_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00254_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00261_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\msinfo\msinfo32.exe".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\aceintl.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\aceodbci.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\acerecr.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\acewstr.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\alrtintl.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\msointl.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\msointl.dll.idx_dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\msointl.rest.idx_dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00252_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00267_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00269_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00265_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00273_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00274_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00296_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00390_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00392_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00525_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00526_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00648_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00524_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00921_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00923_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00932_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00985_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\boat.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\boatinst.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00076_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\oarpmanr.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\mssoapr3.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acedao.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acecore.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acees.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\xlsrvintl.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceerr.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00270_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00078_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00092_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00262_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00100_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00135_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00136_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00174_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00184_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00186_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00224_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00200_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00145_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00440_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00441_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00442_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00439_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00443_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00444_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00453_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceexch.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00445_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01080_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceexch.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceodbc.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceoddbs.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceodexl.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceodtxt.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acer3x.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acerep.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceoledb.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acetxt.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceexcl.dll.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01634_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01637_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01638_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01639_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cg1606.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01603_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\classic2.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\clip.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\crane.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01636_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cup.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cupinst.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\classic1.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00117_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00234_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01635_.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\craninst.wmf.id-9c354b42.[paydra@cock.li].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00117_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cup.wmf".
Modifies application directory
Anti Analysis
VTI rule match with VTI rule score 2/5
vmray_detect_generic_vm_by_rdtsc
Possibly trying to detect VM via rdtsc.
Tries to detect virtual machine
OS
VTI rule match with VTI rule score 4/5
vmray_modify_windows_backup_settings
Deletes Windows volume shadow copies.
Modifies Windows automatic backups
File System
VTI rule match with VTI rule score 1/5
vmray_create_many_files
Creates an unusually large number of files.
Creates an unusually large number of files
Local AV
VTI rule match with VTI rule score 5/5
vmray_av_malicious_match
Local AV detected the sample itself as "Trojan.Ransom.Crysis.E".
Malicious content was detected by heuristic scan
Local AV
VTI rule match with VTI rule score 5/5
vmray_av_malicious_match
Local AV detected a memory dump of process "ohbdap.exe" as "Gen:Variant.Ransom.Crysis.8".
Malicious content was detected by heuristic scan
Reputation
VTI rule match with VTI rule score 5/5
vmray_known_malicious_file
File "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ohbdap.exe" is a known malicious file.
Known malicious file
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Boot\BOOTSTAT.DAT.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\BOOTSECT.BAK.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[paydra@cock.li].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[paydra@cock.li].html".
YARA match