50acad3a...d011 | Grouped Behavior
Logo
Try VMRay Analyzer
VTI SCORE: 91/100
Target: win7_32_sp1 | exe
Classification: Trojan, Ransomware

50acad3ad48ff10b990c2af3f4fc41068b3739e5ae020531887cb081ed92d011 (SHA256)

31d65e315115c823f619a381576984f8.exe

Windows Exe (x86-32)

Created at 2018-05-29 20:33:00

...

Notifications (1/1)

The operating system was rebooted during the analysis because the sample installed a startup script or application for persistence.

Grouped Sequential

Monitored Processes

Process Graph

Process Graph Legend
Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x998 Analysis Target High (Elevated) 31d65e315115c823f619a381576984f8.exe "C:\Users\EEBsYm5\Desktop\31d65e315115c823f619a381576984f8.exe" -

Behavior Information - Grouped by Category

Process #1: 31d65e315115c823f619a381576984f8.exe
9840 16
»
Information Value
ID #1
File Name c:\users\eebsym5\desktop\31d65e315115c823f619a381576984f8.exe
Command Line "C:\Users\EEBsYm5\Desktop\31d65e315115c823f619a381576984f8.exe"
Initial Working Directory C:\Users\EEBsYm5\Desktop\
Monitor Start Time: 00:00:26, Reason: Analysis Target
Unmonitor End Time: 00:02:36, Reason: Terminated by Timeout
Monitor Duration 00:02:10
OS Process Information
»
Information Value
PID 0x998
Parent PID 0x608 (c:\windows\explorer.exe)
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username CRH2YWU7\EEBsYm5
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 99C
0x 9A8
Region
»
Name Start VA End VA Type Permissions Monitored Dumped YARA Actions
private_0x0000000000010000 0x00010000 0x0002ffff Private Memory Readable, Writable True False False -
pagefile_0x0000000000010000 0x00010000 0x0001ffff Pagefile Backed Memory Readable, Writable True False False -
private_0x0000000000020000 0x00020000 0x00020fff Private Memory Readable, Writable True False False -
pagefile_0x0000000000030000 0x00030000 0x00033fff Pagefile Backed Memory Readable True False False -
pagefile_0x0000000000040000 0x00040000 0x00040fff Pagefile Backed Memory Readable True False False -
locale.nls 0x00050000 0x000b6fff Memory Mapped File Readable False False False -
imm32.dll 0x000c0000 0x000dcfff Memory Mapped File Readable False False False -
private_0x00000000000c0000 0x000c0000 0x000c0fff Private Memory Readable, Writable True False False -
private_0x00000000000d0000 0x000d0000 0x000effff Private Memory Readable, Writable True False False -
private_0x0000000000110000 0x00110000 0x0020ffff Private Memory Readable, Writable True False False -
pagefile_0x0000000000210000 0x00210000 0x002d7fff Pagefile Backed Memory Readable True False False -
31d65e315115c823f619a381576984f8.exe 0x002e0000 0x00324fff Memory Mapped File Readable, Writable, Executable True True False
...
pagefile_0x0000000000330000 0x00330000 0x00430fff Pagefile Backed Memory Readable True False False -
private_0x0000000000480000 0x00480000 0x0048ffff Private Memory Readable, Writable True False False -
private_0x00000000004b0000 0x004b0000 0x005affff Private Memory Readable, Writable True False False -
sortdefault.nls 0x005b0000 0x0087efff Memory Mapped File Readable False False False -
pagefile_0x0000000000880000 0x00880000 0x0147ffff Pagefile Backed Memory Readable True False False -
private_0x0000000001480000 0x01480000 0x0160ffff Private Memory Readable, Writable True False False -
private_0x0000000001480000 0x01480000 0x0159ffff Private Memory Readable, Writable True False False -
private_0x0000000001480000 0x01480000 0x014dffff Private Memory Readable, Writable True False False -
private_0x0000000001480000 0x01480000 0x014fffff Private Memory Readable, Writable True False False -
private_0x0000000001560000 0x01560000 0x0159ffff Private Memory Readable, Writable True False False -
private_0x00000000015d0000 0x015d0000 0x0160ffff Private Memory Readable, Writable True False False -
private_0x0000000001610000 0x01610000 0x017effff Private Memory Readable, Writable True False False -
private_0x0000000001610000 0x01610000 0x0172ffff Private Memory Readable, Writable True False False -
private_0x0000000001610000 0x01610000 0x016affff Private Memory Readable, Writable True False False -
private_0x0000000001720000 0x01720000 0x0172ffff Private Memory Readable, Writable True False False -
private_0x00000000017f0000 0x017f0000 0x018effff Private Memory Readable, Writable True False False -
rasadhlp.dll 0x6f850000 0x6f855fff Memory Mapped File Readable, Writable, Executable False False False -
api-ms-win-core-synch-l1-2-0.dll 0x72db0000 0x72db2fff Memory Mapped File Readable, Writable, Executable False False False -
fwpuclnt.dll 0x73fe0000 0x74017fff Memory Mapped File Readable, Writable, Executable False False False -
winnsi.dll 0x74120000 0x74126fff Memory Mapped File Readable, Writable, Executable False False False -
iphlpapi.dll 0x74130000 0x7414bfff Memory Mapped File Readable, Writable, Executable False False False -
nlaapi.dll 0x74240000 0x7424ffff Memory Mapped File Readable, Writable, Executable False False False -
winrnr.dll 0x74880000 0x74887fff Memory Mapped File Readable, Writable, Executable False False False -
pnrpnsp.dll 0x74890000 0x748a1fff Memory Mapped File Readable, Writable, Executable False False False -
napinsp.dll 0x748c0000 0x748cffff Memory Mapped File Readable, Writable, Executable False False False -
wshtcpip.dll 0x754b0000 0x754b4fff Memory Mapped File Readable, Writable, Executable False False False -
dnsapi.dll 0x75820000 0x75863fff Memory Mapped File Readable, Writable, Executable False False False -
mswsock.dll 0x75960000 0x7599bfff Memory Mapped File Readable, Writable, Executable False False False -
kernelbase.dll 0x75f70000 0x75fb9fff Memory Mapped File Readable, Writable, Executable False False False -
kernel32.dll 0x761d0000 0x762a3fff Memory Mapped File Readable, Writable, Executable False False False -
imm32.dll 0x762b0000 0x762cefff Memory Mapped File Readable, Writable, Executable False False False -
nsi.dll 0x762d0000 0x762d5fff Memory Mapped File Readable, Writable, Executable False False False -
sechost.dll 0x762e0000 0x762f8fff Memory Mapped File Readable, Writable, Executable False False False -
lpk.dll 0x765f0000 0x765f9fff Memory Mapped File Readable, Writable, Executable False False False -
advapi32.dll 0x76700000 0x7679ffff Memory Mapped File Readable, Writable, Executable False False False -
usp10.dll 0x773f0000 0x7748cfff Memory Mapped File Readable, Writable, Executable False False False -
ws2_32.dll 0x77510000 0x77544fff Memory Mapped File Readable, Writable, Executable False False False -
rpcrt4.dll 0x77550000 0x775f0fff Memory Mapped File Readable, Writable, Executable False False False -
msvcrt.dll 0x77720000 0x777cbfff Memory Mapped File Readable, Writable, Executable False False False -
user32.dll 0x77ad0000 0x77b98fff Memory Mapped File Readable, Writable, Executable False False False -
msctf.dll 0x77ba0000 0x77c6bfff Memory Mapped File Readable, Writable, Executable False False False -
gdi32.dll 0x77c80000 0x77ccdfff Memory Mapped File Readable, Writable, Executable False False False -
apisetschema.dll 0x77e80000 0x77e80fff Memory Mapped File Readable, Writable, Executable False False False -
ntdll.dll 0x77ec0000 0x77ffbfff Memory Mapped File Readable, Writable, Executable False False False -
pagefile_0x000000007f6f0000 0x7f6f0000 0x7f7effff Pagefile Backed Memory Readable True False False -
pagefile_0x000000007ffb0000 0x7ffb0000 0x7ffd2fff Pagefile Backed Memory Readable True False False -
private_0x000000007ffda000 0x7ffda000 0x7ffdafff Private Memory Readable, Writable True False False -
private_0x000000007ffde000 0x7ffde000 0x7ffdefff Private Memory Readable, Writable True False False -
private_0x000000007ffdf000 0x7ffdf000 0x7ffdffff Private Memory Readable, Writable True False False -
Created Files
»
Filename File Size Hash Values YARA Match Actions
c:\autoexec.bat.aurora 0.02 KB MD5: af8abd195aa4efc31e1d429e81e3ce6d
SHA1: 25ae3fe2097ba7e33fb4bb2680c74a370c79a9fb
SHA256: 22ce7a9ed08bb6b8846d3e305b8885153f587b40ceed4eb9ecc646cfc78f2df0 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\cat\adobeid.pdf.aurora 71.99 KB MD5: cec5801f1457245aeabf8265a92cbc71
SHA1: 67dd121f1685dd3f218047095c60434d5720c289
SHA256: f0b4f9e5bcb031cf132e99cf8ee8d5dd4b327be40d6513d10e055c71b5debe04 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\cat\defaultid.pdf.aurora 69.38 KB MD5: 6b3d252e1146b7e788f336512a7f6d35
SHA1: 696f545792860bfe544f970ca6d8fe6726b26310
SHA256: 72e118b9a12115ee8e7aad9693e60abb7989efacb68e97f4fa15bf6fa74e5e23 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\chs\adobeid.pdf.aurora 131.19 KB MD5: 4caec7fdccc269bf63c1aae8f61e0243
SHA1: a11fb0ff3b510311ecfc1dd54813c17310b0ba36
SHA256: b48acb0c73d208add740cc513a6ebf360ce9bd9f885a192bfdb4d09b1b0d8c1d 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\chs\defaultid.pdf.aurora 129.92 KB MD5: 513a507243f1f68379f172d968a79189
SHA1: 37c3b16655db1e9aa566f86164b299af182ab9a3
SHA256: 75174d6eace95c5d816072cbfef28bb59cbc9c879827a58b8bf672e0650f7127 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\cht\adobeid.pdf.aurora 21.53 KB MD5: 7aed084a3725c570533f26262d7fd711
SHA1: cc55b629661191b4bb38f8ea43cd184e3b634b70
SHA256: d87f051c152bd86b90819e5a187f357521aa26625e93c0478cfde15451dd3819 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\cht\defaultid.pdf.aurora 20.26 KB MD5: 9b95e8a57ae901fb2c8ae182c72748eb
SHA1: 49fe2ccc2012c28340a8603d24b53b7291e51fd0
SHA256: fb122db6de64d67b1c0ecb6f374105519079c5816921bd44820e0326381c77ac 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\cze\adobeid.pdf.aurora 88.08 KB MD5: 5421959ff784772201f01680888bf7c4
SHA1: 1183d42e0c78ff60243058fcd188a6e43798c485
SHA256: e02426b870f6ba6b2236bbd9a5fae74501f543d8ca297c3d899edc2081b8e634 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\cze\defaultid.pdf.aurora 85.42 KB MD5: c14db407e4ef0ced232c25647bfe1b11
SHA1: 860526c3eb4beaa952bb93c1d9b18494e6b5f4ad
SHA256: e33fa9ada6e141a19737c23bae1ae3cec7729ba048316ecbe2206d88f486f4f2 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\dan\adobeid.pdf.aurora 65.73 KB MD5: cc40dcc74a3ea8e19dc12ab9fc8e81b7
SHA1: 1f0eabf4a847eff5c9ead802cfdfd44a929f3e53
SHA256: d8163b2a51cd10a99e85e4950f3d4d6fcb8445fc212a9ad69e78bbd8b0d219af 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\dan\defaultid.pdf.aurora 64.45 KB MD5: e57afe69b7cb7bc591c7ede6eb6bbd76
SHA1: bd8d853bfc59c6a18971b512656c96f63a86c281
SHA256: 010733cdf5b42438a902ca4425be867d2ae422d58cdcb5fe7a33bb73d301384a 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\deu\adobeid.pdf.aurora 65.71 KB MD5: 12ac3f375d03316c609ba8d5e5f285c6
SHA1: 2ce463c7885aae7761c7e7eecb357bbc149fcbb1
SHA256: 607ee932ef7f23f50211b3d466acc4072a4224e7d41732ed555a942ddb1162c9 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\deu\defaultid.pdf.aurora 64.43 KB MD5: a581e2b371ddd1028c24dfb9bdd5e291
SHA1: 2d81db1231a8bbd95d05e8f972043e18cf03e43d
SHA256: ab86c54f83d8001a2a65a94186436dd65b98c1de5c8be52855dc1a8de31e7d18 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\enu\adobeid.pdf.aurora 80.15 KB MD5: 43fcc120dc3cdf48b9c077685fb0158d
SHA1: 2f46dcef7eb69a12d70927dfb114b10c0c98cb0a
SHA256: fe7043db4fb16a795d771e400d972279b32684ff4a4e6f088622840df36287ec 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\enu\defaultid.pdf.aurora 78.76 KB MD5: 830d8e4819d7defa1d32adc1200d57e1
SHA1: 55eec3f746dfe911714ae5c293dd15c285784695
SHA256: e2d5d41df8b4f009a80ecfd884b5ea379d325050d69ffd71594ca99562b99362 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\esp\adobeid.pdf.aurora 66.46 KB MD5: 8f032f0fd72a0d64100dfc80df9822e1
SHA1: 744743f1d42a1870dc09779f8b2e9e599c41280c
SHA256: 0eaca572da29119da9544c4f37b1a2640bfed2b702cb5d482ca9819d3179aee7 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\esp\defaultid.pdf.aurora 65.19 KB MD5: bb2a5fb73213b339409036f7fd5c7105
SHA1: 5909e601c50808123049f66793818a482bd6efe7
SHA256: 37caeb17967a841947794c8c11375cc845d53f6ad82e9e43c7fe1a2720642227 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\fra\adobeid.pdf.aurora 66.67 KB MD5: 1228f5eace9ec2baf2c786c053b4eb6d
SHA1: 4bc20236a1e3880b27301a8f3cc8e9457d03da92
SHA256: b2b6a2b469de8ec5f7db1a22fcbf23cb213582a3998cf137b1124000c40d6226 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\fra\defaultid.pdf.aurora 65.40 KB MD5: 025a48df2b0d13eb818669c3bf326a47
SHA1: 4c77cc06398197a3043bef67263faf9b9805a420
SHA256: f6cfe126f7f047ea218b94716bbf3afff7f2f42a53c9859d72e3ba3cd9e94245 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\hrv\adobeid.pdf.aurora 16.93 KB MD5: 0705154d653c0a5a1ebc82fc9e07ce4d
SHA1: c419332862504b1b9051f88a1bb6497b453ffa3c
SHA256: 6a72685dee837eadbd35e83e038fcc4f81e9291b1f51d880c39bf41c13709264 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\hrv\defaultid.pdf.aurora 15.65 KB MD5: 0b0fe626ceaee966262deacd0362e6b5
SHA1: 87e6d1e65cfcd892753fe53d56dd695fd6f3c234
SHA256: 6fadd38f0194e7828136348b7f6072aa5406595fe873d770754da8fcbf99296b 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\hun\adobeid.pdf.aurora 88.15 KB MD5: f75a4f05886e50137cc93aa3f544ffc4
SHA1: 58e3222c56e2c10368d985f50ee4313238e07813
SHA256: 33aa971c21d13712f00e3a226b622cecbb286ad49a79042478ba95f27794cda9 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\hun\defaultid.pdf.aurora 87.42 KB MD5: fcca5709f192879340b4ac7879713006
SHA1: 99cecb68f2605102a1c39a455b8616e46b595134
SHA256: 9f1b6a784412b40850df55ef7bebcb44c46517b4661926602affac1851867caa 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\ita\adobeid.pdf.aurora 66.27 KB MD5: 7f8d7f068296059c6370346b2d019644
SHA1: 8016a82a0f14a2f9391f0fe8e3fd4c0de4cdadfd
SHA256: 254b1bcf5f4a6c5fc0eccafb80759ae6b99b85a4470a7fc9809c2b7017b30eb1 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\ita\defaultid.pdf.aurora 64.99 KB MD5: 3e8ed86376d4f72240494f7b95222e4d
SHA1: ab9231009a8d3926b506e1c366be3d54b1d73c6d
SHA256: edacf3e24f646e2abb4589628da768fbb7ebab98aa6ec87352c954f049bf467b 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\jpn\adobeid.pdf.aurora 22.32 KB MD5: 8206051641502e91b8e6eb8bf990974b
SHA1: 647659607ad55bb7c169e2b87bec00f88f6a6e79
SHA256: 418d1e7551b939d9df443df896dd94a4d9ad4513bf0635a0b98fd10332730485 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\jpn\defaultid.pdf.aurora 21.00 KB MD5: 22b251dc296b4ff4b094f0657c3049b9
SHA1: 826c08cc0e340436a52045ba8970349374ee5e59
SHA256: eb0d912053727edeb04197d121c16218cc0b5a4822403b1dd1ec4e2e6d65d3fd 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\kor\adobeid.pdf.aurora 22.29 KB MD5: 605de5ce4c4d0249424d5d51412a7c85
SHA1: 779aa1fe6d1b6f66e4ff22ae52b51d056ab3908d
SHA256: 634df063539d92f81145a95c454b465b69eb7f1932983cd3fbacd41278815a7a 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\kor\defaultid.pdf.aurora 21.02 KB MD5: fd0c5260c38ddc961c80321bd72e08f8
SHA1: 30de97deba3d7c49c036e2b2c2955ef94b791185
SHA256: 7a7eae9fcf8def8a2f290e33abc58453cc71d52212b01f41cf0c7a9f166ff180 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\nld\adobeid.pdf.aurora 66.29 KB MD5: 240850ca6e028c1bac78995bc1c98d40
SHA1: f31f84c09e5f17557168e569d383f386a940c08c
SHA256: d78de970b3822e8735d84b15de49948a7e52fe0ccd877d9a78a94fa977e288f3 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\nld\defaultid.pdf.aurora 65.00 KB MD5: c30784e891b897db395027e00a733335
SHA1: c3a52c3376dfb3d3c0b30c030fe45f11903e98ba
SHA256: a46fb8d9959d46e8b55a4f840d8621935bd78129936c4e0165529f3b478eadad 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\nor\adobeid.pdf.aurora 66.33 KB MD5: 4a94ce0422a7ef010278635798fbbb49
SHA1: ac434a6df54477b291be21049ff54a194e48c562
SHA256: 55a5da94b6eba1d35f8ba865e3a4c2809eb349ee89354031c79314150eda4398 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\nor\defaultid.pdf.aurora 65.06 KB MD5: 725a15e628883abbc00833ad04518bac
SHA1: d4a1695d9627f8d023f96e14a882f38e2b90a331
SHA256: 1b1563ab114daf26bd65251729e4c544f92aed9945ad3b990f77b64a34e6a930 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\pol\adobeid.pdf.aurora 155.16 KB MD5: a9237be63c5ff33be8bcd8520f7c8071
SHA1: 1b093893489dabaf1def63bc3e99bf365cd7311d
SHA256: 070d4f1eda949c2cd878205b5abb346409276aef5bf26b25024140300117ed5e 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\pol\defaultid.pdf.aurora 151.32 KB MD5: a71040ef83fea08cb17b3eef85fc24b1
SHA1: 929e20509e08f4d21fc5c60b4b7cf26125f9b7e3
SHA256: 7f4c22819db9c39886bff00877b888d842c85b9f5a91c48355d6dc57eaa42d91 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\ptb\adobeid.pdf.aurora 69.04 KB MD5: 1253755206bdd758ac10ad9a133b24ab
SHA1: 196b028b77035f0b9627ae363ff6c9333dda3d1d
SHA256: 97aa41879e91ee80776ba03869a1025045e9fee804f4f1e11f13339eaab4811b 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\ptb\defaultid.pdf.aurora 67.76 KB MD5: 713f468261d23841c37a37e232e3265e
SHA1: 48169b5e12bb98e3f3f0424f2ad9f127a1fb7b24
SHA256: 1f42a0d99acf077bc48752e514e138384add9d3eca21f7774e545fe27cc86bc6 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\rum\adobeid.pdf.aurora 22.14 KB MD5: 574e2c86f07cd867be63f2aa6cc950b3
SHA1: 16ad4b77b3c4f2f9774af27e223cbb2f2ea1ba68
SHA256: 8e4908cee2045745cc6495a6b6621fa72deb2daa95b599bef6dc24c89d27287b 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\rum\defaultid.pdf.aurora 22.98 KB MD5: ff32ab860bf92d084590f0321dcef4a7
SHA1: ca079414da455f3f621fb369c845a3c33f79e865
SHA256: e4676f7221e9fd23daab3193bc98c69ef9951a109a2637c60541f7d8b028b90d 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\rus\adobeid.pdf.aurora 120.11 KB MD5: d49ab17c5ee04fcac6c35384b2d940c6
SHA1: 4f5d8a65b1048a08de998b4d78e8c99fa9854901
SHA256: 573ee65d235c0b56c733df20e91ac641dd9457c2ff576c30acb888898c5456dd 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\rus\defaultid.pdf.aurora 116.37 KB MD5: 69da58b7832b44e051513a5cd4ab95a2
SHA1: bfeebbb9951dfe57ec3930be1c73bfb864fd8af7
SHA256: f96c06441af2de6108457b2375e6c945ad6a6a272341324fe5f81badc2d3e5d1 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\sky\adobeid.pdf.aurora 88.50 KB MD5: a7e9c020b1e9c292bb41f20b65541851
SHA1: e953ddbb65943f5794eb18f11281a0e280237e27
SHA256: 39a45effe706c3d9528f94e31ce584157bc18b4596fd80b18e141607afc13b1d 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\sky\defaultid.pdf.aurora 79.32 KB MD5: f86938e667613c720df2c0c5ab3af9fd
SHA1: 4bf7b08ce9efa5c6b6d1c3136896fe2a130c5ddd
SHA256: f1db81c9e4584ca9de2bbb1153a78557bdac954f069d7ca4a4fc4cb12297e843 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\slv\adobeid.pdf.aurora 24.30 KB MD5: 48c1ae4ab4f2e251ecc687deddefc964
SHA1: 96d26be96217f46e73b40da426c296af239d6593
SHA256: 05ea549cc118501cc89b028ce71904c30a9e1b569e0ee7e2583179bd33cccb98 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\slv\defaultid.pdf.aurora 22.67 KB MD5: dcb52941edac11dd034e559e1f31d61a
SHA1: ff7d65606ef4d0366d7739905b76058794158b47
SHA256: eafa8608f03e8c0004e6801eb7d021df63b03fb679ce15278456f320b6d38483 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\suo\adobeid.pdf.aurora 65.97 KB MD5: 185c6fc19f2574acd5f5fb70c249b303
SHA1: e30535903181da70c1629dc3f9022cc96e947be6
SHA256: 8ec481118fddff0827cda3d65bd11d824329d144b4b0ae75fb750dead2112cd2 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\suo\defaultid.pdf.aurora 64.70 KB MD5: 49aa852759879e3027e01dadf2f8ade4
SHA1: 3cf382f6ef37770ef7433f293dd3ea1e39d3405e
SHA256: 4bbd912ff48e731777018be16bdbe913d43a6a24b410ef3da572f9815fca72a7 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\sve\adobeid.pdf.aurora 73.65 KB MD5: ba3d7f0b1e41d2ccd9dfcb135901183d
SHA1: f4939d918568dfc04f1f0755eb369865fc518444
SHA256: 461f66580f4e5c56ada9a94f34d4a2b7d46b3ebe150271208e1d396c49dc3e5c 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\sve\defaultid.pdf.aurora 71.05 KB MD5: 8289dadd58adbb2522aa4da652c0fff5
SHA1: ae1763350fae3b1df3092d144be900a236625e2a
SHA256: 8998b9f87d919f13c2f3f4651123c01d0f6c8056af66eec434fafda6f9eb1151 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\tur\adobeid.pdf.aurora 295.42 KB MD5: 653c12c2049038dca500ac44a39cddeb
SHA1: 616753a527131bed8bdd4e0ed85be0f2682dc662
SHA256: 130cef18aa9b1f6198dd3b225b7ce3601a9cd271a58939484ed5357dac2e13b2 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\tur\defaultid.pdf.aurora 291.39 KB MD5: da5e6c2d63db4def27a0b6b4f427d2ae
SHA1: 845aee5fd9bcc28f1b567fa867bff5122a2a4316
SHA256: 08faea6b22cc893bc8f54a95674d35bd750e3c06ceecd635e15ae5720146ac52 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\ukr\adobeid.pdf.aurora 101.99 KB MD5: 3f2c49dea9bf41df60696aab5e643d90
SHA1: c122bd9da47a13d223b38c9de22c7e6a7341b9cc
SHA256: dd148da20855dc4fad0d2ac494b53e7a174cce9fce53af6bafa38c334184aa1e 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\ukr\defaultid.pdf.aurora 291.28 KB MD5: 439573643e414337e736ec5fbddf3bce
SHA1: 1ff9528f06294a8a5300dcf64521c1bec2f1ead3
SHA256: cc680987db32fe5a449d7834681b29c0cacafbc6701a2df9c0431f88b55ac93d 		False
...
c:\program files\adobe\reader 10.0\reader\pdfsigqformalrep.pdf.aurora 457.23 KB MD5: c3542d58350cea4d73cb5ba744dfed26
SHA1: 52969c1cbf8c47c57b22ca7962878ae9b7dfc2bd
SHA256: 5dd3b6ed3800c0b7bc0f7afcd484e0347ab569ccd76ee8a1ac57f2527141fbe3 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cat\dynamic.pdf.aurora 51.46 KB MD5: 3f4d8abea89126ddd1ddf0953df7afcd
SHA1: 59efaffe5a69c0abee77f1fdc5970ce4dbc3ae50
SHA256: 9ad91fce052268ae7e4ab1ece8865d001fbc1abbe8db7230ce611b2a26c198b0 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\esp\dynamic.pdf.aurora 51.46 KB MD5: 3f4d8abea89126ddd1ddf0953df7afcd
SHA1: 59efaffe5a69c0abee77f1fdc5970ce4dbc3ae50
SHA256: 9ad91fce052268ae7e4ab1ece8865d001fbc1abbe8db7230ce611b2a26c198b0 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\euq\dynamic.pdf.aurora 51.46 KB MD5: 3f4d8abea89126ddd1ddf0953df7afcd
SHA1: 59efaffe5a69c0abee77f1fdc5970ce4dbc3ae50
SHA256: 9ad91fce052268ae7e4ab1ece8865d001fbc1abbe8db7230ce611b2a26c198b0 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cat\faces.pdf.aurora 34.29 KB MD5: 7f717f048ccd24c19045c8103ddc471d
SHA1: 231f67b47652110ff2ca79c097a7500f14c3fd6a
SHA256: eb04488f7d67b922b9972048125dfe165c7310e6f1c1caa65851fbb1fcf7a7f6 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\euq\faces.pdf.aurora 34.29 KB MD5: 7f717f048ccd24c19045c8103ddc471d
SHA1: 231f67b47652110ff2ca79c097a7500f14c3fd6a
SHA256: eb04488f7d67b922b9972048125dfe165c7310e6f1c1caa65851fbb1fcf7a7f6 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cat\pointers.pdf.aurora 48.13 KB MD5: 24e125ff899af780681b00a16b730b31
SHA1: 23e5cea20ccc3b5d119fcfed69f882b43fa35d81
SHA256: fb8bffcb0fdb4459a06193d7ebf03780278ef8a61af85333b6347348cce35e45 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\euq\pointers.pdf.aurora 48.13 KB MD5: 24e125ff899af780681b00a16b730b31
SHA1: 23e5cea20ccc3b5d119fcfed69f882b43fa35d81
SHA256: fb8bffcb0fdb4459a06193d7ebf03780278ef8a61af85333b6347348cce35e45 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cat\signhere.pdf.aurora 35.15 KB MD5: 12603203dbb6dde6ae199545a80e8bdf
SHA1: 66279660d57aeeac2ae67691f436460cecaf9ce2
SHA256: 3614d2063624c8bd265763699ffaae6d68f042895bef26f69258c13ee5f8e5db 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\esp\signhere.pdf.aurora 35.15 KB MD5: 12603203dbb6dde6ae199545a80e8bdf
SHA1: 66279660d57aeeac2ae67691f436460cecaf9ce2
SHA256: 3614d2063624c8bd265763699ffaae6d68f042895bef26f69258c13ee5f8e5db 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\euq\signhere.pdf.aurora 35.15 KB MD5: 12603203dbb6dde6ae199545a80e8bdf
SHA1: 66279660d57aeeac2ae67691f436460cecaf9ce2
SHA256: 3614d2063624c8bd265763699ffaae6d68f042895bef26f69258c13ee5f8e5db 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cat\standard.pdf.aurora 186.90 KB MD5: 7e73cdb8d6cbf2e5554b5c169b414de6
SHA1: 0a019ac58cea5fdec3a6974aa107edcf4bef4877
SHA256: 9b450a66b9fd56a1e171111a4e7ec0b4a79a68c75b2dd97338a91865ee4633cc 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\euq\standard.pdf.aurora 186.90 KB MD5: 7e73cdb8d6cbf2e5554b5c169b414de6
SHA1: 0a019ac58cea5fdec3a6974aa107edcf4bef4877
SHA256: 9b450a66b9fd56a1e171111a4e7ec0b4a79a68c75b2dd97338a91865ee4633cc 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cat\standardbusiness.pdf.aurora 618.14 KB MD5: 33a737578c8c89ecfec882d61569601e
SHA1: 96f19b1c317958d6b80ecd9ae9a0e8e1350aae28
SHA256: 7899a3859b1163322158bc43a8a40200bc4342a5579cb7f86ea76f9f60a3c7b3 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\esp\standardbusiness.pdf.aurora 618.14 KB MD5: 33a737578c8c89ecfec882d61569601e
SHA1: 96f19b1c317958d6b80ecd9ae9a0e8e1350aae28
SHA256: 7899a3859b1163322158bc43a8a40200bc4342a5579cb7f86ea76f9f60a3c7b3 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\euq\standardbusiness.pdf.aurora 618.14 KB MD5: 33a737578c8c89ecfec882d61569601e
SHA1: 96f19b1c317958d6b80ecd9ae9a0e8e1350aae28
SHA256: 7899a3859b1163322158bc43a8a40200bc4342a5579cb7f86ea76f9f60a3c7b3 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\chs\dynamic.pdf.aurora 79.51 KB MD5: 8dffbb1a909be24155d48b2c62944753
SHA1: 2f9ff6ca825c4c4ffc4305a5429916888ff10f48
SHA256: 661bb2d8b5dfc4dcacd6634c512fc89335782c91d2b2e41d817728107fd51160 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\chs\hanko.pdf.aurora 43.89 KB MD5: fc46eac51a00c482fda6dc69d02cf138
SHA1: 5f611392776d1452674a743ab76e9cf364d1a530
SHA256: c36c388f4233133f28a46ba7bb1e170b8123d511558a89569446b15e3b7d4021 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\chs\signhere.pdf.aurora 48.17 KB MD5: 3366e57070758138268f75067fcd83ab
SHA1: f8f750221b4c79a46a28d4ef522f249edb06dc65
SHA256: 7fd1575c870575d190b8989018d7a65c3c83d73cbcb0b1dca02510a9c14f3c1a 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\chs\standardbusiness.pdf.aurora 133.95 KB MD5: 4b69611518e8b0269cb8619a0080ad58
SHA1: f684485cef5869d865195f36fc1878d0f4f7f0a9
SHA256: 23a2ac972f52b82035e91b499a96c95df222b00db5d77a4bee5e8d1f826f4101 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cht\dynamic.pdf.aurora 76.70 KB MD5: be983d83cae9bcaa53194c248c636949
SHA1: bec457f448cc1b4f464d590699e503dd72005feb
SHA256: af55d4ae46a50e96624575f3f8086f5c5703922615fb46e64a092c37aece645e 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cht\hanko.pdf.aurora 45.94 KB MD5: f38dc9332b9c330f0f376eb671d0d204
SHA1: 23e2bfae726a2148e3e6c8f19954ccca4625c387
SHA256: 2758d82269f372e2e4abf1f2d01da24d0dc90c12c467b5ddb0092f5b49d338eb 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cht\signhere.pdf.aurora 70.04 KB MD5: 0ee374b62457199515ec611bd7541e64
SHA1: fd213de10220d69d208c9358d68548d4dd66997e
SHA256: 8890257240432a40a3f96ffb9081d8d306e1d9e2e5f4d9d1bbdf94477a4d0c1c 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cht\standardbusiness.pdf.aurora 200.70 KB MD5: b0a34ebd7b0ff883a0a89204b34abde5
SHA1: 56a420faf770c060d04158caea17c9252cc20c45
SHA256: 74afd1512e379a0def510ad1801d6afee17ce13d26e4483f7411a73ce72a7dbb 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cze\dynamic.pdf.aurora 31.25 KB MD5: 5286a5369fb83744b0bfe72597384e81
SHA1: 4ed5a9950a0b03505b9f927e3c2c431f504cfe22
SHA256: ce0c1b6e0bb452ab00394f410fcf002d287b48e6337b9dc1a514c1a31d9c3f6f 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cze\faces.pdf.aurora 33.86 KB MD5: 77366525f3da8166f7e0ce15820f3c49
SHA1: 3203d774f8644448221e6204df58a8d184ae4024
SHA256: 498b1e6bc99417d42fc8376cee31c012e9905d0456dfff5f259c34b4d26e2a0c 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cze\pointers.pdf.aurora 45.96 KB MD5: 7a8a4e41cfd3656025438cff92bd6f94
SHA1: 31d123f6fccf8da121a9e37303c3d23ccf24cedc
SHA256: 7be42bf334fe48c6a62acbfed40b0e697d57c97bdf49961f3304badb924b91e3 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cze\signhere.pdf.aurora 329.82 KB MD5: cf0317be724f5b19b7d5acbe19398bde
SHA1: 3516d73a64a4914466b041d5cbeeccf5a85a815e
SHA256: 6e5c5f806625efaefba41c343c2b57b3e2cbeafeb20a50138dd47211cd0ff901 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cze\standard.pdf.aurora 176.81 KB MD5: a84166067704c0d3f4341d156bb99c62
SHA1: 9f2ca382ff54a120677a2e04201cded7e95fbc16
SHA256: f051650ab99eb2acb7fa19c40d0ba9224769f1dea2b5db73137566e64d25feb8 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cze\standardbusiness.pdf.aurora 87.12 KB MD5: 98e78d255da5c893683e7dd4b26d01ce
SHA1: 4522d16e59253af45560622ae73b3ff6cc51847f
SHA256: 16586c9f55b33e6531c9d93c858c49f062adf6f8f07a3ec9d389770614d8bcbe 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\dan\dynamic.pdf.aurora 57.71 KB MD5: db4b08108d77daf1be2c8e134ad0b5cd
SHA1: 2607e509d8719c9456f332756948c8554957395a
SHA256: bd85c7708d2ea6849bcae565a15fda9d5bd49605bcc2d1ad66f8a9090b9b73d1 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\dan\signhere.pdf.aurora 36.76 KB MD5: 8c5e97105cf2ad594aabca7dfa65e415
SHA1: dc4d8dc6b78c7c8a379646a5663e957d001dff02
SHA256: 3abda43a75eb7d5bad3cc63517f934d11e68e4101406e398d4bef175a13e111b 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\dan\standardbusiness.pdf.aurora 97.83 KB MD5: dad704476bf0c4bb3a326a7aca466583
SHA1: ba122fdbfe2bdcff131f89e73a1a6a733df574b6
SHA256: e47d72d4f195a2725b0b79f6e9c9878763a7302858a934fcccc643fe5100de69 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\deu\dynamic.pdf.aurora 50.72 KB MD5: f6e6537873d7b573a3da263368d1e980
SHA1: bb251976ab94d43a67124cffb6a06c3e268ad7d4
SHA256: 17da6f275202562260066597ad7fd8089be0a19e9041f393e6b6c0991e29904c 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\deu\signhere.pdf.aurora 40.86 KB MD5: cf54e65f16097d26e0e48cbdfc4bd01f
SHA1: 50e220938ce0f7d639716932bd70c747a8c12f93
SHA256: 3de02af6e3f52a7fd195e972e8643b19b1c01ef49c253df611fddab876f6c791 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\deu\standardbusiness.pdf.aurora 94.19 KB MD5: 6bd5a6ff4849cec039a92dbc4a389ba5
SHA1: e24ede8ca28771eccd01a1e22e0606f5fc3b0db5
SHA256: 9b26b61deb4190dd72f644a11c4872bba43ef57c1aa1d53af1d31126b9b7a958 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\enu\dynamic.pdf.aurora 55.88 KB MD5: cb4d7acb6879c2ad1c043c5c08ff5fd4
SHA1: cc97988ce2e5bb495dfa67c08a7c3665655c6258
SHA256: 40f0e2695542f0e8b0b27f03b8c18bdc79eb619ce8fee8e2bcc9e722b873603b 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\enu\signhere.pdf.aurora 39.77 KB MD5: 1d5cf607bdd77335d3a0017be1d24b13
SHA1: bf8847cbe7cfa048969758bb8670722d1c22a4b5
SHA256: 7789ff97151c0a0e58d50e17ae6634ae09ea0201e9249fcdceb97b546a73d63e 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf.aurora 106.21 KB MD5: a33d8f0c170cab564290c7bf5c58cfb2
SHA1: 722cb46901563c667bde249a7c5fb51e11df681b
SHA256: f255f1a9db0b11ed149c92857441c659077514d5a9f37a4fda0a961d6ea88bd7 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\fra\dynamic.pdf.aurora 195.68 KB MD5: 0ff4da7d11386789e126653816d475a1
SHA1: 167a8f5276a76e42a688d4afa54b42b218376fcb
SHA256: 385d57afbb46a1ee316774ffc767af202bc65fbfab726f144a4b7451bbcba41a 		False
...
c:\program files\adobe\reader 10.0\reader\plug_ins\annotations\stamps\fra\signhere.pdf.aurora 39.36 KB MD5: a26a47631072bdf97d7820462684f3bc
SHA1: c7ccc4d8497f5ddff3cc884b02ebd25ba43d8e5e
SHA256: 930435b90398e4e4909897fde426817465355d82e794fbceccb7e5b5979467b8 		False
...
Modified Files
»
Filename File Size Hash Values YARA Match Actions
c:\autoexec.bat 0.02 KB MD5: af8abd195aa4efc31e1d429e81e3ce6d
SHA1: 25ae3fe2097ba7e33fb4bb2680c74a370c79a9fb
SHA256: 22ce7a9ed08bb6b8846d3e305b8885153f587b40ceed4eb9ecc646cfc78f2df0 		False
...
c:\program files\adobe\reader 10.0\reader\idtemplates\cat\adobeid.pdf 71.99 KB MD5: cec5801f1457245aeabf8265a92cbc71
SHA1: 67dd121f1685dd3f218047095c60434d5720c289
SHA256: f0b4f9e5bcb031cf132e99cf8ee8d5dd4b327be40d6513d10e055c71b5debe04 		False
...
Host Behavior
File (9756)
»
Operation Filename Additional Information Success Count Logfile
Create C:\\autoexec.bat desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Get Info C:\\autoexec.bat type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf type = file_type True 1
Fn
Get Info C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf type = file_type True 1
Fn
Open STD_INPUT_HANDLE - True 1
Fn
Open STD_OUTPUT_HANDLE - True 1
Fn
Open STD_ERROR_HANDLE - True 1
Fn
Move C:\\autoexec.bat.Aurora source_filename = C:\\autoexec.bat, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Move C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf.Aurora source_filename = C:\\Program Files\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf, flags = MOVEFILE_COPY_ALLOWED True 1
Fn
Read C:\\autoexec.bat size = 4096, size_out = 24 True 1
Fn
Data
Read C:\\autoexec.bat size = 4096, size_out = 16 True 1
Fn
Data
Read C:\\autoexec.bat size = 4096, size_out = 8 True 1
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Read C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf size = 4096, size_out = 4096 True 249
Fn
Data
Write C:\\autoexec.bat size = 8 True 3
Fn
Data
Write C:\\Program Files\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf size = 8 True 1
Fn
Data
Registry (2)
»
Operation Key Additional Information Success Count Logfile
Create Key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run - True 1
Fn
Write Value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run value_name = MSFEEditor, data = "C:\Users\EEBsYm5\Desktop\31d65e315115c823f619a381576984f8.exe" e, size = 132, type = REG_SZ True 1
Fn
Module (77)
»
Operation Module Additional Information Success Count Logfile
Load api-ms-win-core-synch-l1-2-0 base_address = 0x0 False 2
Fn
Load api-ms-win-core-synch-l1-2-0 base_address = 0x72db0000 True 2
Fn
Load api-ms-win-core-fibers-l1-1-1 base_address = 0x0 False 4
Fn
Load kernel32 base_address = 0x0 False 2
Fn
Load kernel32 base_address = 0x761d0000 True 2
Fn
Load api-ms-win-core-localization-l1-2-1 base_address = 0x0 False 2
Fn
Load api-ms-win-core-string-l1-1-0 base_address = 0x0 False 1
Fn
Load api-ms-win-core-string-l1-1-0 base_address = 0x75f70000 True 1
Fn
Get Handle c:\windows\system32\kernel32.dll base_address = 0x761d0000 True 2
Fn
Get Filename api-ms-win-core-localization-l1-2-1 process_name = c:\users\eebsym5\desktop\31d65e315115c823f619a381576984f8.exe, file_name_orig = C:\Users\EEBsYm5\Desktop\31d65e315115c823f619a381576984f8.exe, size = 260 True 2
Fn
Get Address c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll address_out = 0x0 False 1
Fn
Get Address c:\windows\system32\kernel32.dll function = FlsAlloc, address_out = 0x7622418d True 3
Fn
Get Address c:\windows\system32\kernel32.dll function = FlsSetValue, address_out = 0x762276e6 True 3
Fn
Get Address c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll function = InitializeCriticalSectionEx, address_out = 0x0 False 1
Fn
Get Address c:\windows\system32\kernel32.dll function = FlsGetValue, address_out = 0x76221e16 True 3
Fn
Get Address c:\windows\system32\kernel32.dll function = LCMapStringEx, address_out = 0x7625f72b True 2
Fn
Get Address c:\windows\system32\kernel32.dll function = FlsFree, address_out = 0x76221f61 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = InitializeCriticalSectionEx, address_out = 0x76223879 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = InitOnceExecuteOnce, address_out = 0x76219601 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CreateEventExW, address_out = 0x761d24d8 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CreateSemaphoreW, address_out = 0x7620db8b True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CreateSemaphoreExW, address_out = 0x76202111 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CreateThreadpoolTimer, address_out = 0x7620b009 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetThreadpoolTimer, address_out = 0x77ee89be True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = WaitForThreadpoolTimerCallbacks, address_out = 0x77edc02a True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CloseThreadpoolTimer, address_out = 0x77edc0d2 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CreateThreadpoolWait, address_out = 0x76203f78 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetThreadpoolWait, address_out = 0x77ee8bfb True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CloseThreadpoolWait, address_out = 0x77edb567 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = FlushProcessWriteBuffers, address_out = 0x77f05998 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = FreeLibraryWhenCallbackReturns, address_out = 0x77ed2251 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = GetCurrentProcessorNumber, address_out = 0x77ed28f6 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CreateSymbolicLinkW, address_out = 0x76259aa9 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = GetCurrentPackageId, address_out = 0x0 False 1
Fn
Get Address c:\windows\system32\kernel32.dll function = GetTickCount64, address_out = 0x7620eb4e True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = GetFileInformationByHandleEx, address_out = 0x762138ad True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetFileInformationByHandle, address_out = 0x76208d0f True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = GetSystemTimePreciseAsFileTime, address_out = 0x0 False 1
Fn
Get Address c:\windows\system32\kernel32.dll function = InitializeConditionVariable, address_out = 0x77f19981 True 2
Fn
Get Address c:\windows\system32\kernel32.dll function = WakeConditionVariable, address_out = 0x77f65a7b True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = WakeAllConditionVariable, address_out = 0x77ee45a5 True 2
Fn
Get Address c:\windows\system32\kernel32.dll function = SleepConditionVariableCS, address_out = 0x762018be True 2
Fn
Get Address c:\windows\system32\kernel32.dll function = InitializeSRWLock, address_out = 0x77f19981 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = AcquireSRWLockExclusive, address_out = 0x77f1334e True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = TryAcquireSRWLockExclusive, address_out = 0x77ef1801 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = ReleaseSRWLockExclusive, address_out = 0x77f13324 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SleepConditionVariableSRW, address_out = 0x762023f5 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CreateThreadpoolWork, address_out = 0x762089f2 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SubmitThreadpoolWork, address_out = 0x77ed26a9 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CloseThreadpoolWork, address_out = 0x77ed2111 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CompareStringEx, address_out = 0x7622ebc6 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = GetLocaleInfoEx, address_out = 0x762053a5 True 2
Fn
Get Address c:\windows\system32\kernelbase.dll function = CompareStringEx, address_out = 0x75f7701e True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = EnumSystemLocalesEx, address_out = 0x7625f3cf True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = IsValidLocaleName, address_out = 0x7625f71b True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = AreFileApisANSI, address_out = 0x7625f311 True 1
Fn
System (3)
»
Operation Additional Information Success Count Logfile
Sleep duration = 50 milliseconds (0.050 seconds) True 2
Fn
Get Time type = System Time, time = 2018-05-29 20:33:37 (UTC) True 1
Fn
Environment (2)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 2
Fn
Data
Network Behavior
DNS (2)
»
Operation Additional Information Success Count Logfile
Resolve Name host = host1681251.hostland.pro, address_out = 185.26.122.70 True 1
Fn
Resolve Name host = www.geoplugin.net, address_out = 178.237.36.10 True 1
Fn
TCP Sessions (2)
»
Information Value
Total Data Sent 133 bytes
Total Data Received 0 bytes
Contacted Host Count 2
Contacted Hosts 185.26.122.70:80, 178.237.36.10:80
TCP Session #1
»
Information Value
Handle 0x54
Address Family AF_INET
Type SOCK_STREAM
Protocol IPPROTO_TCP
Remote Address 185.26.122.70
Remote Port 80
Local Address 0.0.0.0
Local Port 49158
Data Sent 94 bytes
Data Received 0 bytes
Operation Additional Information Success Count Logfile
Create protocol = IPPROTO_TCP, address_family = AF_INET, type = SOCK_STREAM True 1
Fn
Connect remote_address = 185.26.122.70, remote_port = 80 True 1
Fn
Send flags = NO_FLAG_SET, size = 94, size_out = 94 True 1
Fn
Data
Receive flags = NO_FLAG_SET, size = 2160308 False 2
Fn
Close type = SOCK_STREAM True 1
Fn
TCP Session #2
»
Information Value
Handle 0x60
Address Family AF_INET
Type SOCK_STREAM
Protocol IPPROTO_TCP
Remote Address 178.237.36.10
Remote Port 80
Local Address 0.0.0.0
Local Port 49159
Data Sent 39 bytes
Data Received 0 bytes
Operation Additional Information Success Count Logfile
Create protocol = IPPROTO_TCP, address_family = AF_INET, type = SOCK_STREAM True 1
Fn
Connect remote_address = 178.237.36.10, remote_port = 80 True 1
Fn
Send flags = NO_FLAG_SET, size = 39, size_out = 39 True 1
Fn
Data
Receive flags = NO_FLAG_SET, size = 2160260 True 4
Fn
Close type = SOCK_STREAM True 1
Fn
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image