Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\satan.exe
|
MD5:
1ee5c6140b8d0d212d306653ba781469
SHA1:
aeda5d7cd228c14c750daa9994fb0b33ac268b2e
SHA256:
8054325668510fed20f63a2956f202e7a45649a968f146135edbbc631fec0d2d
SSDeep:
6144:A2jW9xzT7XqPdXL49YpggogXjvrZzouncvh9GMlFxSNY:A2K9BXwXL+YOvh9GMlFENY
ImpHash:
a3581bfe28e762682dbc13d06bf2fda0
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\satan2.exe
|
MD5:
0c2cafe71b945122d782aa6b64c713fe
SHA1:
ac1bc32a997f12928693c77df98436e1058cf7ec
SHA256:
1e2325130cad9527d5472e59dadcf9b391449ab4456ffa7353a885023444b718
SSDeep:
6144:W2jW9qo4/7XqPZXL49YdggogXjvrZzounhvh9GMlJxSps:W2K9qVj8XL+Yfvh9GMlJEps
ImpHash:
a3581bfe28e762682dbc13d06bf2fda0
|
Access, Create, Delete, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\kB2jyVh0H39JpYUu.exe
|
MD5:
865461b3fe4b1cc165846627bdcc479e
SHA1:
22d379134e23401f2e2dce818206de7ff125e1dd
SHA256:
4e96bc3985a6bbc0edcc12d1419597b0d3989c6ff3f38884d7a28ff482a1fcda
SSDeep:
6144:LE0qn0a/cg2ZEbqIOO9Da2p1DyJuIJJ3oJK5YnokRzeUqLY3ptLCB5RtHRNHx:LHqnZtGOpa2ppXIbwZRzQMFE5RtHRNH
ImpHash:
f34d5f2d4577ed6d9ceec516c1f5a744
|
Access, Delete, Read
|
Sample File
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\HOW TO DECRYPT FILES.txt
|
MD5:
9a804e9927367fca59ba748c62d5d560
SHA1:
aa5240418ff3ac1edbd3ea8342b3e318ffabf4fa
SHA256:
5d7908f88fad373d1a677bb6b23111d8001860abdeb0c6ab1362dc0b9b936b46
SSDeep:
24:cep3GcW7YOIWsMlWCiFUM5+bYvXgGUGFj42x+tv7AhkXLbVVu7:zUn7YOIWseRiSpYvXVxR4y8kkXnVVG
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE
|
MD5:
cb7fd681ba58414363e7bafe659c46d0
SHA1:
e9ccea4c09d3eb4c0756a948da5521fc1bf4fd4c
SHA256:
e1e3010d17764d4b5961dcfc01a719477ad2246e851fd661cd37cb14494fd29d
SSDeep:
12288:XbehSCMrP3FqBctzmo8myIdVCgJECjD3amGvf4JD5KnJ2B9f8BzlyNdXDlxsG7kI:XKh/i0sC6kgDEHGMJ69fMlWZIGQI
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe
|
MD5:
c52b5dcca0dd64189c1988ff2e7243ea
SHA1:
567a9f5353b7b61366d23c9bd6fc9bd8a1b9cb7b
SHA256:
600d279163d47e08273cb3cbdb51a37acc0ada2a1c707213e5a813a3b6161d45
SSDeep:
12288:ZilhPYQbUUY+tA2ZbdD3e34t00IZpCiRB+UjzpsxKVL8iL:ZCZYwAqdD3U4tHIZoiRBHsxYL
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe
|
MD5:
e9539c3629aad9429aaa692049acaa6b
SHA1:
0a0d7f89eb7e3f458697263f26d906ba47b3cf47
SHA256:
a74e6cc2074d6de34418e43eb6da5828b7d34e75847a76306f2feeb16b3aac4a
SSDeep:
3072:zyPWhgs05f/nmrqGp6KR0st7GqUfkr73q23IS7QgVpVpxFjsd0jUZJ7g27Vu0c:zyWhn0teqYyddsn0gVrF1UZVg1d
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe
|
MD5:
dddebe9c484d330e6a7c60104c8eeb22
SHA1:
af83c0c04a875c2b95c4cffb1c0f4e5969170e8f
SHA256:
01ecb1646bf53801f52e215e10dd67f1ebc080a3dc2465536b37b26009b5906f
SSDeep:
24576:SZjJuqlbgF8AIvJLbq8oXZGDAlmHIZHlxTGp7uD2lH9aV:YQqlA+NoXZBIoZOpaDA9m
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE
|
MD5:
593c4fa221f90126470eff390633f2a9
SHA1:
00ae134fa73a66657d2f65786e90df8d7792b9dd
SHA256:
88ea75afefddcf2a4a8b2f2de8412c75fc36d40bfb4a6be9736042dede81c1b3
SSDeep:
24576:ewVHHrTdSSP6HbCLHRoX9/9XK5HIZHlxTGZMI:eWHHrTdgCLxoX9/9XK5oZOZMI
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
|
MD5:
82309da5541f33f41580ab3f82818f39
SHA1:
7745619e10cac3ba1098c8ab64f62517838799e9
SHA256:
2e82af769f8a47b0b10145796be1e006c54de25b560b4b8ba4ed513ce8db7478
SSDeep:
12288:U8FJWqGwRM0TEujx+OXeqO/TQ400IZpXBzlxqsGbqA:U8FJWqZ9fjrX2HIZHlxTGD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
MD5:
69747d106a7f4d8164407f06e57c3b72
SHA1:
4b12ee0240151b5ee9d345cdaeeaf958305ffe98
SHA256:
4f498b6bfc5559082bf29fee694e608a06a450c4b6e727cf1467cae09c37b7fe
SSDeep:
12288:INnAZEJnzDcxUbDrmBqG6UtIVCK6ROG0cv4WyVCzOfE:INAZ4nveUJgxK6ROG0EyfE
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF
|
MD5:
b5f90d0366fc29618b5eaa52c3e2b0fb
SHA1:
cfab0ab89df809ce9087ed0e72ceaaaa6d7494af
SHA256:
42a67ba947d01e38ef84838df9f886682fb0d6bcc7bb9da6cee0c48a2b71d8f3
SSDeep:
24:3m7J9XzpYvPX1v+YQq385Uf3R2zvMYuGVVEQ+:3kPzpYvPXl+Yb37vwzKGop
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG
|
MD5:
47598e5391cd09fc7bcd1a956e1b8195
SHA1:
b9c102351a78a9a7aee4d9c6fb745b1c89a4d6e1
SHA256:
0c84838a8078083d245f88f01165f1b699447c5fc900a1ad643b9c0b55873549
SSDeep:
24:8gRfZ11ELUklh8vlKxhDmVmVwGSlGKwNNNqHdddxJF:FfeAklh8ceGzbKSNNYdddxJF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG
|
MD5:
5f130a57022ae04d6eab9c922c8961ec
SHA1:
10a069721b79a23c959a4f27f6095ef0a0a1caeb
SHA256:
27c240ed229c892bf86582b95bb4e6eed60f42ffce725f681de6dbd893ff863a
SSDeep:
24:1kYpXLpJdKmyHXp+FcgcctmCBNWadLRGCmHoN4PwK3nuWt+:1L9VJdKmaZltcJ/G9INvK3n1+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.Hacker zasifroval zaplat.crypt
|
MD5:
72061620c0df3eb9fa41156e10a1ce41
SHA1:
34450f537eb16f737f08381e5ed756b96923c69f
SHA256:
e22ec206be74bbcfc9e940545a52384af29a2976cb8edabfd840b306a9d84032
SSDeep:
48:BKuiJ78LRcG2lNHutG7V6JY3af4wD154AIb:BKuWATdG8J+af4kKAIb
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE
|
MD5:
c160c985d0535a01d2fc422c061c9744
SHA1:
582e705443712bb229ef12a467a70117e37002b3
SHA256:
6d3136e7694f841f4ca774b676a2fc9977e77dc56892ab2b06437a04c101abbd
SSDeep:
3072:k/sBzcK8qRg6xULWEuJgAQzaaGxqHQKXHnhvV95z:kovFRJNXaGxiQKXHhF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE
|
MD5:
e6e54e6949022f0881397a5888e5792b
SHA1:
62b2e627199aac3fd2a499a5ec0e619babace320
SHA256:
f6b1e1f7eba95fedd9d6449ee5bb9f76a36b5eb62b57a6cb004b520c8296fc49
SSDeep:
3072:9jMGwjjuDW+vppK6PCqHIjMaM7LzRlFmiOnvZS62EG6dd:lMZjju3BpK6qqfRLzpiRb2EB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE
|
MD5:
45f52924b0d208504169ffdd2d0a86e5
SHA1:
12dab291cb398c9f4151aff1852f6bdd80fe822a
SHA256:
32f5e429f1712e3456f991b61d672c854c806a3e53341bd9c5988cd97bc7f5d1
SSDeep:
6144:4kjjgKVpEiNCG6sjK9QIEfajYwX28WsVT:MKVZNCyjK9QXfajj28WsB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
|
MD5:
a5f536c8fd5da0eeb8626245ee4f3fca
SHA1:
ca93c8f91446e6bc914cb710690d092334c05d28
SHA256:
e0c09c2539fa5bf033643d82e1c685702294245f7307d06f4bd7cf82cbeb5d96
SSDeep:
3072:2hvbyH1+HxO1YyMI+4kZtwPC8Oj09p0Hk0IFuGALj/:W+sxYRGtaVB9pAn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe
|
MD5:
d9372e10393ef3d4177ed9240a5f61fe
SHA1:
bb8e29e979b0bc082dae2b2efd25ea80fae8b047
SHA256:
6142ef0d38037287d0a6b2b8aa4ce85772b506f7daac3e94b1c4845df20eb113
SSDeep:
6144:AmnScwPo0G90hpCw5Gm4aeap33p3HZqW2S3k1u8bkF:xnSLPb7CgGm4PTcR
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe
|
MD5:
52d5a990dbb6f9036e081dc0a27a9f92
SHA1:
57cfc4bcdb6560b19f7966a6981b690915b69293
SHA256:
ace20090af19a9f8782207b80ca67d606a571281f107206df72df5483a9e89e8
SSDeep:
6144:VpcohWstFrEMwEhjaqbu8xlNCjag7DrpafRE7Llce/+/kSR//xn6yyw9D9kbZiWb:cDX7EhTJNq7DrpOml2D/xnH9mZiWb
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe
|
MD5:
6bbc157087eaf500acb638d10f41df31
SHA1:
c07a3de3bad26d7b16213a805afb7d24b657c001
SHA256:
f3b16f70fd3cdb15323ea9b4b4a0c01f0de668ca930344b40972e6c283bd7893
SSDeep:
24576:e57droA2GXc4VpVGXQlA8mXjvFVeHIZHlxTGgmjptALtr:PAXcupVGamXjtQoZOor
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE
|
MD5:
3729d3acb784ac2b85ece6e460dce2cc
SHA1:
41fd03e97f48089cd09c6e4165bd15271228ef65
SHA256:
62257a2a77c891ef2885cca5f6a7715c3c34565f2248bbe5b8565dad17a8a04f
SSDeep:
384:Ma3sjJhx4S3xZGq33sAKQozbj8U4H8+V8EjmU4:33s1vZGq33sYQjUH8+V2x
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
|
MD5:
8486ff532f187e16f37e8f1346f77fc8
SHA1:
384bb9d4abb45b9f4e2a95d1cd2ea70cbcdd8359
SHA256:
748edcc39f15d3ac9062c83085f717ff43c32f2f3da323799330520ad0d3a1ec
SSDeep:
49152:Wlmok33MTo6Fr9/dwH2dqXlCBki5DbxP/kBkzCym7VRueZQ56fjdTfd2svYT7MiJ:ImoiMT2FX4B1dPcxyOked2swTgioGDr
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM
|
MD5:
f73574a9e43374491d77a6bcc4058831
SHA1:
ae85a7992b04722e81daa61f4cbf50c99d90c8c1
SHA256:
4aeb83491699a564cfb487f62fea55825c24003045f5875ca523c0e885d64a3b
SSDeep:
192:m1Lm5v7aXMSUfbSoYMbt6U2gpltc0fBxNgPPeS7HV6khxIFgPwtme+N3GpI0Lr5g:yLm5vWQ2oYMbcUbx5xSPPeS7HVnhCaPT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT
|
MD5:
ac06b212490819077fd289c579e3caa6
SHA1:
a04907bacad401150b8eedac737c6a9b18321f4f
SHA256:
8e0fbb769f2492b57323ad746f3781642fa3d268805038db73c350a3556f967c
SSDeep:
24576:gVSZLIVNZC+SPS3R3MkplU/sccMVj4p1PpGrq8OMBeS/Fhh/KiB/JshunlxP0fB2:gVSZLIVNZC+SPS3R3MkplU/sbMVj4p1i
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe
|
MD5:
1878b7c00e91ab052dddb1f919ddb054
SHA1:
c3b2abb7ce658dd9e2691f2cd08930bb8cf8827e
SHA256:
8f05c14fa5c8afea384653df58c328af4f1b696c2cd0160742d4593792a10949
SSDeep:
384:C5hjIdx+xIV/6s1xxClMDAKQozbj8UpV1mAc:61xK/6s1+eDYQjVVYAc
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF
|
MD5:
0efe9ec0c3d148b7bf9ebad3b2aa5457
SHA1:
08223cdfaf2e62fb73ec64fdf19ae1aba236e64f
SHA256:
d611c09f6c72c8b4873cbc3395324ccabb476226291c289c02611dd99f2e3060
SSDeep:
24:uxw6qi2N+wY8NI4QgERMgBwhpSNzNv0nkJ7r3ydKz7FLjgAczyfZW6MHPX:ufex1ERMcwno5vpJS0zJL8tzyhW6Mv
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG
|
MD5:
68a1ab3caa0efbe570513ccfff82fcdd
SHA1:
94c56ab1283a322da6af5f127b9ff221253a4ed3
SHA256:
28175d1d55b5a8ed13f6defb516b89f0ee4c9f3edb784dedfbac1a34d37c1ec6
SSDeep:
384:mmhqRFsmBV4qYVS0IA5FwXfxpKXL+ohzZ7A7Rxt1gjr+dI25KYJJwHWjUgMJjiwh:XhqRFhSbJ5FwPvPqMDDgr+dMY3HU/pn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF
|
MD5:
2b838d2a50da634ef71bde778fc5e77d
SHA1:
f9b8294c515999f246ff0b1299a0576ce596c13c
SHA256:
485d0a399987fa7426f56eff64af492576121b30db0506404a49b643e49ad1f1
SSDeep:
48:1bQfjpyi1nUpb6Ii+q5tfxxMo+SSDwxs4SoipZHQOZQ7UyzXxKuIpzI0:GpjnsbCV5vGo+3EuZwO+YAwzhd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG
|
MD5:
7a2d4e1ff0134edb756a870e531edcbc
SHA1:
c400d4d99f66a621af0b681c4a8cb23c51af8598
SHA256:
3f3f34748edc7cc4abc0581484e52a98783e78d55594d021f462adca449fb367
SSDeep:
384:4pPv60QqG4gMUBfhDxfd4+dVaD8XkxUTKL3aCQUrX+HrUWgpK/NWj0Sjoc880:4PyJZPflWD8USTw3aEQgDYce
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF
|
MD5:
4fd0ae4aef38a5a7bc65c1e3505d5271
SHA1:
c879885ae575531207b9711fdebf75f3033e7303
SHA256:
5fa8c0bd670246ec859102b1896c10ac4f4184739fd471945257cfa4e3ad1c65
SSDeep:
48:280oCsJs/rLoOn5ulX+WXQPnkLHYVIpTU2G/wFXHYvu:33sfoOn8X+kKk7WaTUgRV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG
|
MD5:
a6284e77be10e7b06960ea960645c4fc
SHA1:
aa73f7be118b57eba37b17c25c77f4666fce22ea
SHA256:
8187520c96b42493d1cfc080aac66f332e9fc85e33fd9a8be37b6e23a8a06b04
SSDeep:
768:zc6ZeM/3/n5wV0R7uXIm13dyrmbWkRixpDQsgK6OAhATq:zc6Zeo6V0RC4W3dvbWkcHQsgaAgq
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF
|
MD5:
5fd57743a703db0a558c0929a97cf692
SHA1:
6576d5a98b006b8fd4785968ca8e3797c2cd8130
SHA256:
1e4a19ff2072ea63646c8e7f19687cd70abffe373c6bac8dde6e6af81ff83ba6
SSDeep:
48:280oCsJs/baHa5LdPZPefhfLMdYo89W+wBVh2sp:33sac5PZPefhfLqv+wp2u
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG
|
MD5:
54c30824b66ae36d278b4acf5145704d
SHA1:
19445af1d1fceb1b9585eec14f07801b7953d35a
SHA256:
dad37f878e6c43b203d6f6c288d27fa0dfee04b1635240b3d71680d16ee7b7e8
SSDeep:
384:F0UiovNGqHkYsIbRGLHrmyAHXDoMlPgIEnkhLZLyLRghwV4+x04Zl6po9MGntrNv:FtvNGfuFaSxHToMlrEkhcuKNC4vgoF48
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF
|
MD5:
a5aa1b573c30e21a0a065601c920bb86
SHA1:
f9f1d7c826b52ddec990e91c8a4fdbbb323f921a
SHA256:
8b46a7b292f5bcecd3f5771b05e434b26f8dca32b47c4e5bbed03ced8b0c0eaf
SSDeep:
24:Hm5qBXMVmXXfTzAXAF95dUSh4vbQ4ECmM0qxenI5xtnwKLpTkbFYSIGjLajX5C3n:GenLs29D6DQbfM0aiKLpoijqw6n
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG
|
MD5:
50dbd2b7480640ec493a67acac99248b
SHA1:
8eaa3c684f2df0e774bc188bc14e56fb69d2a8f4
SHA256:
9f4af33440f1009e5cfe8fffc8c6db6e6f2ab88ffd72b06df9a2db34e3bfd7dd
SSDeep:
768:5cZyZ0kdWZhixu5Znafh43MoBCMStpa0x9LJI9d0QPMH:5cJkdWQ2nafhoEpXCoQPMH
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF
|
MD5:
11e9b1b96585a08a1b08b6b0f0b45f5d
SHA1:
fc270e1ab310f73112c6c99293cae940f21f30a4
SHA256:
b349effe30d5c63ad4b1333ecdbaff52e1b14142008ee35a09e4e8f43f43210a
SSDeep:
48:280oCsJs/5TCsnL6nOiuxwi3RdLDjXZn4Fx5:33sZwwxwi3RdLDjXZn4n5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG
|
MD5:
f10e95eabc2f9960c1b9842f9d86b6e5
SHA1:
8c6b4f69e068fbafd8dc1f7c364ba8384751a3b5
SHA256:
e91ead934f61dd5b593b32f4f238e8f93aab079ca0b51fad62ef962a4147ef7c
SSDeep:
384:QmUDgGcRs8lWmJMRf/JOb/mfqvw1oB8huGn2E/mls2EiiOT7sUiqQCMY6vtqfVTi:YjmOZJOb/mqvw1oB8DnQ6OT+qUVGVn9g
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF
|
MD5:
e88785c346ba6735efb15332e898fc0a
SHA1:
39aac3b028e54362fef86d830ed89ab86a071be3
SHA256:
460688ff31ea9d73787b00ce36c68f1962f4f197f9c864540a8714a569c83e1a
SSDeep:
48:280oCsJs/RUc+dzDxxr9X2l/uN8cDaTdHFXm2XXfq000+0ZlTMc7:33s5U/xBXk/upAT22Hfr3lQ8
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG
|
MD5:
7289546cb7202b68fd15de01af09bfeb
SHA1:
3b5fd3894f1b562454f8e9e3a0c012ae19095067
SHA256:
5bc5011357a1db35c229f5db575a8a918636a6b6bd468423eb441f8d1f997391
SSDeep:
768:VCwJ/WsK/YiIvB9b9seCvaGTiniWOfLEGq/TrNQ1PMr:9/WsKaB9ueq3TiJOfAjvi5i
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF
|
MD5:
fd481177b1b2747cb820d2378e97a08c
SHA1:
1edda4e4ddc72f40b2478e5b9a062c4c8f831036
SHA256:
c13facc7e62f30e14e9231f1be3c0d19a2013d6ee9dff17e55a55586daf4afd8
SSDeep:
48:QcdjRKjJ9taH3IhuIa7dusG6U/owBuFKsxeZHplC0MTN2v:ZKjHcXIOduV6UQuuXsHpqJW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG
|
MD5:
e14df80627dc59e032ca3e6431b5b85b
SHA1:
7178eaf5289c3c81495ea6cee0bb6cdcffed885d
SHA256:
9fc2afaa448152aec7631327bc81cd0e7507c8232d130b8398867351b9abcc0b
SSDeep:
768:oWX0g4XSxDXcycEPpl0yUWLP3kikjnpgjUgUMT/84b/opyLg8MpT2LSdinL5:rX0XXJyc6+yZghpgjUw/HoXLlASO5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF
|
MD5:
05f97499dd8c9c88d0c0a68c9d39011a
SHA1:
87d2dee5a739c1235932fff188aafd099e33f62e
SHA256:
09e0ad1142909800cd798aa924579ae8813f464b639f0b3fe8f2ce9e0bc7b4c3
SSDeep:
24:5ZRaZXLLbyESDznJCzU9+OKBkeYHPGD+d3hcz:wZXLPyEiJf9p7H+6dY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF
|
MD5:
edb85b902b4b4765e5a874f6cdcd2dd4
SHA1:
c4078d0f1e9ad2d47011947efa32b51e77b5f8bb
SHA256:
1b885917dee32cf2832813c6054f2f59ba3c7d5f4347c2fc037a8f4ce37459cd
SSDeep:
48:280oCsJs/f7cydOjS2AHxZnddNH6dyoGq4PzP:33s3prZN/or4LP
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG
|
MD5:
37bc0971a38239e40fd4555185a67ab5
SHA1:
adab3883888f0ec4d3df7bd7d4885f2baadeb68c
SHA256:
6f9c87dc5a1f9e3ded49384575891aec2010cbb2ef3b5ff9c8acd7b03ae45018
SSDeep:
768:Fw8YFfEUTuxgqnThqeW02WhAJp3THiJTS2x:iFIgKhWhTC5SE
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF
|
MD5:
da3974381f2de33afbc560190d9c938a
SHA1:
83f3719d4284ca1b15aa0ca8442bcdf82bfbbecd
SHA256:
b0680415e35331a21fb8f701d44742066486eb098831a6ded9dc683797e5a494
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZBLBjEB6jYO8ZfTwKbD7wyN5:280oCsJs8BjEB6jYO8Z0aD8c
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG
|
MD5:
78278fc3fff398182a1d75056281697e
SHA1:
79b7c025526f2117139cb5dc5e62fa33d013d789
SHA256:
5bd2e8b0ecea2273377b7cfe498fd14360ea7eb8186338b5c17def0ba24dbf13
SSDeep:
384:lp/FhekHHZ6smfhSc696eUjhQp+acSLlidqXAp6njrCYu6RKY8STVFz9VNQR2Heu:Tn9HHZFmfrcp+acsL46jrTRK0/NQueq9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF
|
MD5:
3569dcd36e787d7d35059bb426146912
SHA1:
0831873f38ac5c6e5206012add75b1641303f113
SHA256:
6b99df992bd5b481b907a7b2d4111a0efcb16b3e716e8fabe22f5580cc36ac55
SSDeep:
24:t9iMVmXwSTF9YQR6eEXpkVIUTA7anXeV74pp+k1PAA1HZBt:t9g17Yo3LLlnXfpI8p
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG
|
MD5:
bfbbae2e8809a23806ed8b1919764207
SHA1:
612a3a867effc95a643281ce0d8c2c47c56309c1
SHA256:
4da49e8e8ab950d4f028f12cc88c8c150b7615a310a163305c34311c067fbb26
SSDeep:
384:EElsVQc7h9UtnoDR9kNY5xXuKSk2dwtkBm+K3m9I4jaaetTHVUDXZ74:EE+emEnURqNwxRcytylKCIhqDXZ74
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF
|
MD5:
c074f4fb3ba7d21646d95009af181722
SHA1:
39f38af0eea4f9242d004b1a3f508bfe66a77a65
SHA256:
50fa74147c73de7f52598ed84f96840825407caede9c24b1825bd3847ec19a43
SSDeep:
24:ld9ggxW5MVmXwXNWLNz9vlfW9QNrzlh3LOT982oaoSV3HAHIVIVvTsvOcA:mh11LrluQlzQ9UaoSV3+gIVvYvOcA
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG
|
MD5:
e25e14560d068dd56244d9df5723ced8
SHA1:
efb611c70e53f8b85514f6c2ae794c85c0a42fd1
SHA256:
e5c28a6f10ec20875544c8c7cd3c6742c357a56a1b28d0f77ce96a593877b411
SSDeep:
384:F5dNWG3jnroKwppQl+jWypYO3uCK9sKBoBZ6v9Jy3VQx/+cCH73Te6k0cEQC:jMKwppJic3uCsGBg8D/bjRIC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF
|
MD5:
b0791b966947bda54e970221983a4e5c
SHA1:
bc166d62cb87b246b5ba7f6b4fda98c1c74939ee
SHA256:
e6a237f14d3d4c272b5c69e09a1148e5a20ffa7bd908f7c0223923725d39ec37
SSDeep:
96:C/noU4ZLyh+VTLe/b4HQJB15LZWe2NGi0n9+dU7F7RSn:CgU2yaC/b48+Mi01B7w
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG
|
MD5:
7851b011c6ac93ff851ce3e2d5958cf9
SHA1:
18b2386b974c89e88b53ae3888940b2e3cfcc0d2
SHA256:
78a67d3f6238d789a21e3ca632dca229b1029c8c6a1178fd2553b8d12a8dd4a5
SSDeep:
768:CMMssB28IS86/75KiptQ4kVpNY27K6Hxg0N1LW+hVc:GssB28ISvVKipHMpNY27pO0N1LW+7c
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF
|
MD5:
5ee18842514ac230c0d3bbd98c8c99ec
SHA1:
917202b566bc44a95be32433f8975f96987315aa
SHA256:
f35947ceddd275290553c76b10453e713edbb2a23719dcb8ec6e7b6a8e79a63e
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJLmGZEjTgeVDKKsH9NJG1/:280oCsJs/5m/4eRKK8NJGN
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG
|
MD5:
d928134612777bee778d8344ea59b2d7
SHA1:
64e3e63989d3d12b3bf8b3f498103e58313d46e4
SHA256:
c60a39a26695112149c1962f21f8e00fb8f1e0e0ec45d07060a930842cfa2dd7
SSDeep:
768:B5D1hll/gbyA/ue8HFGM4ocE5pcjtOQ3W:THllobyA/Wh4onMjtOQG
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF
|
MD5:
be99d3031834f6ca19f6c44ff029bd56
SHA1:
79a32b145aca19f0fc45a8247487ad25492a3422
SHA256:
5a2d51ca5c7bb21ef982027e7a17063f646b3fdf6672ca924af842b3af24ce8b
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJLB49fHlBjsdNOMHkgBW:280oCsJs/5B49fHlh83BW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG
|
MD5:
f97d97833b6fbff6ff19aae06cb3c307
SHA1:
5b9157385198a4e05afabc5364b3728cb02fbd1d
SHA256:
75a48db358303ae585c1586ccb5255ddcbd47e3add5c4e56d81229f3cc5de7b3
SSDeep:
768:Ja9D9oanIfAtSNuxe/zfzum9wR5UXatwrStei:J6ZLI4tSNu8zrU5UXam8
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF
|
MD5:
82f20c5af39d2527a7509f2df786779c
SHA1:
94f126ca5a5ceced043adb8bc51101f22a66733e
SHA256:
d1c158964077158696cdec7d872fc5d3515e698b7e035e13d2fe0905139d2aba
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjziLB/bnJSZfmSlXYLOiAg5Y:280oCsJsRB/bJSZfmYIag5Y
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG
|
MD5:
30d27245ac1c86c078b93a18c238ce0d
SHA1:
561af6a3c3664398a0b047c3878b382b46ebc7c2
SHA256:
40d75a67fb7b2f0f171e08750acb5074a40a74e09c1561bbe2168cea5006180f
SSDeep:
768:edTsQ5u6dPltCkqdnxGPbv5Q3KraOIr7Vkdmhprf8:0TsQ53ddjaSyarFI6wo
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF
|
MD5:
a675d469625e74dc4982b97a1d60aff7
SHA1:
64cd6bd6872da0922cfea10b0ea8485f7898e458
SHA256:
f9205d4c1b03f0654525335130d567e1be4bf08372d11cb73ceb8cca9f739f0c
SSDeep:
24:XKyMeEMVmXwRjBNJ8PZvrihcfmDhxmh/YtX7SC6Lm2OMzBYEmdw+p9ln:6ze+8NNJ8vricmDhgJWSoaNYEmDXn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG
|
MD5:
451a3af8c2fe2c812e4b30ed37932944
SHA1:
04e7687b5a48c059b0d87b419cb09124e008205c
SHA256:
392c70a57d18dc1a9701a1a202a635b2021ffaf849cce2fb030eeac6fb51a7ca
SSDeep:
768:JK2hRCsNvNDsbO6IChhIDd3ddJJGyn/gLfmv1wVKFhw9s:JKuRvNvhsb97nIDdtdJ4yn/gLvKFKm
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF
|
MD5:
c2ff5ba151f2c3ecadb5b2dc7bced03c
SHA1:
b6a06fa6d62a32654a8a94146e119e06eac96f08
SHA256:
6e3483fcfd43f3d476fdda98f271011a45522ec033f9762699642c23879b510d
SSDeep:
96:33s1D6LO3KY9UL7/UKJaAQEdXz+xBHdWED+1Uot+Or5gzg:3k+gK/fMKJG/B9u1ULE
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG
|
MD5:
ad38e73474e64e55902296b3b3639236
SHA1:
e06a36f72ec96386b917aa50719e1e159b07759f
SHA256:
8cc773f94d6811240c8d22d00b6785ac76679600ada6fb2fea760dad4aa7854c
SSDeep:
1536:qox2MzMEcGSdz7gK5FntVlX5MR33+FgL3ObZj2yNXcw2S:38MzRcvQK/nFX+d+CL3oiyNXfv
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF
|
MD5:
8f75629d31877e2b79dc9c4119401d2f
SHA1:
4799bbd9a9b7a62b131ff3c8e8c4366817abb8ba
SHA256:
5c811afe3c3abd576da6fa3dca40cf77a4f73fdd39fc4d156efd35aff70587d4
SSDeep:
48:yOCCK8R6CXoB835IGPseVBosE2sXlmJKfmSANXxg4Ll+89G84bOHjkVo:9yYW22llOF3d9GXbMkVo
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG
|
MD5:
d85cbc98bc01d37110ab589942db0fba
SHA1:
127231dafdc3c3e6ec140a6cdfd150f7ea7dd63f
SHA256:
24711715ac19bd0107f44ea586d161f16aa78142bfe7c8b299b2a8371f12508f
SSDeep:
384:cRnJr7o+k1wqF6U4Gc2TFdGcKCZV7/cLnukpjIe45O:ant7+2XNvyXGj4U
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF
|
MD5:
0f32f8440fe9b58841c0e788b4f16d74
SHA1:
aa40baf98111a4e41364a04e28c98f7667dfea8a
SHA256:
b46d71459f92e3191c6802a99ed4abb0fa0e861be9827144f20816ba01d210de
SSDeep:
96:33sjiyH/jyPGPcpOKjRQDmvS2gwgqFa+Y7SBIMvFCOjN43IiOrB9e2:31OmIcpLQDiqfqs+YIze3YrBQ2
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG
|
MD5:
41f1f3298f946132593736066ebe98ff
SHA1:
7c508fb314e2bbf6d7c94b3aad0bd4871d704b83
SHA256:
e0a74de423c14d0f6dfc37cba49c7932752a56f61e6eb3bfa3cec2130cd53e4a
SSDeep:
768:6US52KxGU5VS/IBvoq1B2zKbQzT1J2AjoLpu:6UU9GrIyqCze42m5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF
|
MD5:
2d528fe4639e9ad315b274fa753938a4
SHA1:
761fd3cfce01070f05250992a2e8f01d3bb5b3cf
SHA256:
232603e07e5b0f7e75548ca853aca7b412c006bb8960c7d6f07743dafa27768b
SSDeep:
48:BNd6yn9keC1/LAMcoryRthVfVF3bE5DMAsIv2uah8:BLVn9keY/yoryT3fVFI5DMAvvPa6
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG
|
MD5:
731dcebd988ca01e3f76c3f6e5a9f197
SHA1:
84d2003b4db246e2fec618c1717b0162a879dd92
SHA256:
edbb5e220e8e1cb942c10cddcc09b98e667f547b94bd5ed98730ebd2c5cb113e
SSDeep:
384:be93okfVq5sGmYL2v/BdCdNumn6xmIu4aLWW8///bpTR+CGxyy:be93o9eYL5dNum6xk4aLWWqpTmxd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF
|
MD5:
caf9b6554ff85e0ce5e2cd6d274287a8
SHA1:
6135f9eb9c718121fc47ece54200bad8d49223a0
SHA256:
7e758d3ae88fba9260515badf40ca594021d8a962fa2bd0c436143699e2e9512
SSDeep:
24:KtyhilMVmXwS/I/mHTB9ZdxSNa1Htu1p7cm7+Sq1NH7xW/JA6:KMhiBRIuzBPTmkHKahgJ5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG
|
MD5:
d17c09a5be0e3aa1005859ecbc2fed7a
SHA1:
b04cda0bbb3e372db974c8fe87efdccf3592eca0
SHA256:
b0970e76d63ba2844d4f2e25c187d2c80f37e83332df9d58edb07816efb599dc
SSDeep:
384:A7jnywgNz5raHhKSD1vNnH5bQzUeQf+W+4enGE1x2U3c:Kja2BKSRNZbQzUe1Tnvzc
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF
|
MD5:
fc39777be0b814b34110894661dd3b70
SHA1:
650c8fcdbcc214ec50cb3ecb736674de6ffca199
SHA256:
7f9843a8f8481ace11504ac4bb72928c78cfdd3f4b443db3fabe959dbaed4cfe
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJLyqPj+FSIFDxIJXu7NGU6FeCKTxb6wRiLd:280oCsJs/5yqb+oYwex6FqxbO
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG
|
MD5:
ffd4f0a84a8a7fa0352674286cf55843
SHA1:
07f45b7118247eb0b97e9068f0f6804c82aecd4f
SHA256:
5308424b78d40476e43908efb15f577594442bb6a24384d11422993f59f7afcc
SSDeep:
768:GbrzQRGrhc6PWLCN5L6vMoviTEwgfp8whZeVw32GoGxjPLgzdtNneiH7qz9Q5:QzhcrLC+UoCgfp8CoVV0LgzRneiHuA
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF
|
MD5:
36b4f7ac1364e38ba693db9eb6efb0f1
SHA1:
ca795fd2154f237a3f3056148e2a39d786af7cfe
SHA256:
387b63ebb2017dc5f8bf4d51207cf4148370d630a1ad4d8ebeb467beb70d1131
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjziLB/b3w1YK257z5k4v/4eAf:280oCsJsRB/bPKQO4v/1Af
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG
|
MD5:
f1c627ec834c15f709bae16ff9ed80f2
SHA1:
c55a401a56932e62b42db6184e460c167e5de4fe
SHA256:
b85571c9974342d710f8b1c14007f9e3d36a4d357fa334ce6ba9234af16b9e88
SSDeep:
768:rh5fXewKpTIu+Ku0oKRle1TLXNTDAuU44TWKvWfHpcQRzaFhu6IIoOVjFn+XOsYN:rh5WPTIu+d8e1NTDAuU4CCHpcQROXu6F
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF
|
MD5:
b4542bd3d4f860dfa416ea6c6574ede8
SHA1:
9a22de05375adf66b0fb2ebd6efc9f15383b4484
SHA256:
5f0916573d334f5b012104acc4f205d694f274e7273e968f94d6a2ee4c587cf1
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJLB7qE2t9Kk/6hxAsKTSAqNYPH:280oCsJs/5B7qE2tdy4lTv
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG
|
MD5:
5ecc405c2eb4024698253700d4b5fa09
SHA1:
dc2c30322fee408cd24fdab3c5465799fae245f1
SHA256:
9a46b4f24a101bf49a8931277941a5d98e6e7355130f708d546157fb61ec8a93
SSDeep:
192:Z4gWV8iZwSn5yZRZaLVgpNzCaVvzch+KZUalYifGkFN+x6R2YnlRB:ZHC7BnCjNTVrO+KZbl1GgMcRJn1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF
|
MD5:
58fc01086eee8eea1f41c76faff58fd3
SHA1:
dade82b0ed5488c5826fb1f77d8ae1d9e1adb4c9
SHA256:
5da722e298ddb9966dc425193fb2cf403b8198924156fccba44634bb0d054b36
SSDeep:
48:WHAzIqT9aeHwFIlp+hgU8zDmYkd9Wal4FsOgeLmaxln8+TyadP:CAzVyp8vmdW8WsreyaxZ83+P
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG
|
MD5:
a4f495f03fb12b5117f300d25a84d96d
SHA1:
f1a037b07b5706ad92e58dbe43fbc22e9f277bc8
SHA256:
ce5ad1e9c64481126cab2df9ca9b253e7dcba156aa09a51983cedbd89fff4261
SSDeep:
768:q5fsQtuPYUNvkCCC/fNxtnFpQ3BPGUUJT3m/2nMe7pc8TJNkPV4M2Mygft:fwUNsCtruPGUqlVzTJNsVL7t
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF
|
MD5:
d0d9bb743a0ed5f464ef74145534f196
SHA1:
7b4bbe7fe706b2304f3f0719903c3339ac3986f6
SHA256:
4125e0b91f9d6b7c1bb7491f22991de82b221b21af3e4c39bd2cc7560344c04e
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJfpWbZbXp84KAs3fcv8CplpRjrU+2:280oCsJs/y9bXtlcdYlpRfp2
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG
|
MD5:
78c5617629eddae40ec92853128971d4
SHA1:
c916773c1fc81d54ca4e3361d962cd5e663035b9
SHA256:
a10315bd2f374053088db0c8454633ba5a321ba5edd60c703b3a53ed0d4c5060
SSDeep:
384:qsnbYqxmqWC2VPbNKjFujFItnfKLuoEdh3XqHjoF61PrJo3JQqjj:fBgsaPxKjFuueuoEdh3OoE1PW2Q
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF
|
MD5:
880f67e882ac47b039c96ac557861242
SHA1:
c941c455efef1168ea636f8897c4c3791bd65709
SHA256:
23a9f23293e80c57ab7be87a6081df827e7c84401e7eb4e6b643c1f27992c7bf
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJL+nSy2xKyEpKScb9Nvk0ZAF2EHds:280oCsJs/5w4KybfvZMHS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG
|
MD5:
119a78fcfdd0016c661ed5ea082c51c1
SHA1:
04cbf6fb649376ce6349bf1af9fe5b1481847c18
SHA256:
ba84e0f57cf8c8c9a75886f8404958d133403af1aa87801363201ce4b6e92d49
SSDeep:
384:aUU2LazZ23qXbLrMdX7J271qt2KTxzrNqMokx:aUDmYlJ7s71qt2Kltqlkx
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF
|
MD5:
bca4269259e6b456ebd71ee28081f456
SHA1:
87030e4fc84544668bee2587ba5134bfa1b48d63
SHA256:
8c6e967f7f97242a01919687a92ea76db6faeea61d444137a2963e0616ed5d79
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJL1qh3rnWHugHoma8Cd1lRXLX6rlfx:280oCsJs/5cBrnWHuKomIXCfx
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG
|
MD5:
6d3ae915d1e87bb75a916d97ae9b8ae3
SHA1:
0afb649a42279ed8766616355cd13ce39c8f26e2
SHA256:
1ff4b665513df86621b46831e417a9cb15e28f530f73fc1208a32bea46702eb9
SSDeep:
768:zdlqcfVEDSJ5BT/HP3BvYPrsRWLzTusxzRiFhhEUlCwYW8tZxBrMovfbSv8:zdlqJDcffBpE1ixEUDQxBrTD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF
|
MD5:
0106b10e7edf3465b6436102aeb7c454
SHA1:
669213dca902703fb81a5198b7dc8bea6d6abfca
SHA256:
195b9dbcd4d3469d5a3a62b111116a0be299573199be203d6d69f1dd95f89528
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJbGT7jbGMcTCG2EgmYbmsuSNBXh9LqklW6n:280oCsJs/pGT7jbGMcTyyDSjXbblW6n
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG
|
MD5:
1f640072ce62f1c40ead07b45b7b19d7
SHA1:
803a3f886cf24d4c57fa4393937e90b94a4c3ac4
SHA256:
a52818932226b1e421684f1aee1b7f029047e170338721663c9ff80f013dd8be
SSDeep:
384:oZr+AVI4vIvQKHXOAFBXaM7Z+r6ZL1mp3gQ2QhIQtvcG5qq7NDvzQ:c+OPSQKjB9x1mp3NyQX5XZg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF
|
MD5:
92a9696c5f4ad64273108bd78b385f09
SHA1:
9b7f14cae698df4ddc102ac675234e61857fbaa3
SHA256:
f524a2341c2a7a4caf5f19ac8ab99ae4afb4af6a51469545673c3ca41e06034b
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZDVbV/p97xSUMytWkTHFKuSUPpj:280oCsJs2xp+U33THFKuzj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF
|
MD5:
fe4563324983b54370b156202feb9b0d
SHA1:
208027ff7c01c7122512b3007ca8416b6147e445
SHA256:
2483647e8d7ce68dc84747af559aabd46caa83375a2daf8b025a0dc15fb7423e
SSDeep:
96:33sjDXWPO4StcV9DvFOMkp1MLDm2UgqlCjlwTzfrcp6kQoeMWan:3sWPODtoFObp2PRUgqlAeo2n+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG
|
MD5:
e30e2c36a4e2937931e511ac7777875b
SHA1:
6784c06fb3793a434967c1decc405f25d6a88c4e
SHA256:
7a2d4d2dff73a2a583bf949452e807757c40baf4360aa2483c20387914bacfeb
SSDeep:
1536:hCgzfQ01/8A6ktaB9Hic2g+clwS3gB/RVSML9i:hLt1/zNK1igNI/Rfi
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF
|
MD5:
2a9023860c3ab1a370b31db7b77917a0
SHA1:
f274513225d7389e9d4bdf11b69a089f8b299d23
SHA256:
2147f2cf3d170cab8346ec17d918e3fb283307ef9920f33d5ae9bf9cfbd4dc1e
SSDeep:
48:3nJLVm8SG5siWmfIhgejzSKpEMeo1bCHFUNajdlayDITtjLF:3nJxV5qsITnS85CS4dcyqtjZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG
|
MD5:
59b7d0f1f878fd52ebeb8bbf28584b18
SHA1:
51a67f668bce0e65b8ac20ddc2c4a75af1bee29f
SHA256:
88fc9ab4c7c3f0ee2662679850181a53d6beb035d3164bb35a79a53ee611e26d
SSDeep:
768:zAO5GVrhHbLtcNMu7qff444/zlxFrL5jGsfJkTCKeGhWxh56j:jGLSqn0/Zx9k2JkTa8Wf56j
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG
|
MD5:
df8c66d9bf5cbe1cb000761dd2cfea11
SHA1:
55295d82f5f26734f796a00fb745af6f32da63ed
SHA256:
ce980cf8402eb0ecfd939e60346c67ea0e8dff1d0f6a6607e7ee3326ec8121ca
SSDeep:
768:VgJjvDeCzGM/jYIvLjDnCFm7UwYOmQQAPuajlOF4lYN4vTapCe3AXVYYgv9Rh:VglvDnGM/kImmaZAljENZUe3EVYYC/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF
|
MD5:
0265ec11a262a8f6c55366837fa10e44
SHA1:
8cc08c11da07532066da41eb5d58035fbce5b9ef
SHA256:
0dea1eec68460b4671ff9c445b050a4fb4b1e602cd4009005362a473f722583b
SSDeep:
96:axz/caLySSum5FhbUwF8a0A+yqRv3mbQc7f:+/cIyS0jpH8DAAV3/c7f
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG
|
MD5:
25d59582a528ef0233c2374ace733f3d
SHA1:
76bca22f2cb1c0683a02f404347c3296b70e112b
SHA256:
088fb333181b889489e7f97302c21802db0d85f364094057ff44df38094b9732
SSDeep:
768:YEgHWeSVHTVS5PV2HsoZ9d8xCwy1ySw96CCd5wMN0N3vt:Yd2/TVPsY9d8kty3RQaMKNft
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF
|
MD5:
18bdb233d5c71a8a9c77f2bdd475a260
SHA1:
603baf3b3779c9d39cc0d7a0fa71e386e0c292af
SHA256:
306ff013fd2030f22b4e007824344051ec26bf67c7606c5b8aecacacd1424fe7
SSDeep:
24:vmM3KyLk4GwsChWQI5BR139Im2bI9r5B+Pv:vmhyLk4nsC96RtxX8
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG
|
MD5:
0a246efa7c68ea478ced98517f339f96
SHA1:
62452332493e194a6b7de57cf024351450f0787c
SHA256:
f558efa0e6fd6abe57fa9274d146bc57e96eab5592b433ac3cbc176813de2b60
SSDeep:
768:zl/gmhEVHJ4y5Dc+n1+XSkWPVY+JLE/YW3R3OR9Axp:zlRatuBI+XSkoZJKYW3RKW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF
|
MD5:
439162aee6ef96cff7750c913b799a94
SHA1:
ccd615b5bf6d58d6e732dad4c9c2d399917ee8d1
SHA256:
b16235739a9607d065c20943fa539f357e1be723b584c2e9ee687e21faf1d0cb
SSDeep:
24:WWbBPYYKEvu34yJMltkef/WOrBVpgUhVJprL0R:WwBPY/37K6OrtgQdg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG
|
MD5:
33c7ea932d150eea1665e3644688fff8
SHA1:
55a9b63643fc5cc5fb48d389fa04072dbb1cb626
SHA256:
a32651d80a75fa02dcf02beb90c5036cd6b257543f8f6037ad7c567bc0709f39
SSDeep:
768:fyryF8VFeFGobwhYDao/EmfMXcJ9idhgia:fmpkFttXE2Mocdhgia
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF
|
MD5:
fe0ec99b5d330bc817bf5565acc7a492
SHA1:
666ea91bc4da7eaa7c80d6fa5ad3486b04dd4d83
SHA256:
cb1df66ab7a086b26c83159a8f6129f7a8b57c1b929e10678ce9d11c9d9d62fa
SSDeep:
48:PKCkCEvasqchZvdgwKvWNIqJOKisDw7HX:kN7fhgtvW2Ki3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF
|
MD5:
4ffcf6a6a27eb9d6434a13cd9bcd8f7b
SHA1:
4b968608707d2c04d71ab15d054a20003eec597b
SHA256:
3a1544aac408937193e0836092e897e596eb0f29ee5be2c38e0edee168f98412
SSDeep:
48:Sm5VbA9JftPWtNzL77xwwhThppX5KUYr6Msfj8nc5FN:T5GvWt1rGwjvYuMsfInmn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG
|
MD5:
0169bf922a16f34c29c3e48a87124afa
SHA1:
e28d4651211fc919ce2cbc975f60c1fd7a7d0b35
SHA256:
16a7cc77e68f3b3a42a11f5f77b6283dc170792538084653d8388ce7dcfc238b
SSDeep:
384:x39/B7SLl9qPdo+prS7YuE5JPKn0d9PZDVC6Ni7G/zHYIhDBqzF:xmbJWrS7oJPjd9Bh/DBqzF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF
|
MD5:
fa2f3420664b18add7885166513cd290
SHA1:
2114ad181a3a36ba371b526d55c33f2c77c9994e
SHA256:
293eb9284cc7123cb79795df55d1d5591f6d293e1c0157b0a402d219771336fe
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJwQoyC3xf819zvvLNv/377xJrv+NX3PmO9bYo:280oCsJs/XoyCt8nzvDVrdJQz9b9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG
|
MD5:
64ae8c58251830acce9e43b685730456
SHA1:
ba3222184301fd45170329e917263f84ef37e5c4
SHA256:
7763bf9e3f217fc070eddad89fa3a29b4dfff76a50099f13a7af1b27d9d316b6
SSDeep:
768:wwKP+PvCA51p0rRRNifDntWO6k321KEJTkeHA9R4EeUQkX:uPO3IRRN2WOnG0oT7g9R4EeUQY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF
|
MD5:
035f817451de3fb4c4c5f8ea621a8468
SHA1:
70772b2cea2ff33d4b4d85e6aa67fc61fd444036
SHA256:
0e270302ae9fd2132344a39a0eabc97be3f171f418294c87efaac96666cefdb6
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJhqxLz1hBA6HY0GILTDdr6JM/5Jm0tqZIF/Hu:280oCsJs/exNhBA6HVDdUM/Kd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG
|
MD5:
9f7937076c8d8fee843bca01b61a6121
SHA1:
f683c929db0988ef0cde5c43da99c0be00c22c3d
SHA256:
41b19af71488f8cb3f2d04ddb7ab2d35fd40442709117a2f284d351fb7685497
SSDeep:
384:mHTfvSgxbMoGotGc5oXUH6z9aLv+mfkDpU/SQg0uzy6/:mHTfvfYc53mYLv+mfgpUKN3//
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF
|
MD5:
0eccc48f161d7ad5dbfbb564819319f5
SHA1:
fd24d1dd1d1aaa14baeed723ccd26825ef45de90
SHA256:
c9ef35187d5faa0e942a8c330cac91f68d563324eebf63e01f8933b441a78b22
SSDeep:
96:33sJc+/t11zb9oR3r0AVG5hqJy3XPJtprmCCcCYPbSHc:3Wh/D1FHqgnPJnmCC0Pf
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG
|
MD5:
24b772451f4a53c76a23a8ff0cccdd11
SHA1:
40eda8a361e04a9010c4eb8d201c962ddd61e9ac
SHA256:
77b708297334b9b9bef807519695c5b08f1e7aaa0ca0057d1a60c0ddc0995e91
SSDeep:
768:Jr6NtFQf08NXEnemtTbKMI1bsmNJFQK1wYtFz6XxwHB7WKNzUlAD/mdyb46NQjDB:Jr6PFQynFtvI1RJFnRtQXxSNWKNwATmX
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF
|
MD5:
9e460497d70ab33dc18174b4887564aa
SHA1:
1053dcfacd4d29a7891122cfd303a93a995d5db3
SHA256:
3d589b30d634df822c831b891a5c19c2356760c337cffbf355990b6dd71ac34b
SSDeep:
24:28QoWKm1oCH+DJTYjnTTkGIjzZIJMwpwb3iJcFH1QkwMf1i0ddfEKj/hO0akGhcr:280oCsJs/ORbyJc3IGdcv0aPEMA
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG
|
MD5:
5777fe0c25d0618dd3b1823bf08f111d
SHA1:
1e23e763cf64072800f44eb0472742f6d5bbd62a
SHA256:
015dc805701893e730e67353911f3e5546a0abfb4ca3e1c73f7241d87f950406
SSDeep:
768:YN9ATsvxJynd9Plyktx1zLJmpSzyybELRZnWyCenhmec1cj:YQWxkRl1t/LkpEyybELnnWyjmF1Y
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF
|
MD5:
c5d6083fedbb68015a0808868f1e6844
SHA1:
7b601b17b2eb36920e5db60d9055a78cf9ac743e
SHA256:
8c6192f5dc13de69ea5d20ffabbb6dabfc80bc2ba50d69eba0c3997411f8975c
SSDeep:
48:nPuTyek7UnoIrUcTsnwEA1UEJty97q+FnDvSBrTTXAigPZ0PMGHRRoAIrw+:m9k7U3rUcTGoNJQ9I1fXCyRHMQ+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG
|
MD5:
ed424a99ff70642a286845487300e44c
SHA1:
24939fd9281cd846f5474ee1fda82f93d32cdd81
SHA256:
6028a39dea85bff4bc9334dc533e1d85794387b630a3108c0b8352547a4c307e
SSDeep:
768:Gqjok5EzYY+hC4Zl7AXAn4lfEiG9L/k+E3MLdmiJls:GqjJMchC4Zl7+lfry/k+E3Pik
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe
|
MD5:
e2b9c4516c9fd15813910c122a052792
SHA1:
23a233682384ad40e11171106f29e12dc4c0ba23
SHA256:
f47dfa5b9c25d0e1c00125d4ab04a494899b8fdfd4d7b50c11570b35e99634fd
SSDeep:
1536:ppP17FBLeIwfYLFx9Ww0wJf2vlP3VZ786flqweG5WuKElTBNcl13bxU:lbLeoX9Ww0I2vS6dWG5W7gTBNcv3VU
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF
|
MD5:
88650bcae916b9f8e199c174fa38efda
SHA1:
9d607861bdec8723014abcfda3034bc42176436f
SHA256:
e67231340b61db3a4ec5f093ed5a7076374470a6a93fcbda54f8afdd71bb1fef
SSDeep:
96:3RPua2DmljcEFrK44aZ2ffyB/YasPL2XxoEWoo2CRH+tbLs+e5ZYfBj:v2Dcw6rK44aKgYdYoD26+tkHE5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF
|
MD5:
1382e1f255828198c94edb95d1521b58
SHA1:
6337b82f29c58d92da41f2081450932f2940722c
SHA256:
6797255bd616aa9768e5b81958e35f4fe5afabf8d7d9ed77079b8a545dcd201b
SSDeep:
96:zL47U5LpOj94QYVJaw4qJkI85v1V9ZeQrWLQ+exGKKbA4jtHO3ep:f47L41VJawJkH532Qq17Myuep
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF
|
MD5:
cb57683e5b90f117fbaa1df14cdf7eb6
SHA1:
b06c78f7ee3af54d5a26306f16c36545bae74d8c
SHA256:
529785acc69ccccb3a91f7ee73692159176afb8288225853569a7674babcf162
SSDeep:
96:fNEtgtYzPmQpBk5IroZUfR0QaKykg52e+AtJxKuSDD5sLiQXJ2sAN:1agtYzbTkOoZUfRjh02hA3xLS0iQXkpN
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF
|
MD5:
09673634303111a4586354a560cbe25f
SHA1:
751682f15846944e40c51abc8429d56ab0608c49
SHA256:
c57fb872493f733eb43afffe13ff98a0b342f4fa13698e06e0628bc96a1bb27b
SSDeep:
24:ErImXaFcwNyscEBXq38rmB2liWqiJOx4gmGt6yleLFkk7dwuy3+KiQU:g4FcwfqsrmB2s8Ox4gmGt6amkkB++Kid
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF
|
MD5:
fe28dccb3bd3c236b2e7d764e7809b07
SHA1:
2b762dc4e1657dae8bb0f50acb1240e48f95b8c1
SHA256:
d3a7de0460d9db29bc878db07d879f5bfd0b1fe4a7273222120919d2aea9488a
SSDeep:
192:8C/368F2g5XePoxE4WIRvU572wSVbzH2ZI80+Hy0r:8CC65XGj4WIRc57IVfn+H3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF
|
MD5:
395292ebeceea6ec11266c29c71137c9
SHA1:
02526d8590e227cb5bb882da64b3ce03898690f7
SHA256:
8ebbb3fcf30268ee4796fff25fe781a764acd5d58d32bd5ae3abfba87ec1742f
SSDeep:
96:fCMXzMZCNii4aIWEKwS448OUv7ceSYYGKefEQq0W0CaDejOvgDERV0hqypZ:fC/M91H9wm8OUv7cem5WW0XjvaEjgqy3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF
|
MD5:
42c496ad9f0fd7f4efc7e093f7c40d47
SHA1:
56cf69748649b5f1943bf215205bd01a88d9e090
SHA256:
b970c8603ed85cc017a0877cee1cf774404312cb2cd7bac7eab7fe57b4c52200
SSDeep:
192:eC//ANrwQaOobI2yjpHUig6py2sPUiZazBpxQJK:eCQZIOo8h3g6UfZIgK
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF
|
MD5:
abe0a75af84d5b7651d5c7140c93f1cd
SHA1:
05d038aacccf1c20d5db6d7d8c8bb7a4887acad3
SHA256:
07feb10ab6f29e34bd64cc19e0cbe1dae1fc25c6f63a0d0076aa6a0cbeda0ba6
SSDeep:
96:14CMXzMZHP0PiFB77BEe35JlQzJec7xD5ufnIk6DWYUZ1Cmsr:KC/p0OB7FF35JlkJJV5Jk6D3UZ1Cmsr
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF
|
MD5:
9059494f30ef0250d7ac355b9dde5ead
SHA1:
fdfcb696faa1999d4254b412fe03eb1ed61cb7ff
SHA256:
43f7235c665b4e5891ed8a0d1ca304d3bcdb63a0eba3b72277724eae69e9e936
SSDeep:
96:uCMXzMZ4JTpjfHSixMs2lySDfOTT7lPeT/XGups/mpSZ1yLeDGZwKaK1og6CSFH4:uC/6JTc62l1UTMPDpK1JD8wKN91gHumC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF
|
MD5:
936b183e3fce2ee67f1e807465cc9c3e
SHA1:
22bf9b67842949c816055e7cd786202536f8163e
SHA256:
ddf198d199a36054b0211835b43dfcc9dd34558bf5419d649289fac6a218f79b
SSDeep:
192:KnR7ekc2QB37Jpaszyd7e0b7LlRKNUTknZjdGdD:Kkh37J9YaULlcNekZhs
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF
|
MD5:
18a14cac53a79d38085b1b9ea807cebd
SHA1:
4590fcfa82815adc07032dfd0dd3a0b06a7e8823
SHA256:
3f8a80bbf208991b812138be18b15eb1fe838d4055497fcf91fab0b28f2676ae
SSDeep:
96:rCMXzMZ7PNwhVWqp219L4ejmfBafhaEapd9MGSxpnr:rC/1z/Z1fmdirl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF
|
MD5:
bcd226ba0c6391e3849d8ece939f6e98
SHA1:
b159e87ec055632f896b009349a2c446564a0809
SHA256:
ee8c9c0578fe572e4612bfed52acc2c27a78e633a64e78656941d88ff3070d48
SSDeep:
96:tu7I0XhFnLTLo8ms0FnLTLo8v5knRjCfXfgYDFMy+cJvSmH3wyRT6J35PUE:UnRJvHWvHhKjCfXfrMeRSmH3zYNj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF
|
MD5:
b834cb6449bd57220221ffb7107bd307
SHA1:
f9eab342b5d585a893caa157c9e730983c899d11
SHA256:
24475f0b1bb2f31d372fa5850ef3214b87b9b09b7a07b7c15ba079abef7b5511
SSDeep:
96:qKItmHIeEsXWIsz7NQ/u5EmP8CSmHbLGIb:q3Nen77u5tP8mLGIb
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF
|
MD5:
a28e0a9099146b0ca50149cb6227dec8
SHA1:
0b118620169109ba635716624cbb066ce8514da0
SHA256:
2a3552010a82825641201f110ae28fdf92529a38b9803a151cf9b8f516d69b66
SSDeep:
96:Xu7I0XhrNgRvrrA08eWxdfRJoJZPtIS7NboGfEn/:enRr0zrAWWDfXoJBzxbo9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF
|
MD5:
b6228a7cb5e5ac4cf82ebb3e9268eeaa
SHA1:
9c5e1ba20b5d6b169dd0bcf3cb36376fe38e1674
SHA256:
4522ce3f8a4d5ffaa4180bd689bb7f924a2b693b65b8b128046138fc5b6b0a30
SSDeep:
48:jnc6ZAQEOHNAmpmpJpaRsTDJ6jk059KyFfhEw/tb5luznk58rMlfUa+ao:j/ZGOM+5wcrD9/tbK3zau
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF
|
MD5:
9e5343dd71c41aaba71bf5377486ca2e
SHA1:
8a7b1f80899ba51f03798c37aa838e8b1d758196
SHA256:
458a3a006b75497a5b6777747fda6ea658dd300e95b7f61b6a0770f04f85f95e
SSDeep:
384:RrTKrDMBXWPFtZWIaKe7Zx+/4rrec581fdnxoD0:RSoXWNty9XecUxB
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF
|
MD5:
fa68b8423c0126e8a210e95abbd52832
SHA1:
a407ee597e624193c3bf9f4b2228ac8746f81da1
SHA256:
a0fad6c6fa7b9f0fbdf255aaec8f36f1a8c44cccb2348f467e99b74cb042528f
SSDeep:
384:7P4k7sEKS4hAWnassv2XJ24+o3ncQSDyvMZTaA9h4p1ROVMtDTyXufJ:7EEVtWnassOXhdXNvgTaAm1QVnXg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF
|
MD5:
bdf2d57afea68b90ede85fc5fd6fb8c1
SHA1:
3b067a4d5f35a7452edcc630ccb1509da21d276d
SHA256:
ca64b8ee96f13dbe4db13a734d9fafd401e5b3b26419312964b3284f9483d3eb
SSDeep:
384:xWXlVQYKcUjMdY9ZIKbaNGkHBeUXHWNktvyLU8ECQ0ZG3le:gURjoiZV+NGktX2NIF8ECQRc
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF
|
MD5:
ca410d88284d23e1e4e662b853ccf9e4
SHA1:
9bc54f58008640d5f9444cec10e296bc1014492e
SHA256:
5ad5b8c75823ca9fd58285fe9a0e5a9038325a9b82962b00e9db1e5efb269cd6
SSDeep:
384:ib0DV3aQYyK/XSFl15tw9unt96WyokgqTejbu3S0AVjBe:ib0pqBy6XK/Sunao1qSjbu338e
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01046J.JPG
|
MD5:
d73b78ee3fab448e319ef08cf57539b3
SHA1:
a521cf4fc8f4418e62d2e152f9af316ef3be814b
SHA256:
bbf0371385e338b0cfde29423e6b0dcad6f6a29ba0204b8a403310e7769ff654
SSDeep:
3072:X7TfqKF6jWk+0Gz3am6ZsZjCX79Lpg9VAjvPGqnJD:CK8jWk+0Mx/CrlJD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01179J.JPG
|
MD5:
4c4485dce242c104a93cee41e58c3fc4
SHA1:
85a8a148a481a5ce89aa03981bb88b9976d91e05
SHA256:
035c46dda9796dd31053b539acfa5e32a022dc2e15d1859a1fd03d7abcc7adbd
SSDeep:
768:l4MAjqDAScsEGAqsvQhkVnoMnzjam9uq5gdYqJ/5h75BAznzou6R+dn:OMAjiASc6AYOBnxuyMBJj5mz8um+dn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01213K.JPG
|
MD5:
f8664aeb7977b1d48c7aaff4948d42e5
SHA1:
9c2f753aa3edf959dc47795248a57cc8d96825b7
SHA256:
a2b74ce1dcefb66531d5f6c18b287f3c88628b2b1a5bf206fa00ae2f0a59c0de
SSDeep:
192:0/hJHJibGpLMeUvtJ4c/U8QDsjIsdYF+ePSZ:IhJp3tMeGDN/+cLaxSZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01221K.JPG
|
MD5:
80f8c80ed22f7c38143a2d3488f40653
SHA1:
547668448494adc2f3bf22ddf4be065bba69e58e
SHA256:
e1941b2613a03a1e352fcab4566502a358020dfe99f6fbce00990708994d6953
SSDeep:
192:BvCE0SPhQ0s3Ie+KBQd3pc9VYJd86/lNf8xbn+U2mEpNhE2:BdwZuzKcgHF+U2maV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01235U.BMP
|
MD5:
9a188b170854e1c0fafd7a4edc6cc815
SHA1:
917444d0b88a250e985508f411371221295c0b54
SHA256:
761927a2e7986cef88e347f89781a5241dba382d4e8c220f61bd2dc6662f4dcb
SSDeep:
768:QsYZTcVif1fjxSKLi2X6LoM2FzTSwT7wrtSeyPdC74Uh:QDZtdQKLi2X4o5zHwxMM7
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01236U.BMP
|
MD5:
b754626e0bf01b3aef2bee0258956aea
SHA1:
13faa534e087eb0a9401457505ec91b19fae6400
SHA256:
b8660cfcf97adf2207e10b2b7ba50f2e421a7fe60c2ed2cc37c2c4158c346027
SSDeep:
768:D+ALWeOYp0JtdlfaL9pDLzaXBDkw6sM9+UHHG/Nn:nWeJp0TdmpnW9RMIUnWNn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01239K.JPG
|
MD5:
8f215fd14737a7232e2a3ccaf1362cc3
SHA1:
a2d61b66182f9178bb4ac5788d1730f65b4e4592
SHA256:
c3830b56b7d45284b28b35a9e5112ec5916226df23e2b9a61b7da351666655d9
SSDeep:
96:9o/rINfaJGgTycKV8BxywkBIDwBrzD7dB5ARtWDMS/S/TG/umR:WJfy7eBxABiwBPDIoMRmR
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01247U.BMP
|
MD5:
d5cbab1e2d9e609b4e9b6c85079f6c9b
SHA1:
3f12ea47a9004257d1d9961f90ec5739ca2ef1bf
SHA256:
0e03a73d102c4f7c3b76364c5b07c6396ecadc5acb3dd9fa5e0c764d8dab6692
SSDeep:
768:dhbk3RfoWHayuypCHgRrH/UJKYvfqpa9yzBK:Xbk3HhuiCHgRjCXXqE
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01255G.GIF
|
MD5:
873471b6993b77467ab6b21460904a32
SHA1:
f3ff1090bc4348b6562035f20f637abeac64b252
SHA256:
1910a8d13304d32197267ab06698227a70992ed0e28d53a3d43748a1fc18988c
SSDeep:
192:fnRu01D5mr9sKvISHZaHNf0h8DldZZmreQmPu1UoF:frpQr9hoNfSQRArrmPu1US
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01265U.BMP
|
MD5:
59c2853c2716dbe8541451c597992553
SHA1:
129ae52fd056890fbf4e74976e141be0fd4bbcd9
SHA256:
d58d44c8e9568b14253b6145a14499076d471c2d333751511ee9bdf36f9af125
SSDeep:
768:oaOsvayM9L+ew0dUFXcZoQHKaWXMfUijU1V9VPj0wW95O:oGnYwUUFMiWZWXgeZjiM
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01332U.BMP
|
MD5:
2f14fbd4c3dca5880552981bd53905ed
SHA1:
e3c3cc4115bec5f2f6a5f4dd96b66aaab8b54032
SHA256:
8e78ca0eef90173e98cb68d89cfe50854d5c5849dee8db41c75e512791875471
SSDeep:
768:Epk4FOCiRjPgi7TZYmxLdbwShf/3wKI0cV5rGR1q:Ep8Hhqmx+Sh3VTik1q
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01478U.BMP
|
MD5:
9957f2e1ed59ffae836a8f603d26a3c6
SHA1:
025cbe018fb16564a59f8d73353310b589c10963
SHA256:
70b2e8e4350853e065c69535333bc08cea4e8837e40f5a553a3abb57b309e2a0
SSDeep:
768:QZ8fs2bZ9GAEkcUYa2mtaszxK3cLTsfD/MH8aY1:QZ8fhwk/3mNMLTurL
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01562U.BMP
|
MD5:
8034c5dfc6b379828ab57f4885fda999
SHA1:
035cdaafaa2ec3cc6e5fbd9dd4392c13cd5a0eb5
SHA256:
d824abdd57b4375aacc0b782cf33a0e040e649ad4b5ddf20b8eddc2241e21115
SSDeep:
384:XXS2klZyaCVYd1E6QvMLqIwofGUjf8EB/7lMOuoKfajUIj0Rvj624uDqKMLZFguI:WyaCtkT7f8ENeToLj4RugBrTCta
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01607U.BMP
|
MD5:
90807ab90c8d73a025d01c70214e185c
SHA1:
20c8b7730bf4253df10339b08a9dd72f5254ab72
SHA256:
42eb24de7e3afdc30266aca0bfa04c0bb624933348e6f383459213831d09845d
SSDeep:
768:f2xwVaHxSo0RYDH3Hqry2BDGiNGRUD+EFc3EoMgYI:fUyaH6YDH3K22BqipbojYI
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01931J.JPG
|
MD5:
5bff4639d6057ce27c8a441f8b4d812e
SHA1:
3e0af5457504e6704b2635d7bde9a7fd12ec0cfc
SHA256:
768ef27b56fe2e90b7dc6129b0e5bfa0b6f9983de0f43db0a5c3b4aaf85af1b8
SSDeep:
768:J4SU0yGoO3INvbTONzVmER57TQD3ZwKfK7n/pi+TCZthuTte:J470Nb3iONYa782iTz3Ixe
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02028K.JPG
|
MD5:
2ce7c14edb6add0a759dbffc1b65c0ce
SHA1:
28e8b8984cd520e8ee5d8c4d3f35498d8db28da2
SHA256:
a18865a019e37b820c24e45cc589dacf6824dc781457dba4c76ffca46c43da33
SSDeep:
384:dtXepP9Lo70+o1gaVtLvpOXen+PVnI44HfWBVl1hVvMT7:DXQo70P1BXLvpOIEVI1HfkhhVE3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02039U.BMP
|
MD5:
9fa2d70b373c5c8857b7b49aeb598643
SHA1:
b3968b3d0247523f2d4e2951bd051d3caca64b17
SHA256:
d6fb52784dd74732d0b6b177f49fe68d3f513287688779a997558bbb0b9ccb73
SSDeep:
768:vOQbaIyne5XbmGsfIQ6niZNruxLwoHlXIv:vynEXbmGPHiyxRmv
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02040U.BMP
|
MD5:
a278b776c65a20347876670bd8553d74
SHA1:
ca16242d19dcefaffa0b1e0523e553de37eb1102
SHA256:
93e063e5a88ebaddc901485d3f90162a877f2f9c55aa0b58e8bfc158c7bc69e5
SSDeep:
768:gXmG2ZkHcMtx8/CSWsNre0vcufcm406tDQf/JKKS/lE7SfO/h:M1qKSDNS0tfr4TFQf/JVS/lE7Sfq
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG
|
MD5:
1cb0b7ae12350c6d8779de657ab36976
SHA1:
be2038a7e3ebf0927eb2822d1314af46f47177aa
SHA256:
ca11a8e1472b2065d198c3b1c8c4bb65891dcdac8ac469334cd5cae290aca9bc
SSDeep:
768:dp03pQtN2EETUF2lz6J1d6DguPzqUCfy7RadIe:dGQiDUF28fmguPzXCoR9e
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG
|
MD5:
d62c3351573e633239c2873199da4871
SHA1:
c3faa8353b02067fdea926b65a16e1b86deb5483
SHA256:
c148204d8577f5134fc93b4c211e959519ae32b581d06bb8fd0f040e3bfdda74
SSDeep:
384:Ai28IL8+INBS8GuNA5kQ/dQAUvmQafHxX2ko2BIm:AitILMG0A5kPAUvultVIm
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF
|
MD5:
c5e67fe1a76c6b1d20c395b393b6969a
SHA1:
b2fdb761999c4b0049f64314f68d929e602f0e4e
SHA256:
5219be8698d17eaca80237c6e6338a88330794efb8ca435e3cf795d2d496dec7
SSDeep:
96:33sfr+HSbD+P17ASFIGTeZ7ut7zxdctrBIJEHskhti:3urBe1YG87c7X0r6WHskhti
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG
|
MD5:
b2394dfa28d00e5307a74109359ea989
SHA1:
5902d4b57d7a54103e25ff525410c7f1e6fbe433
SHA256:
f9f2f911ade1acb282873493e5ac24665e9ed6ae991c11a81d95371d47cadf76
SSDeep:
384:+61vVExA7IwLRZCASXvPAyvEiwXv0QAQuFozZxxPh3NyiZggwFfcNUy+HJE+NE5:+wvmxA7puFXvPVE9f0QnuEZxXdyiu5yj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF
|
MD5:
1832aeedc16de5631519f9b0a004715c
SHA1:
eebdbe5f4d0967b4510be696656c5008d9812e1b
SHA256:
86fd709196ccbfec6787dfa7875030808900e0c81f38ff2107f8944980078669
SSDeep:
384:ACYWeZJlL0b0+wtSZUAKZjrPpaCPQI2o6Dhzaa9mhE+ofWd:ACYWAlYb0+4ZjrI1oYhzTmS+ay
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01035U.BMP.Hacker zasifroval zaplat.crypt
|
MD5:
09438ee6248ce52ae136450cd37b99a6
SHA1:
371590709787cb0bdc33e88b45bbe8ad4dfc2334
SHA256:
75005ea6adc76c40356f50320d3843bd6dc0b18bee4723afd521c270d3c90c9c
SSDeep:
384:Ri9DkcOEeiyvKJERccFyvYJbvbZSFWeeV2u2KIP:RrcOwi5RNFyQrbZSFvwSBP
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Boot\memtest.exe
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Benioku.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Benioku.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Berime.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Berime.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\IrakHau.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\IrakHau.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leame.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leame.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeesMij.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeesMij.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leggimi.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leggimi.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeiaMe.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeiaMe.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Liesmich.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Liesmich.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Lisezmoi.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Lisezmoi.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Llegiu-me.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Llegiu-me.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LueMinut.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LueMinut.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMe.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMe.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCS.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCS.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCT.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCT.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCZE.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCZE.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHRV.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHRV.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHUN.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHUN.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeJ.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeJ.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeK.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeK.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMePOL.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMePOL.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUM.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUM.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUS.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUS.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeSKY.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeSKY.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeUKR.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeUKR.htm.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroBroker.exe
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroBroker.exe.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32Info.exe
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32Info.exe.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroTextExtractor.exe
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroTextExtractor.exe.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Eula.exe
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Eula.exe.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NLD\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NLD\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\PTB\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\PTB\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SKY\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SKY\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SLV\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SLV\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\license.html
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\license.html.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\LogTransport2.exe
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\LogTransport2.exe.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\bl.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\bl.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\br.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\br.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\create_form.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\create_form.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_all.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_all.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\end_review.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\end_review.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\info.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\info.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\pdf.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\pdf.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_email.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_email.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\rss.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\rss.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tl.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tl.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tr.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tr.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\trash.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\trash.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\warning.gif
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\warning.gif.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf.Hacker zasifroval zaplat.crypt
|
-
|
Access, Create
|
|
|
For performance reasons, the remaining 6826 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|