Filename
|
Hash
|
Operations
|
Source
|
A:\
|
-
|
Access
|
|
B:\
|
-
|
Access
|
|
C:\
|
-
|
Access
|
|
C:\$Recycle.Bin
|
-
|
Access
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000
|
-
|
Access
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
|
-
|
Access
|
|
C:\Boot
|
-
|
Access
|
|
C:\Boot\BCD
|
-
|
Access
|
|
C:\Boot\BCD.LOG
|
-
|
Access
|
|
C:\Boot\BCD.LOG1
|
-
|
Access
|
|
C:\Boot\BCD.LOG2
|
-
|
Access
|
|
C:\Boot\BOOTSTAT.DAT
|
-
|
Access
|
|
C:\Boot\cs-CZ
|
-
|
Access
|
|
C:\Boot\cs-CZ\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\da-DK
|
-
|
Access
|
|
C:\Boot\da-DK\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\de-DE
|
-
|
Access
|
|
C:\Boot\de-DE\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\el-GR
|
-
|
Access
|
|
C:\Boot\el-GR\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\en-US
|
-
|
Access
|
|
C:\Boot\en-US\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\en-US\memtest.exe.mui
|
-
|
Access
|
|
C:\Boot\es-ES
|
-
|
Access
|
|
C:\Boot\es-ES\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\fi-FI
|
-
|
Access
|
|
C:\Boot\fi-FI\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\Fonts
|
-
|
Access
|
|
C:\Boot\Fonts\chs_boot.ttf
|
-
|
Access
|
|
C:\Boot\Fonts\cht_boot.ttf
|
-
|
Access
|
|
C:\Boot\Fonts\jpn_boot.ttf
|
-
|
Access
|
|
C:\Boot\Fonts\kor_boot.ttf
|
-
|
Access
|
|
C:\Boot\Fonts\wgl4_boot.ttf
|
-
|
Access
|
|
C:\Boot\fr-FR
|
-
|
Access
|
|
C:\Boot\fr-FR\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\hu-HU
|
-
|
Access
|
|
C:\Boot\hu-HU\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\it-IT
|
-
|
Access
|
|
C:\Boot\it-IT\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\ja-JP
|
-
|
Access
|
|
C:\Boot\ja-JP\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\ko-KR
|
-
|
Access
|
|
C:\Boot\ko-KR\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\memtest.exe
|
-
|
Access
|
|
C:\Boot\nb-NO
|
-
|
Access
|
|
C:\Boot\nb-NO\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\nl-NL
|
-
|
Access
|
|
C:\Boot\nl-NL\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\pl-PL
|
-
|
Access
|
|
C:\Boot\pl-PL\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\pt-BR
|
-
|
Access
|
|
C:\Boot\pt-BR\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\pt-PT
|
-
|
Access
|
|
C:\Boot\pt-PT\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\ru-RU
|
-
|
Access
|
|
C:\Boot\ru-RU\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\sv-SE
|
-
|
Access
|
|
C:\Boot\sv-SE\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\tr-TR
|
-
|
Access
|
|
C:\Boot\tr-TR\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\zh-CN
|
-
|
Access
|
|
C:\Boot\zh-CN\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\zh-HK
|
-
|
Access
|
|
C:\Boot\zh-HK\bootmgr.exe.mui
|
-
|
Access
|
|
C:\Boot\zh-TW
|
-
|
Access
|
|
C:\Boot\zh-TW\bootmgr.exe.mui
|
-
|
Access
|
|
C:\BOOTSECT.BAK
|
-
|
Access
|
|
C:\Config.Msi
|
-
|
Access
|
|
C:\Config.Msi\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Access, Write
|
Dropped File
|
C:\Documents and Settings
|
-
|
Access
|
|
C:\MSOCache
|
-
|
Access
|
|
C:\MSOCache\All Users
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi
|
-
|
Access
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml
|
-
|
Access
|
|
C:\MSOCache\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Access, Write
|
Dropped File
|
C:\PerfLogs
|
-
|
Access
|
|
C:\PerfLogs\Admin
|
-
|
Access
|
|
C:\PerfLogs\Admin\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Access, Write
|
Dropped File
|
C:\PerfLogs\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Access, Write
|
Dropped File
|
C:\Program Files
|
-
|
Access
|
|
C:\Program Files (x86)
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Esl
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\EUQ
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Javascripts
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NLD
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\PTB
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SKY
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SLV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hr_HR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hr_HR\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hu_HU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hu_HU\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\it_IT
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\it_IT\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ko_KR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ko_KR\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nb_NO
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nb_NO\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pl_PL
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pl_PL\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pt_BR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pt_BR\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ru_RU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ru_RU\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sl_SI
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sl_SI\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_TW
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_TW\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\prc
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_CZE
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_HRV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_HUN
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_POL
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_RUM
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_RUS
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_SKY
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_SLV
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_TUR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_UKR
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\SPPlugins
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\Providers
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\SaslPrep
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files
|
-
|
Access
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\Acrobat
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\ARM
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ca_ES
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\cs_CZ
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\da_DK
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\de_DE
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\en_US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\es_ES
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\eu_ES
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\fi_FI
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\fr_FR
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\hr_HR
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\hu_HU
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\it_IT
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ja_JP
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ko_KR
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\nb_NO
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\nl_NL
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\pl_PL
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\pt_BR
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ro_RO
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ru_RU
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sk_SK
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sl_SI
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sv_SE
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\tr_TR
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\uk_UA
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\zh_CN
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\zh_TW
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Java
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Java\Java Update
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\DAO
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1028
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1031
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1036
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1040
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1041
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1042
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1046
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\1049
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\2052
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Help\3082
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\ink
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\MSEnv
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\MSInfo
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Portal
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Stationery
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\TextConv
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Triedit
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VBA
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VC
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VC\amd64
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VGX
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTO
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\Services
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\SpeechEngines
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System\ado
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System\ado\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System\msadc
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System\msadc\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System\Ole DB
|
-
|
Access
|
|
C:\Program Files (x86)\Common Files\System\Ole DB\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Google
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\default_apps
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Extensions
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Locales
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64
|
-
|
Access
|
|
C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics
|
-
|
Access
|
|
C:\Program Files (x86)\Google\CrashReports
|
-
|
Access
|
|
C:\Program Files (x86)\Internet Explorer
|
-
|
Access
|
|
C:\Program Files (x86)\Internet Explorer\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Internet Explorer\SIGNUP
|
-
|
Access
|
|
C:\Program Files (x86)\Java
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\bin
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\bin\client
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\bin\dtplugin
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\bin\plugin2
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\applet
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\cmm
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\deploy
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\deploy\jqs
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\ext
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\fonts
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\i386
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\images
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\images\cursors
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\jfr
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\management
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\security
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Africa
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\America
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\America\Argentina
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\America\Indiana
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\America\Kentucky
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\America\North_Dakota
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Antarctica
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Asia
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Atlantic
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Australia
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Etc
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Europe
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Indian
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\Pacific
|
-
|
Access
|
|
C:\Program Files (x86)\Java\jre7\lib\zi\SystemV
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Analysis Services
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Office
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Office\Office14
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Office\Office14\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\Debugger
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\SDK
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft.NET
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies
|
-
|
Access
|
|
C:\Program Files (x86)\Microsoft.NET\RedistList
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\browser
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\browser\components
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\browser\extensions
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\defaults
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\defaults\pref
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\dictionaries
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\uninstall
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Firefox\webapprt
|
-
|
Access
|
|
C:\Program Files (x86)\Mozilla Maintenance Service
|
-
|
Access
|
|
C:\Program Files (x86)\MSBuild
|
-
|
Access
|
|
C:\Program Files (x86)\MSBuild\Microsoft
|
-
|
Access
|
|
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation
|
-
|
Access
|
|
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0
|
-
|
Access
|
|
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList
|
-
|
Access
|
|
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList
|
-
|
Access
|
|
C:\Program Files (x86)\Uninstall Information
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Defender
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Defender\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Mail
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Mail\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Media Player
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Media Player\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Media Player\Icons
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Media Player\Media Renderer
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Media Player\Network Sharing
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Media Player\Skins
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Media Player\Visualizations
|
-
|
Access
|
|
C:\Program Files (x86)\Windows NT
|
-
|
Access
|
|
C:\Program Files (x86)\Windows NT\Accessories
|
-
|
Access
|
|
C:\Program Files (x86)\Windows NT\Accessories\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows NT\TableTextService
|
-
|
Access
|
|
C:\Program Files (x86)\Windows NT\TableTextService\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Photo Viewer
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Photo Viewer\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Portable Devices
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images
|
-
|
Access
|
|
C:\Program Files\Common Files
|
-
|
Access
|
|
C:\Program Files\Common Files\DESIGNER
|
-
|
Access
|
|
C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\DW
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EURO
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Help
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\da-DK
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\de-DE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\el-GR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\es-ES
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\et-EE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\he-IL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\it-IT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\th-TH
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\PROOF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Source Engine
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\MSB1ENFR.ITS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Triedit
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VC
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VGX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\IC-TXT.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGTXT.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTMTXT.SHX
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee100.tlb
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee90.tlb
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Folders
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Folders\MSOSV.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPWEC.DLL
|
-
|
Access
|
|
C:\Program Files\Common Files\Services
|
-
|
Access
|
|
C:\Program Files\Common Files\SpeechEngines
|
-
|
Access
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft
|
-
|
Access
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20
|
-
|
Access
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk
|
-
|
Access
|
|
C:\Program Files\Common Files\System
|
-
|
Access
|
|
C:\Program Files\Common Files\System\ado
|
-
|
Access
|
|
C:\Program Files\Common Files\System\ado\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\System\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\System\msadc
|
-
|
Access
|
|
C:\Program Files\Common Files\System\msadc\en-US
|
-
|
Access
|
|
C:\Program Files\Common Files\System\MSMAPI
|
-
|
Access
|
|
C:\Program Files\Common Files\System\MSMAPI\1033
|
-
|
Access
|
|
C:\Program Files\Common Files\System\Ole DB
|
-
|
Access
|
|
C:\Program Files\Common Files\System\Ole DB\en-US
|
-
|
Access
|
|
C:\Program Files\DVD Maker
|
-
|
Access
|
|
C:\Program Files\DVD Maker\en-US
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Full
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Memories
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Performance
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Pets
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Push
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Sports
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Travel
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall
|
-
|
Access
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette
|
-
|
Access
|
|
C:\Program Files\Internet Explorer
|
-
|
Access
|
|
C:\Program Files\Internet Explorer\en-US
|
-
|
Access
|
|
C:\Program Files\Internet Explorer\SIGNUP
|
-
|
Access
|
|
C:\Program Files\Microsoft Analysis Services
|
-
|
Access
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB
|
-
|
Access
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10
|
-
|
Access
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges
|
-
|
Access
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources
|
-
|
Access
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\CLIPART
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\CLIPART\Publisher
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Document Themes 14
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\Bibliography
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\DataServices
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\QuickStyles
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1033\Vsdir
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\1036
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\3082
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\AccessWeb
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\ACCWIZ
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\ADDINS
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Bibliography
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Bibliography\Sort
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Bibliography\Style
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\BORDERS
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\CONVERT
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\CONVERT\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Document Parts
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Document Parts\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Document Parts\1033\14
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\FORMS
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\FORMS\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\XML Files
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Groove\XML Files\Space Templates
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\InfoPathOM
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Library
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Library\Analysis
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Library\SOLVER
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\OneNote
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\PAGESIZE
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\PROOF
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\PROOF\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\PROOF\1036
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\PROOF\3082
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\PUBBA
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\PUBWIZ
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\QUERIES
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\SAMPLES
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\STARTUP
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Visio Content
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\Visio Content\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Office14\XLSTART
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Stationery
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Stationery\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\Access
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\Access\DataType
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\Access\Part
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\Access\WSS
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\FAX
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\ONENOTE
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery
|
-
|
Access
|
|
C:\Program Files\Microsoft Office\Templates\Presentation Designs
|
-
|
Access
|
|
C:\Program Files\Microsoft SQL Server Compact Edition
|
-
|
Access
|
|
C:\Program Files\Microsoft SQL Server Compact Edition\v3.5
|
-
|
Access
|
|
C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0\Documentation
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0\Runtime
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources
|
-
|
Access
|
|
C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources\1033
|
-
|
Access
|
|
C:\Program Files\Microsoft Synchronization Services
|
-
|
Access
|
|
C:\Program Files\Microsoft Synchronization Services\ADO.NET
|
-
|
Access
|
|
C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0
|
-
|
Access
|
|
C:\Program Files\MSBuild
|
-
|
Access
|
|
C:\Program Files\MSBuild\Microsoft
|
-
|
Access
|
|
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation
|
-
|
Access
|
|
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0
|
-
|
Access
|
|
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5
|
-
|
Access
|
|
C:\Program Files\Reference Assemblies
|
-
|
Access
|
|
C:\Program Files\Reference Assemblies\Microsoft
|
-
|
Access
|
|
C:\Program Files\Reference Assemblies\Microsoft\Framework
|
-
|
Access
|
|
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0
|
-
|
Access
|
|
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList
|
-
|
Access
|
|
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5
|
-
|
Access
|
|
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList
|
-
|
Access
|
|
C:\Program Files\Uninstall Information
|
-
|
Access
|
|
C:\Program Files\Windows Defender
|
-
|
Access
|
|
C:\Program Files\Windows Defender\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Journal
|
-
|
Access
|
|
C:\Program Files\Windows Journal\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Journal\Templates
|
-
|
Access
|
|
C:\Program Files\Windows Mail
|
-
|
Access
|
|
C:\Program Files\Windows Mail\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Media Player
|
-
|
Access
|
|
C:\Program Files\Windows Media Player\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Media Player\Icons
|
-
|
Access
|
|
C:\Program Files\Windows Media Player\Media Renderer
|
-
|
Access
|
|
C:\Program Files\Windows Media Player\Network Sharing
|
-
|
Access
|
|
C:\Program Files\Windows Media Player\Skins
|
-
|
Access
|
|
C:\Program Files\Windows Media Player\Visualizations
|
-
|
Access
|
|
C:\Program Files\Windows NT
|
-
|
Access
|
|
C:\Program Files\Windows NT\Accessories
|
-
|
Access
|
|
C:\Program Files\Windows NT\Accessories\en-US
|
-
|
Access
|
|
C:\Program Files\Windows NT\TableTextService
|
-
|
Access
|
|
C:\Program Files\Windows NT\TableTextService\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Photo Viewer
|
-
|
Access
|
|
C:\Program Files\Windows Photo Viewer\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Portable Devices
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI
|
-
|
Access
|
|
C:\Program Files\Windows Sidebar\Shared Gadgets
|
-
|
Access
|
|
C:\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Access, Write
|
Dropped File
|
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim
|
MD5:
1662732244373e9ebf7804845ad43761
SHA1:
1b8bb32da680ef7be3718de82dbaac683716b571
SHA256:
7107f2c0795ebd85806dde3900a6e147bb621205566762c0e448f6d1a5bfac52
SSDeep:
24576:UsnuDDe9I6QepN0UH6reEIb9x1RV0Q+WILUf:Zee9ieHq/m9xwQf
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim.locked
|
MD5:
2af487f445f602e45502ecb9690dd475
SHA1:
79e2badfc9ab3541f54ce35f6a70cc39163030ab
SHA256:
87943b31c3dfbe9aa2ca9f5313bb5030a40e0ad458902cbee416f26e895e6317
SSDeep:
196608:5eG+mGJK5LyRmsESRm2hHvoZxfS1osgdYYm0I5RZ2BkYZia7kLUaiOS:5im75LyIuy+0YYm0URZ2BNcWkLs9
ImpHash:
None
|
Write
|
Dropped File
|
C:\Recovery\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact
|
MD5:
d01fc5768fcf4c839a179dd626e8c30d
SHA1:
41f143b1e0d714f2af2dbdaf06ab698cb972bd8d
SHA256:
cd8f60334043751fca5453705b315fdbed56fae685c79b423d99333a37980936
SSDeep:
24576:4e/nlfl/Vk8Rr1cnyfI8QlwnFfugLF+A7UzWCXarIbZjP:4efr28LCUdoA21P
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Aclviho ASldjfl.contact.locked
|
MD5:
886784ed300ea53b62f3e0165b495952
SHA1:
1226a5e2283f529a47350980b0ff4df3685eccd3
SHA256:
03af8fe04b01224b989815983d39b6ee9e4210698ec7de9f77ddff12ea3fa142
SSDeep:
24:J5+a1YVyxMiG6AJAzL6iQ9zIyR6JHPslP4mus/63M7WIlooSj3Qe:JEZVyy/nJa6iK2JL4Sh/oc
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact
|
MD5:
3d8faef204e95622fcc602082388e1e1
SHA1:
ccd71b7dccb966d1c80df4c1fe8bc80f03592cab
SHA256:
219838219dd6bfeb5048397f3f74271366b320ab475e8a7195934a245a57a5bc
SSDeep:
24576:v0yVaZxpg9hQ/nFELkUPh2BEI9teFvHa9jDrv:LVavnjUPhV5g
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\Administrator.contact.locked
|
MD5:
d3544ea1ed7683d040af82847aa0ba05
SHA1:
32eae4b0aba324c72efd793dbfd8873d83e035da
SHA256:
717b7d55b6405aa88ffd4cc6525e39860b2fcdb960a61b12fff8ad0a010b1a51
SSDeep:
1536:ebcc2BOuX4SQQM5eYuRCIMye+cJGsnuEW1BEPrLvpxmGe5zMbH13dFpQ6:ebHuOG4SQQMICYTc0EDW1BEjLQ5QDJ/1
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact
|
MD5:
c3c1381489e8ab015017c0eaa8b7c50d
SHA1:
f93e89a130e35e6ee1fd01339ffb2412d2007c26
SHA256:
ac6a5ac9c3edce876783b16dd96b1084b5958f404a444b3bcba19936dd64724a
SSDeep:
24576:OfSTvCDBMtVdaSMEBv2X5vh9gNTXdo7MDijx/:386ArkzDijx/
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\asdlfk poopvy.contact.locked
|
MD5:
1dc6e996a7a66a7a3ad2f73619bf005c
SHA1:
39151dfb9376909718a7764d36f9591dc99d4b63
SHA256:
9ff4d0b49e4616cf24e3a7888afadb7cc10694955a3c52ebb0a37e6c1fb52448
SSDeep:
24:Eb5eIwPzyvA9P2qiu1wRfiVRlKs5Aqbx8GJvQI1INquY5bXADHNXOK2YjijaM:CDwt4fyRws53F3v/+NquYFADHNXOK2zt
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact
|
MD5:
2d1fab41080f49b2bc267bc4acb89f74
SHA1:
f1888a74cdf39b501233c07a81fdd08f315d95ac
SHA256:
9615530518d97ef3a1e74895a1cf6bbd6d849cbcbe35faada2fdfe36f81d5c97
SSDeep:
12288:RvjSGAJPKKbCAJDGQPLeUI2NsPaE1Z2EUrSajlB9f+DUGAMLz4IH00EpUKwj1goG:tjVc5bRJ3psadzFf+DUD8JKqgNL
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\chucu jadnvk.contact.locked
|
MD5:
f165a852ac9514150234884e43af1c38
SHA1:
13c8251bdd1239641c7fc17b44e34dd90908dd51
SHA256:
e5f8c629531263805691c2209265edd4c245e4b3fb47d9ba66f3bbfd78b159cc
SSDeep:
24:Jj1YMjSZxXBdH2+yjkUB7rZbKvQZX7YYsPslurlxjz3NZCpe:Z1YMjGh7RyLdZLhsPslEj5ZCI
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact
|
MD5:
9694ae4a53fef18e3a2dac8f3a38d5f9
SHA1:
6d7e934fedf0add6f2e862bda4cd7a9913aa16fc
SHA256:
fb4717ae2116dd82909775b4806913a8585032207bb9b4a5161d287716ba9692
SSDeep:
24576:hecuN9NJRqRnLEZjSmRKOG0DcJd+v6608x4cKaQfWRvT9b:WMKdmsxOaMyZ
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\lulcit amkdfe.contact.locked
|
MD5:
b9fca6cd6d8838fe75c80d8bdaa00580
SHA1:
c2de6ef4b1257f46db1f1d8c2c776e300859efb4
SHA256:
3bf034de332e44c5589d0135f43b600e5acf69faf8a6cf54ad0c8ed5c9f127dd
SSDeep:
24:S+e7yNm77y8fOOf3ibBqKhO+Z/xnhscV3+Awac/U20brJ1pQWdZBsuI2q8oJW0Xy:9UyNmnhPutnX/Q220/JJdlILu0Xy
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact
|
MD5:
cf8a741d45ad91b00df07690f8f03c9e
SHA1:
59fe76daa77aa9413e9d15b5c49b1aa96b7c89a4
SHA256:
a602c51457e890fc9d227987f89b6283f6cdc7faa5a90e33554025781cffa3c8
SSDeep:
24576:m0CSn5llLF1nAl0gphTe2Xp/Aj+MIGC3oCjO4uZ+dVkia4GT:nLFnws85Jo2JuZ+k7
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Contacts\sikvnb huvuib.contact.locked
|
MD5:
98d7f63bd23a2d87eaf9ef959af430e5
SHA1:
95a7f4cd1b560493359816e72a67f930404b1804
SHA256:
908371de5ac37e227751abaaa9c92fd958a40a70ebee749a894cf540c234b8ab
SSDeep:
24:N0grSBVvsvuEnLHBQt5+9kViQxeuDpbO3XomeE/if+zJHe4/3HrGv+QG6RFGCBUA:NnrStWLhQq9GJDZO34Eo+zFec3TmUq9
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop
|
-
|
Access
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-1akhf1BL2GLx9pXS.doc
|
MD5:
26b96795b3c1c1914a33893fb0207ab2
SHA1:
353acf919671cc7482988172c2711702926a9e0d
SHA256:
c6feb6d443b5befc8ddb93209dcac6f525259192eabb256d17fd7de2d75cde97
SSDeep:
24576:nMaIx7G7W1pRYStVdDVMo8Dkxm5iiKYAKS/1j:A4gpb
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-1akhf1BL2GLx9pXS.doc.locked
|
MD5:
698201d30b56d03f6075d88842cf0ccd
SHA1:
9ac021a6271273427a355950de88ba0d529ebe5b
SHA256:
759890de2b1540356c6ea717ebc0e27bff56a2b910f19a06c83f969ae7dd85da
SSDeep:
768:gteZ2i0IuK8nxWRoXlGiGZMU7bCMSzEmUkj2tE9lnJ5BRSav+oGv9MhX0Nxc+fgq:gq2iLWsooaHdzfj22XJ5BpvK+h0/rU+T
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2_d-jRe-SrDwQoO4CB.mp3
|
MD5:
bf6f383faf3ac0170a5a79efce3cc470
SHA1:
dfe20e372984dc7da151b68b6b8d694b540b55d2
SHA256:
49514f83a8be23db93a03b73244f6ee1ae0afde3fe5cc45bf399a2ca259db7bc
SSDeep:
24576:SZIk3JsUQFxMdPGgJdv+h846WtAtU1tix2:SZOFuV8w0
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\2_d-jRe-SrDwQoO4CB.mp3.locked
|
MD5:
99bc32e59035716246b4474da6f55b97
SHA1:
08ef8337c6a6e5b6065d58aa7f65a07b4659a9a8
SHA256:
7ec71dfe008b3dc9ce49ec9c9ad3102f96d1177fbefe5bc486a7857436f97f15
SSDeep:
768:UDpWJ8ORFgmGdAlZO/qvQatMI+GmYaX4NV+zu/m78db:UDpuqmGdAdQgMEmYzNgzuuQb
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4TZv3Ht1i-caZkqb.png
|
MD5:
01b1e0d364dc524280dbd74f7d4492e8
SHA1:
1a365df4d181ed323e7d99618803ee330925a619
SHA256:
a9901e0831257ded517dba18eef890930aee74283b61890e2b8a0ad70fa8d3ad
SSDeep:
12288:CzcyBURbwgyOJGT9+bYicaOMHNWFdeC5FZygvRWGHb8uWZgfVSk8MUay8/nnKiOa:wcy2b4Za4Fh53ygv0kZd4MUzOKiYxe
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\4TZv3Ht1i-caZkqb.png.locked
|
MD5:
3559386b43bc24e9a5de814abc13af58
SHA1:
fc0bafe88500448956d63f56049b64988b696b2d
SHA256:
b973c163b6fc44c2ba0679f20152a3bed43bef58612dd16df2ccf7edac399331
SSDeep:
1536:VXlhcuGOUbrSBO+bbXpe3wJIboOMpEKUeE0pmCJ98x4BKTv:rhpGOUbGtX4AJIbnSzTzpmCbrCv
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6TCkpPq_bUL6g.bmp
|
MD5:
06b09311072dd94082a9e8afa22f1920
SHA1:
1794c6a1404786667aece332a490c7d10f9a0bbe
SHA256:
53f6b2a239420f6997fd285d3650fd8c835b0dcedc1d66c9da0bb911e56ac5ae
SSDeep:
24576:f56FnO1bmcmo0Y1GNMDjAzVCkV0rWfTMfhC:pbvoR2g
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6TCkpPq_bUL6g.bmp.locked
|
MD5:
f97a66a75160794f541b86e9fdba297f
SHA1:
c620eac5ed2f12f7fbb7b8daa2989ac6c577ef30
SHA256:
cd5e8141bcf637b34d4a8213060bc435d7914aa06022fa0a3c9ed17e1315ce92
SSDeep:
1536:lFM93GgwpAdoymHVa/c8WOm6l9NHAZTJtm8IpPR8VJtOPA396sqqiRL2ihxjH1Hc:lFc3Zwxym1a/c8xvcengt93qd8id8
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6wk6dgEHze\5IXdimlWLw.odt
|
MD5:
f4a4f63bdd6a77d1bb75b7234f9052a9
SHA1:
fe3184f50de3f9b5bb56aaa2317317a706222519
SHA256:
c47fe0aa6ef820d99f848146a986ec49312e0f0a684c60c99fad8e1ed4ab8877
SSDeep:
24576:xg7ajNh5aM2JU724B5IIuGKl7rga7+/z6q943j7oQsBiUHIpn+I:xyatR2Jz4BYpuWjiLIJ3
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6wk6dgEHze\5IXdimlWLw.odt.locked
|
MD5:
6cef8e7c6c410d8b11f9d409e3521bd2
SHA1:
2882326bceefde7d451e4ce453c4a9007a6d1d3b
SHA256:
e2e8b2025827783cb3c8b203d468b481c88c3a05c9a0aeed25fd0709e07142b7
SSDeep:
768:mL/6KB9LuYnDki+a/UmONjgpVlrO4QB2Tk2sb15bQ8uDFyDKPm2rNXBo1e54DeoS:w6KBUwaacbNjYVlaB/1q+DKuae1RD5S
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6wk6dgEHze\RAkhE3.csv
|
MD5:
d8226bea1f5c05e589dad39d54a8f6c7
SHA1:
faf03feb02dd9777302c4ee42141501be7600143
SHA256:
cb11af81a893963a7623eee66930094cafd8608476640909620789efe578fc72
SSDeep:
24576:WeTTjlqoMBVH4oy+4RSp7ll9O+LikwDj/zjvn8e3x2+:NJBCB4oasKPRjPdx7
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6wk6dgEHze\RAkhE3.csv.locked
|
MD5:
6d55109f7b80b0e4c09909ab73595c99
SHA1:
eff8e781d05c2343c58b30b9dd4d061e524ba2b9
SHA256:
aa14acda648873e21836e0f100ee273a4d825bb007f91be92559d97df5cd976c
SSDeep:
1536:ugjoAsH1TPfcM+NeGm+nW0sWiBPiYdBUWHB3ib7fkdxhbkt:fMAk1D6kGm+nW0stBKYfXlivkdxNkt
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6wk6dgEHze\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6wk6dgEHze\x2H_ZCFitwlRZCwvF.png
|
MD5:
b9de22c42705d572492c8c8249d6eff8
SHA1:
d8a33933197af02da106355c79beb4e24ba862d0
SHA256:
924f9ad4492e7d0cf3cc16bbd83bc74142fffe9558585434ad2d58b580b286fe
SSDeep:
24576:aVcqnJ/ecrKJy7fJ7fODDWMVFvp/CeE8OhQOh/G6:aVc+z7cB7wp
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6wk6dgEHze\x2H_ZCFitwlRZCwvF.png.locked
|
MD5:
4cce326d6f7623c87813fa23c9fcfe21
SHA1:
8161bff13f6ece9a6e36cad688cce51d7a3b9d4b
SHA256:
e7c26f33ea9cf3588a18f0ae7f9ac1c2275bce697111b162f2ef2c6113d52363
SSDeep:
1536:qqlauy5C24H+QX/0KVkOMEuzXHJytNz2VIO0NpHY285iORTcqboPtocl7u:qi1D26NkOM5zXJm9O0HY2WXRThH27u
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\BNEQfYvg.mp3
|
MD5:
f10fd34f722ef60a16ec22219d21f3d0
SHA1:
20089640c937f8e6de0eeb230a8771ccef1e491d
SHA256:
4df83247ec0b6f2de49ca44f6249d5848461407c9ecf20c30f0db6ec0ab4656a
SSDeep:
24576:TrI9OcmGYDG9fnPr7uPkY6ox7zIV8PKarAmN:XeXfPw1M8SeN
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\BNEQfYvg.mp3.locked
|
MD5:
82bf967633cc92e4213d62ad34c50d33
SHA1:
e5185f0c3af62d095e8e12ec961cda1ed1c7892f
SHA256:
baaddcee8f9060314cda686e1f274b1469d44e1389f1d1916208314358e98599
SSDeep:
768:Ht23gIgh6tRUlPJKf0IS4y3J6n8k0jf3/z4AqR4:Ht23gIgh6tRUedTnZSz4U
ImpHash:
None
|
Write
|
Dropped File
|
cmd.exe
|
-
|
Access
|
|
cmd.exe.bat
|
-
|
Access
|
|
cmd.exe.cmd
|
-
|
Access
|
|
cmd.exe.com
|
-
|
Access
|
|
cmd.exe.exe
|
-
|
Access
|
|
cmd.exe.js
|
-
|
Access
|
|
cmd.exe.jse
|
-
|
Access
|
|
cmd.exe.msc
|
-
|
Access
|
|
cmd.exe.vbe
|
-
|
Access
|
|
cmd.exe.vbs
|
-
|
Access
|
|
cmd.exe.wsf
|
-
|
Access
|
|
cmd.exe.wsh
|
-
|
Access
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cq7JQlz.wav
|
MD5:
9659ad73e748335315b5f8dbf2633ca5
SHA1:
ac1652f85c9bbabc73918d31819d5c13bb4baa53
SHA256:
1ff05f99a9d9e8e41a6e467d931fcc8ac6fc356a13224eee1dd8bed362a60efa
SSDeep:
24576:OYLMpBvzvpJsJ8fmF7Sdca3EK4GW8G0mYKe:HyMEUuqde
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\cq7JQlz.wav.locked
|
MD5:
2ec22b1a447bdc7f55dd587e4f9e9c6b
SHA1:
577798498643aadf1cbb833034361640aec9ff56
SHA256:
23df7665822d121752385fa0cbabe66975a7334fdf5b0463daf263611ff1ff60
SSDeep:
1536:9t3rk6qcDWkYKR+KW4h3D0YRnaz3LbneD3Uj5bCc4o658++a:nQ3cDWkJ+KW4lD0saz/Q3q1CBo6PL
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ewYdOINJ.swf
|
MD5:
3ec96a2b960edb8d446afd6134403d5e
SHA1:
656d55556299a286eea306f5df52b13d0add0ef8
SHA256:
d201a492d36dfc5765be2102deb1dfda987cffc79f129d680232070875a36252
SSDeep:
24576:dKdcX6q6gj3GCAr1SogqsOAAS4JpQGFSMz7Q3HSLGbSZ:dKs3GL8oQMdz7YyR
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ewYdOINJ.swf.locked
|
MD5:
f91176ce6b7b59daafeed356ac122c1d
SHA1:
a273bd2bfcabb172c05892a3973d097efcaf2c5b
SHA256:
a778887a4f38f139892a5f3f739e176859ef20f31cd82225eaebeb8481963339
SSDeep:
768:P6NvX+71NJIF7znZiqiPFNK/NApg3LG0Igo9B:Poa1NO45A/Qv03k
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\F3O7gnz G.gif
|
MD5:
bbbd831314ada12ad576960e05d59697
SHA1:
8f41588423ce9d792323a55c0e401d2cc3f4207e
SHA256:
deb729eaa86a69424fadda71ed2add435d6fdad0a8f666483fe15741d1a8d5b3
SSDeep:
12288:H77akzAHogPBV71jTO/YSlaVWZgjzT0A1IrbpbbO/sY8BWLDRmmA8Q2Ury+5sB+u:HXa3HRPLZ3O54WZgT0RbKMkA8zVDAC
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\F3O7gnz G.gif.locked
|
MD5:
d9664ce92973537741e8a8cbb6080d34
SHA1:
c892616e7c6ff566f7d5532d75f55c9bf746b2a2
SHA256:
83bcd25646563bf5b71d8b6c1258963065c295b8fac687994c4ca94615f869d8
SSDeep:
768:TLk7MShZAyofO9RZHknF4jTSIrF3hLPYd/wdNB1F+xkUxPE2I2u:ojqfYoMO0g+DXAxA2O
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gB-q2WhERwKnL.pptx
|
MD5:
70b672e3c96cdda77e2e8a1d4268241b
SHA1:
ba59e5fd45b7cd00aa8e963d036ae5890e63704f
SHA256:
33f232afcbead04f577cab19fa4d013e8d8ee9eb92b9c94f7fc3d55feebb2636
SSDeep:
24576:tT7+nQ0uRpNPJEK2JzhnV3MU1RXgASDWv71GOjq4yf:ZFqh5h31VjMf
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gB-q2WhERwKnL.pptx.locked
|
MD5:
04065af56e09a6034e477c8f0b5dbd75
SHA1:
2edee45f7c1e861fabde9d6c6418b290aec71d50
SHA256:
b8b77a9e3987b5d5ae68b0519970bcd5f4843a2ae0417a0ba454612177f64330
SSDeep:
1536:lUcsoVgxQNGXsdOT5v+F+bcfSS4xUFcS0u6M0aslw0GWNgIDlO1h8pvZ5bWcS:icrVrNGcd0Mt46FbOFas3vNg4U1h8pDW
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gRxdPCZ1Sca1dtL.mkv
|
MD5:
be4d8287047528ad5cc6b64572097ec6
SHA1:
0d3412b2ca08863443a7aa075a64473ea02e3810
SHA256:
376e5e8d2f6dcaa72b677875848365adba616f1f2944088ebd4a30f17965d842
SSDeep:
24576:KKM8wIUzb/C5n41y4kenqNV9mH2okaCVud:KzIYW/ydT
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\gRxdPCZ1Sca1dtL.mkv.locked
|
MD5:
f7b0b2062165f47840350fb29dc5888e
SHA1:
f637208877a74f1764d37672f91a444d2eb1bae5
SHA256:
c7cfc152cc3433ec8f52b959a9660e4a43c97c2bacb9fab18d638dc5fff4c222
SSDeep:
768:hfrE9/ptFj8U8V/yS8EFARZnZeGNiM4zcb2DV0nbT84H6SHNQjFauUDQr386:hfrQ78U8Ny0FGVZNiM4oCmnbSGe86
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HRII4doKY5QIf5fvo.pptx
|
MD5:
6dbf450009ab833bbb74b75a3bf0700c
SHA1:
cae7d036b383a9cfcbb00b77b0cc60ec9612e831
SHA256:
3fc9e44a1cd0d3152c10874efdac2439885dc33a343ce8d75261efd8eca851da
SSDeep:
24576:Z1JrmcdU2B2CSGZi6K95Rt+H7f/YQghTA/lp7z:qGvK/RtWaO/b
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HRII4doKY5QIf5fvo.pptx.locked
|
MD5:
bbf80d418c9fd79ce05874294e526921
SHA1:
92f2a8ee2dd44eb1eb07123826783cfa16a786f4
SHA256:
5c5d1aa37e4d6311ac7b5420f5878d2119aba160a43fd8e214b90772f5c10575
SSDeep:
1536:wVrG1evxvdnlDBbgAd3f6duJzC8cw9YmZ5EKZoNmruydUFh:wG1ev3bbgAd3iduJzpC8uNiYFh
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JmITKXvX7eVLl.xlsx
|
MD5:
e9750430f33bdd316d2e640536ad71b4
SHA1:
946df66a767c1406b08d0207673a0efd8b1d8774
SHA256:
92e8c18db538e7d9913ac8496ca4d2da9d732ac2eeaad31c0a2a99705678b056
SSDeep:
24576:UCyilZeA7+EypmpwR+mUQwND4lUIT5wgOSo:XNYOSo
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\JmITKXvX7eVLl.xlsx.locked
|
MD5:
cd231ef4ef370a096b98432da39a980c
SHA1:
f00cf726ca7a969fc0023d3eea6f0b9afb26e81b
SHA256:
06022ce1691f348ac1b7b7df440a84d027e4515200882b9a679d8ab1622a9d8c
SSDeep:
1536:nPFrcoNP+BXYvneY61ifTqUJ5JsocjtDEJSDTQ26:nPFrcyWBXYvy1STqUR82EDTQ9
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\kthgq.avi
|
MD5:
2bb1a3ebfc6baf8fa1f8114a73a12caf
SHA1:
2f1708599f315f907bb188d7ac4c6bf3e567c67c
SHA256:
a8d82bb299e1dee656f674ca6140d4f4e8500ebe00750e3e87165bc1742445ba
SSDeep:
12288:ES2TT9fpD1r30Me0BZdSsLq9b6hHmSnFa0uPG8egRj/WVM6/WYAH9b/UEYegSNMc:KBvjvSekodF6peAju/Wz9TgSN7
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\kthgq.avi.locked
|
MD5:
6db35d32cc5d41cac89179310eeb887e
SHA1:
5060fc0d9e853d39e04d0174c3a7af33714c7ef1
SHA256:
69f622bcdc1b8faea45608c78f6831bc012df87c818d07fea404843996d7025a
SSDeep:
384:cLGuPVS7nTjtmnDNdstRuCF6XOU4XphiV5r5rhYhDivWA8zFgE7Vk4v:6G2Vcv4ozFS45hAr3YFivWAka4v
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\2ry76H8Yy7hBIz\eEjm.mp3
|
MD5:
e1e5377188fd346a5aba4bd3c9a738e4
SHA1:
7b120bf277c4fdd535ce71413ddec2e5d433a449
SHA256:
ab3079b028b038cd87738446ceea354add232ee07cf03bab760d46557f36f9d6
SSDeep:
24576:UVFNGUyr4qsH/GVc7gIZDgtMqo398SY04wxreb0O:+X+qRhBpeb
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\2ry76H8Yy7hBIz\eEjm.mp3.locked
|
MD5:
991d60d22b3076d462cd0c30e209d2e0
SHA1:
501abea33e55e1488c3ecc6084bb959d6bf54fa8
SHA256:
3cde2ae3a29434cd95867a5491a40c3705b416c65f6f49c7a36a4715ef260edc
SSDeep:
1536:luRdCXMiSKP9ygLxLXM33f4xNT4tZfBfQAchIs6R75Yir:lugdP9vK3v4xNTOZazqpHR
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\2ry76H8Yy7hBIz\MOVP_Ir-AU3UCHtR.png
|
MD5:
6f0b460f20be026a79f72df083c5460b
SHA1:
36b90a3d9a9aab729126d416392899aee6af1db2
SHA256:
85e7b87262a61e44852a9aeb0785d8dde191908ca2fdc7b686fae53bc451ff62
SSDeep:
24576:QPFDonRWYDWZnkg8xgnGBrsK695ZlRMred:2DO8/nqi0qjZMC
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\2ry76H8Yy7hBIz\MOVP_Ir-AU3UCHtR.png.locked
|
MD5:
65febc909ea5c5a83a92f31cc29f7e02
SHA1:
a881de36bc7acd487925ddab4c6483fcdb5a48fd
SHA256:
d80bcd337024d53c0a63e245d4a57b04f098755c339e9dfd5be4cebf774197f5
SSDeep:
1536:b849Niu+FFz55PQ56TM2dCA++oP2NZeK1uzF+A2cb9O8s:b84iuk5qHYomZW+AxhO8s
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\2ry76H8Yy7hBIz\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\2ry76H8Yy7hBIz\SMT5 pgZJva63DjjT.ppt
|
MD5:
b9465d2b5bf08d23e214763540056a6e
SHA1:
ee07a1845798b374958344f3b6d84d2ccf161069
SHA256:
2fb8c88ccb1d715c5a9dc7b20aecb4f366b7e0110ef89aa778fc9a2de4e29ff3
SSDeep:
24576:dYPer3RHJCqG3eF/hOKVVZ7p74JVaknjnG:dYSEy9RwVnjG
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\2ry76H8Yy7hBIz\SMT5 pgZJva63DjjT.ppt.locked
|
MD5:
dbeb6635ed0456cae08b7a6729607a01
SHA1:
aac46d8110ccd4eb3ef5722ac6082c054d47ea76
SHA256:
3e62248c7de06e3ba5043abf9cab330b49a5a98ec2188effa1e297c74b0614d1
SSDeep:
384:0WHDtr8Bf4rHp1UdgHelOVbuYD0bUusjiQwylXSWzxycUKH8u6CDQLw/:PHSFI14gWkD0tsOQwylXdGKH8/Nu
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\Ei7u029ODswnXx3SGD.gif
|
MD5:
fd6099b49f624448d5f7f2e8f4fd57e8
SHA1:
db62f23f677dd099dd2c028c27cdd873affd01bb
SHA256:
0afbc6594407ff24a08ae9136a66b378e7e3039b3492448ba588d02cd9738307
SSDeep:
24576:JtAwxLTcrJeMhQ2O8Gu6ReY+XV9U18QYB:6ztOviUCQYB
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\Ei7u029ODswnXx3SGD.gif.locked
|
MD5:
716ccc2bafd37431d4d6bc83fea52a3a
SHA1:
c75a37643f4037288cf05c1b7dd86ca274e622d3
SHA256:
8ce874f9cdddb75e0ecc3365b05d2ab37f4ec85a43b4081a2a50467a771ef81c
SSDeep:
1536:KwFv3kNxfIMo3Qc2RjO/oCHCibYfF9VYPmJjyh:YD+NdHzsfF/YP9h
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\EJ_uYOXtFU_bC8o.jpg
|
MD5:
9885f4cd0dbead9be942530458a4896a
SHA1:
bd5917492f45cb35e841834a1db66b1a309b840a
SHA256:
aba1ce240fd4d5f29fd3ed2cf4293e54556536fe041047d805db13236c30beeb
SSDeep:
24576:3mYuLrgx9Ojna5KaAQViMI4KF0tr8Y1jbjb:s1exh9j
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\EJ_uYOXtFU_bC8o.jpg.locked
|
MD5:
87d55c64a759f0781d282ef1d5724503
SHA1:
a53730d2cf739349ad230547e94593b4f0f5b897
SHA256:
d7126fdf419bccbdbd4f184597d5c09c75d8b0a7b9d126cbbfd3ab28af5c1ff2
SSDeep:
768:K7ur3EfoYhU9TjxkltMedbZ5JpmcjKuFw7:L4foY4kltMeZZ5CcjKuM
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\iz1LeeS0 3GEeCJtgx.docx
|
MD5:
f3e07643c6c9c3f36434bbfa63da076a
SHA1:
5d98f71dc3463873ab268eb90884cdafa33d0c4a
SHA256:
1e205477b39d2494fda394f6ac872453d2164c54c5abc7214568b597275adab2
SSDeep:
12288:K4yTzPucGOWk5Ijhp2EFCDJGgmu3iEE45LJhS9EXNjQSq8IW4nEyhSoiiaLJYl3A:+2dE4eEBfwJ5LS9BS8WkEocimGCby8
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\iz1LeeS0 3GEeCJtgx.docx.locked
|
MD5:
96c540b6aca7e34825f69cf51e3f716f
SHA1:
99b5e87e124d3bfae302fffee36d38cc3b67b788
SHA256:
b828777513b5ac36fe82d4e379f738efb020ee16a87c228078bdde6e5385d15c
SSDeep:
1536:biXxfmxtd5JtDeBXyARuG71dfK2+qJPP5shmkpxSdzV5g1x:uXxfmxtCzRZ71dfNLnChbpx8h5U
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\oRCJmQySkAXn0at\0ncS.png
|
MD5:
eb638376f5f4c19c53bd1e6b4dcf5ad6
SHA1:
2bac77042bfc6b8bedc0f202bdc8394950d93759
SHA256:
070488a6f15a3d0f74fd5dd864b85a10396dfe0bd0c0c240a68649f9094bb05c
SSDeep:
24576:ldId/DuSlZVS6R9EzYV5wuA3zEbKhXNpBmTsf6XSQ7:2/lIQ955jOtMR7
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\oRCJmQySkAXn0at\0ncS.png.locked
|
MD5:
bf7db50ecbe34c47e47f9b99954ddacf
SHA1:
e03f11f6225c712c2c7f581c52d6557dbd17f031
SHA256:
c302e4a69ecb049806520d4d431246956c63a356c80e521a4d63286f6fccde22
SSDeep:
1536:9Fc0W0qzLNMRb7YgQ/KCXF/M1N3pERw+fCw:9FaD3UorCQRsNZ6Cw
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\oRCJmQySkAXn0at\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\9GFPfd5_Yef0yPVDK.mkv
|
MD5:
c49146921d3d3a1bdde7bcfd23163e65
SHA1:
e00a92ac75eec8028227e8ac170b02b448e255f1
SHA256:
50a44c65f576d082e6a7e269c83754d0934a6aada62edddd154ff42ead304869
SSDeep:
24576:MuN5JmzDc1UB+2FJbqx8+MYBgrR6X3QdjPH41fF:/UUcHi9
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\9GFPfd5_Yef0yPVDK.mkv.locked
|
MD5:
56df7fc2b0cc1e064e3dda50c425a942
SHA1:
7c69740a1cb098fd4baec0c51e77eed6231d89ec
SHA256:
8218144cdf767675b9c8c3f797c45b3fd00466980a6ee9a2b5cd029e5798989d
SSDeep:
768:M9ir8TDiiZEZIuy1uaEJwyXcU5CFWLxrMub7x0Fj2njm7PZ823usyfH:M9igTGZ9QuLwep3h7b2F+UPKKyfH
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\_NqAH.mkv
|
MD5:
7d56b33f4f71e17796b7c0e627620fda
SHA1:
f63478012f648bdc9a4da43166d127880d2fbd65
SHA256:
952ac226d9efef3ee37a9046220b5e68f57c1fe7991a83371fbbd1cddfea1071
SSDeep:
24576:U6Z69MeIo3uk1A1pe1b6EhPiVRbTveEKO:U9Ld+a1EHT3KO
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\_NqAH.mkv.locked
|
MD5:
9f89e272cb9be99ba6e3a503099db094
SHA1:
1d3abd24135fdf09b6701c0a7aae514db5b81159
SHA256:
197c92b49666acf7f5a9cc926a059d3725e456876a980f7ffcaac9c1e94bd394
SSDeep:
1536:y9Hgi0gf9AUjCGXMFXyJiNxERswXbYS/GIg71+:y+i5fuUjJXM9y1qSez4
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\RKyZSmhpbFn.wav
|
MD5:
1efa1ceaca16611a09a79eaf9eccfb9c
SHA1:
cd6c3ad41491f27e16df59bab6a974c6dfe36ba8
SHA256:
0c8e99acdab875f079dc199138fa63b50c989b23ddcdeefdcc0f62d86f6b346f
SSDeep:
24576:up7kvDR1zvA7wlOUSX/773qPIh37eAIw6NMfOd:upkz47pZAVNp
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\RKyZSmhpbFn.wav.locked
|
MD5:
d6c3e4a613568e02e63a0706f4eb2993
SHA1:
fbc1c9eff503a08c895fcc1debabb6d16dd0de91
SHA256:
11cae5edb4d5527f4bd08898a84d3916c9012b17c08d4932ce74a0d66c7accae
SSDeep:
1536:EewIKx04qvDm9hEVBbUwS4ockN/WAvvIVFz52Fo82InOeF+yQ:JdG04qvDm9sNHk4Kvi15A+p
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\wW1gMOqzuK.wav
|
MD5:
e5e2edeb89ce56bd6bae040346ed5881
SHA1:
9f510f1d26c75d5746912b34b0e179c53eafd6ab
SHA256:
eadcb6f4956e6ca9648b6b6558520bb0717b2191befa92316d2ee90cae4b821e
SSDeep:
24576:Cu6QAxYxgUUha/qSRpPPwsJWNEUMELvICYdfSkGf1WHe+:b6QGYirig/QtfSkP
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\wW1gMOqzuK.wav.locked
|
MD5:
29183eb0dd64458bad55b925d977e5ee
SHA1:
63fc45976407f6914ba75858e93752d3c9d32dff
SHA256:
a67137b62af8f83d4f0e8d6648da087ab7f36d9083024b6c79061a1d4d7d0dd9
SSDeep:
768:wSaKx4dnyGu4GKYh7HPdTd+6YdOd9JJSkOYPsnjyxGIiwaOF2f:wmmFuhbh7veRdEnJPOhn+x4waOof
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\x8K0Ce9WztC.pdf
|
MD5:
f6292fe65a6c1940ed050ad5c2daacf1
SHA1:
05ff0597c110c83d789237181f8a56050a6f1cf2
SHA256:
5f1060c032a9e53cdeaa5609f59fded4aff442caaf071b2dfe07f145bd81575e
SSDeep:
12288:Kv4fpzNRCcczdqxMpBux6g15H7pLfM750rywJJam6iv3FD3ZI2EctHMv4ctw0BP7:p5UpnL9kF0wr6OOv4cRD
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\l 4Qnbbv LM\XU4tnfq36QX-1m4j\x8K0Ce9WztC.pdf.locked
|
MD5:
4c2a01cdb15da0c8262e8ab27590b6c8
SHA1:
8025bca92082203e8661774ff86bd7ddd1c130f4
SHA256:
52de66d5635d51ba6eb8ecc200b7cc341e8ad3c7307882317a940fe427c38ddb
SSDeep:
768:wlDqDwMQH5DutepdmR8kvQnz2BuoLL3T6NblNWzDI9d3Pp8Xv:hcfH5DCvR8kvQnWuoLSWDIVA
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nNG3ZUE6evnr_58z.mkv
|
MD5:
e0158462eb9e4b802333572229430a17
SHA1:
efda2cb12e47b0824c0db09bde0fbb7dceeb964d
SHA256:
e45d800b8c85507f040298966ab72c44f8aadd19ec193515d5fd4ae2a34cef22
SSDeep:
24576:9s9VjcPxGMXGe+VwB5QJlxz0PdspEk1B69bCZ1:9sLcPEa2Hu+pN1BZ1
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nNG3ZUE6evnr_58z.mkv.locked
|
MD5:
34d39c3459bd8f6cb27085cb086a904a
SHA1:
1854ca6dc76ad5b7d34cddbfc1bdb5d0ed8b47b1
SHA256:
82983d5e74bc2a26396c284e5337d8b46d847641034e7729bda849ce3456c6c8
SSDeep:
768:91WhFL/WLvviXXbODUwmdkByVidlxTAs/s:9IXL/WLvvmNwVyu/a
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PA9 shj 6dXpmp.flv
|
MD5:
f24786967808ada419963868e47512ca
SHA1:
c885bfd93922a1563fac424d8a32e982df306573
SHA256:
548968861230500d7b267961ff55b77f2bfe3ba8c6ccb939d76d838f3bf4a58f
SSDeep:
24576:MQk0R185v8D27vCQTMcXvu6FB1GfwIfT648J9:MQtyz5jDJ9
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\PA9 shj 6dXpmp.flv.locked
|
MD5:
2c7c42b09ddefcb53e48a86c34ea25e6
SHA1:
f13c2d516795b4877fa815771e1247594d136e0b
SHA256:
0825b31a966ac8dfdf6690f180ccf38616bf5de645d54e56d99252af8ca615bf
SSDeep:
768:52i4f52pVWdCOOO3xUfrl3GLU64B+GfhLXVhOJ5r083hsQ0YWNn0xowYUVxeNsro:s5f5NdV3xUf5OUBZs46hM5klp033
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\T1DeKt nw.bmp
|
MD5:
e75dad02c78d78ca185fb2c519c28741
SHA1:
ae688645114bc66d00d373095a6c8c83d9227471
SHA256:
9a82f50cec6715efce0d4a1713ba85dd1da57ebd14eb0e7f78b79fc2bb9a0d2f
SSDeep:
24576:m6qDhfWGkMz61n9s/jMEEYoFMtQAC7RASJon:uWytEgqAoU
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\T1DeKt nw.bmp.locked
|
MD5:
c928394fcb66bad2c8f92d5ae53a09c8
SHA1:
751fc102289a2f8c285ab1445458230ddc54ec9e
SHA256:
d0010dbe17e7c82cb8b91e7b1c04156fd1fe5bac6c5da68036f4dae6e2e03570
SSDeep:
384:aNelqIoKte5gjvSSplxYClgLoY9UtveSi14OJfJ:UGbte5g1xYcrkRSi1DJ
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\t7WWm7rDRnnjI8gL.png
|
MD5:
80da68428d53b1b6c4fdae1efcafd7c7
SHA1:
11dfbf7acbd047d449318d1b560099325acefb4e
SHA256:
6a192233665d4f14837840bae95ada8b00427ae067c070c235f8d4774f4ac5df
SSDeep:
24576:LgPZWV9WKWQcB/SDepjh7jopwDqyH/hUL7wbCYoLbW:Lg40BKY7qib
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\t7WWm7rDRnnjI8gL.png.locked
|
MD5:
32527eb458bc5d9ddb83a7772e1d08ee
SHA1:
af26fc2a57ea48b182b48c9457766faefe6611ab
SHA256:
464f9449de108827e7334d846d440d271243411265dd8055dfd54da83ab8f8f6
SSDeep:
1536:Co37Lhv/5F/mDho9zqNk3PSHgOGBcnJDZLtbmvXXZvbcxrtF7MvN/g/J:C+R///mDC5q0aDV9ZL0ftErtxwaB
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U1E4UbklZJXlP.swf
|
MD5:
121bb943fbb11279a4bce86ca1cbc389
SHA1:
43fd2f7d3462bb59d63814c9414f9611bbaa17c6
SHA256:
be0a35fdd9c42b11b6b35fbe7d884edb6323a2d7212ad2a24d159eaab16ce5ed
SSDeep:
12288:K/aX0KN4JlxXMJdhp4BSefQ0PfzCWmfR91Ae9YBKV+Wkb7Dh2p/waK50YHDM5ebx:Tw1MJ94B5ropL6oVGXNCCD9sFi
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\U1E4UbklZJXlP.swf.locked
|
MD5:
47fc1f41e30edd7f29007289a283aa9b
SHA1:
348b55046a7689dd89f1d995e23374998be60acc
SHA256:
cd504529f890d3e921039d6e2a711a34d667324030ddfa285c1ad3456dd85faa
SSDeep:
1536:Gzkmlr8IuNnAFI5kA3lokNuTSd1xHiV2vWC:G3lXuNnxOA1nuWdHiV2b
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XSmcyKp4r2C.avi
|
MD5:
fd9ffc78ef1bbeb10e2d630346b17099
SHA1:
691a4224a4a27b36af6617026eeadd959d5f343a
SHA256:
07895b782c7ec8f36452e95ca6f0d2bbf1c84031e41387a94c10c6fb335bf7b5
SSDeep:
24576:CMx/sZOF1rh1gznUrZ0Hl8T2z6ZE7QC5Y9Y9n:bumzgznTo2z6ZEZ9n
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XSmcyKp4r2C.avi.locked
|
MD5:
1a1f210e2c0d3ce4e2979b013f25e488
SHA1:
b73a469e3f237fb24d9a6ea911c2eb35cc46c2bb
SHA256:
1c8b53fbcf89623488e07f80c13e4c09d289e6d6a83bd62f9420c7468351756f
SSDeep:
1536:D2sGuIh+61o+ZRS3G12+9cLN3YcRO/hxqG7D:iF5d5ZM212++LN3YV/ea
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\y3tzWw30PhcjeRPtk.avi
|
MD5:
3e08fbdbb00385d132752289ddb33aed
SHA1:
f9819c37c96196e194d888293c775d73654b517e
SHA256:
874c62b93cad14a85a7d7cf14aa6a723d58ba2e3a8e7056d987407ac72c59050
SSDeep:
24576:88aO8mHuAPsXgledsfKtk8f+8AHWlJ9do:lEAdipwmbdo
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\y3tzWw30PhcjeRPtk.avi.locked
|
MD5:
e6aa1a9d20150c139ab66c0889e6b9b6
SHA1:
4922cdb21cfc6dfc986ed0d46fe3ef3b626e5c0c
SHA256:
198d03e686e44aa675338002f18a40dc224576ab2e5c0a77cac7359e2ffc75c5
SSDeep:
1536:OB5qS6RWHY8I96q6sBops30gVV++XxonYdQ3AvoW9aIz95HM+ERInHio7SpG:3XRv8OiQops35/++BoYdQ3oA8rERIncG
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YF2pSCd3BTPSrGBwHWZ.bmp
|
MD5:
5d84f59e84a8287ebf64505475327e06
SHA1:
4afd073fbbd1aea966eb5bb361f0750857fcdea7
SHA256:
4cfa66b84f4b0df13da5c89479f8bd9f6dae7bdcb7ee33f39d8acf72ee0bcd8d
SSDeep:
12288:2imzWq1iDl/rqK/eJyR2+nofV7T1cNP6Xal54qcG2T4/c2KO1aKVtZGYno2/vxW2:2igbMDl/7mTsyGc7OwItlnfUIek
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\YF2pSCd3BTPSrGBwHWZ.bmp.locked
|
MD5:
8c84b7db6baaf3b0a5636cbb40aac334
SHA1:
0e62b9adea320ac2e6453287a6e350f3861d40fc
SHA256:
bd491f5d35f242e2c84707469213d89b0b655b6637fd9decc3f7ada05286a88a
SSDeep:
768:2fjFGOHexko5TS//xBWBx7L+zGST5aQwGkL/QSXrbaWHFJ6qk:2foTkBRB47LyGkdwGOrbPHz6qk
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\z3gPRJw_E2O.pdf
|
MD5:
38ee0265e0eef1b908a1c6cdf04ccdea
SHA1:
c9b4fafbf9bd8c920377ffb87738e5ce8e6b383b
SHA256:
bf244ad63e2553c274d4f850a05fd85f02168fdb4cb5d6ee8e31cb2db4a778b8
SSDeep:
24576:+mZmVOgFQirYf/ojq1lZL8n6x7i5DSEPfTPd/wbSOllUrGZHax:EkxLpYDHD4NllUCC
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\z3gPRJw_E2O.pdf.locked
|
MD5:
a450711426173f523d84fc865301ab84
SHA1:
207e8c051871560947c6988e6ca4b359e33e5a42
SHA256:
92667154706c849820af5d21f2e85bdc675c99ec394cb22773ac7def50d2d0b6
SSDeep:
1536:ogEzwFKzMJKH020aDALRewKafVN00NtbepcnVMytKFqmx4tSGMvjuu0+C:oLHTl0aHxajVNtb7Vnt0PitfM7un+C
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZDtwme4Ucsf.ots
|
MD5:
1be11d9874a951b852ce7a36792bf65d
SHA1:
189aa75a697ffecc8b4a50e35d0416233ef218f6
SHA256:
2142345eec414b0ad31950572672210cb4076a7c4b95958a934ebc55974d04ae
SSDeep:
24576:Nm26DOLbgESp9mQRodS+cGTmz5XbYKBC1EDR0V:4iTSptKBTm5UfV
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ZDtwme4Ucsf.ots.locked
|
MD5:
854402d974139d032360660e9af3d00c
SHA1:
56359ba7d4e1c6016ba0f1e36fe61f31ac9e81a8
SHA256:
ab9d9c3ed0a9033dd6af0776873848e98589c79c1aeeef875efb863945ded15e
SSDeep:
1536:Mh9z3CSrWCiBPSjd/TaF4scyOHkpGoQxg2RhpM5t1H5QxxFVWrn/Vb:y3CSrW7FeyOHY4xgOhp00vy/R
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\_e dhB3RjC0d.xlsx
|
MD5:
6db35cbc6c7c0f9c2038d5e921c7a900
SHA1:
09029d8bcafd1eb18e13c3c92b0610f341b50077
SHA256:
6d7cff06ee52c813f5bd5515c910a90842375f3708225265f09e2cc74437eda3
SSDeep:
24576:sRmtMymR1AT0js0SAlxb0WS/9ikMXZvfsY:yZih2b+8fBsY
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\_e dhB3RjC0d.xlsx.locked
|
MD5:
dc897734622b33f72cddac25d4a4aea6
SHA1:
dac7b1442062a3111cfe16eee10e76abe1cbf36f
SHA256:
122a9998ec3dfd77fe89842652212042fb5040e1887d51adfaf1b8db53a61af0
SSDeep:
3072:n02QHJI2Xmn+NgqqTWtC2gfRJJ/cs9DjG2+p73:0vHJI2Wn+TuWtZu7JEQjZ+V
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\BdD-yqY f DJ.pdf
|
MD5:
15241bb8aa18756f332ff938abff4f83
SHA1:
b471cb5a69917da9cfebc59949c0baa22d7ad471
SHA256:
6246a0c50e0210cd08583cfc75c2544e83942dd506d640916efef153707b0b27
SSDeep:
12288:gKbZi0NzInJJp6ESSPE0unF3dBn5lfkwWtHSRRwNOg/Ex9BdvlDx+XuSiuTjioKs:ldNOJpBE0Al+w2SaNOAoBdvxvyDKs
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\BdD-yqY f DJ.pdf.locked
|
MD5:
6f354e8f0d548f4c5525bc6ac6ba5f75
SHA1:
6fc3b138a560be7424b144062e40c63fc4391141
SHA256:
bd1ae0becb3a407eccffba61e69ba224b497c0c8f314b60f900c25a0a885853a
SSDeep:
192:fwP0/N08tp0S/ooKc6/R3V3W2PlYyaq4Ia0VWwmJDRf4o3E5oCelOvI7JGS6SXEY:oPx8P/vl22yaq4Ia0VWw+iPnkOgdGxGv
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\cZauEl.xls
|
MD5:
cc0bab3c1084353596c6f5501199ac10
SHA1:
2547a9b56f06103d30f5952cdb14ea233813581d
SHA256:
5e8d6bb957e7297570e06e7126569480d71d3279cbb5e85be1af7715e84c7fc3
SSDeep:
24576:83a6DLnH+Ht+PwfW76yDejyhKToEtIDclQLN/inn:Ov+O55in
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\cZauEl.xls.locked
|
MD5:
412712bfc7b30d5f3a35a4a27948199d
SHA1:
3bcf754b9f0dea64fc014b49d53af34c7affa354
SHA256:
4e9ba5a7e8531871b8c293af5fe63acae2946ceac63472e024d69ac4b7f674b5
SSDeep:
384:zLDGXKGMKI6H7WNVGIQAeTuIWKi0CZJR1biBp+OsxN0p2jR9uKeo4AX41jMC1TCM:zLEO6bWNYIQPWKer1dNUqRoKojFjyAZ
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\FkW-keDLU1g51.pdf
|
MD5:
9f6bc6e5e4ad054cf8332fa8240a54ec
SHA1:
188560069d50241b59a1c0466f70e93d471271da
SHA256:
04235fa715b47fbde640486a38cd99095a17e53d4adfff5532c96630a2bc4501
SSDeep:
12288:D57/H2URIwUOkinM4xqBPk+a5JHu3bq0w6vOVUSdelgnzXXgNC1l3bQRw6IqQr4T:tpRapisc+73u0OeKnDXvlLQG6+MT
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\FkW-keDLU1g51.pdf.locked
|
MD5:
e7bdf5a2b9eeb2a2b4f7d9e817e422db
SHA1:
8e83bbc1003b05d4720a1868f5cc12ff90985dc2
SHA256:
08fb0fb58efaa1f1292f9ec05d43d82c635e681e701cb8db4a95f0050dbe6839
SSDeep:
1536:3ZhAqjfyiOBGUMLI+zOY8qGBx1JireSjei209nSMpw8BdvkCJB02G:JhAefybL5+zOY/AHJxtn0Xw2HU
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\iqoE4ix_Q72m.ppt
|
MD5:
be06074325de40a7c562d22777162315
SHA1:
23ee5644414df36beac6d337dc2a4364c06b20da
SHA256:
c6a021e7012d93c76454d5860b7da5a404193c7ae02dc5efba1e8d38325f485e
SSDeep:
24576:RhCKeADaUy8pNt0E5g6vFTrEliEXKa7goA1+w5VVJquW:RhQ8NNgOTs1eVsuW
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\iqoE4ix_Q72m.ppt.locked
|
MD5:
784685b940528bd6d6dd86135629a539
SHA1:
9178bc331fc354b772e0854b09ee2559aeaa7af9
SHA256:
97d1a1adc49f0faca52a4ae65eb0de79dc2e7c84794d3b118bf381bc46d454ba
SSDeep:
1536:TsakIdgGhQ3FuX8kCZ4HsQ8JyddxbL01zDMETcfit7ScmU2sYHtqGZoeQE3w:TsZsgSouX8aP8owb/d9yfNqGayA
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\jZ_rGvLvL5qGyRE3TJ.odp
|
MD5:
b336d744f5e4ec7063b1ecf9d9a381ce
SHA1:
ab165086e323758a87090a26807622e54e16f876
SHA256:
04e1d1ad09e7f55cc22bcee7023ca2c6882fc187bfdc3e7126e92053c6e851ad
SSDeep:
24576:sS8W16E13n6J+KxqpiddG+QtBLtnh0wWRwiG:sSjnUwidlQ0bRwn
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\jZ_rGvLvL5qGyRE3TJ.odp.locked
|
MD5:
78cfc4f7a2fd55ef294000e009bb33bd
SHA1:
c2429556d7c5048f39664e7ac3003b19279e01d5
SHA256:
ee738256be75a2c35f903bfa40877c3317081a568f3c8111be79729cb6ed4d7d
SSDeep:
1536:unRLR3WdYzCBoMZ4zDIe+mGHnUx/RMJiLNyIl2K3hY0A+RVruMU:S93WdYzCL6IeNKnUMJiP2YPLRU
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\yCO54k1pg.ots
|
MD5:
57d814f772eb75e3a38e553ef5980c13
SHA1:
d04186d3d2fcd47cabcef76d29c87008fbaba758
SHA256:
dc06be66f40c3923674560e8f199d55d3bc67fb049e0fef5550b872f413651fe
SSDeep:
24576:ugIk66PoLW/43WhuSZqcKWhCtsA2iUcjg:V4tWoz5/ewg
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\yCO54k1pg.ots.locked
|
MD5:
da83a9281df630481b16c31cb829472b
SHA1:
d49c6bfc78fee80a303fb132ca8d27f05836b1dc
SHA256:
e81b260f4398c21b6acb2745cf5592b3aa5b994cf307c07375067eb7e49600bd
SSDeep:
1536:iZa9e5762zAJx6P4E1qhgFGayBcygyuVlYNrPF8fiI6ZGH6EjWsd3l9qqNg+B7Ih:3gU2z14xnayBLgXjkPFiiaajsdhNgy7G
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\yhcLODDw1WAQW.ppt
|
MD5:
da631da3ffdc50b7a6e36a6c3b515fc1
SHA1:
14accef3604261969ab3709f9cd897b7897f9fba
SHA256:
27984d68e95eb1ec0f581951dd8810c7fba9ce427bb4ae8102c8411393958bb9
SSDeep:
12288:Qwh4Y/PtD0h0abN6rTjShsJmy1lXHz3oFgOV2imHR9m60vHp21kko7O1KayY+3fP:QwmY/6pS+oRfXUFfVmt0vJnLvurk
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\yhcLODDw1WAQW.ppt.locked
|
MD5:
7248e452ce7d493424df83b41bbcbf25
SHA1:
39bd3321dd70686f19a1373051ba1e7664686de2
SHA256:
bd1d5f68dea4c5882c35b7e63dc9d7a190814dd8a415e5ea5f30a88c7a611be6
SSDeep:
1536:pPG8M+Cc6WkiybqTozYKDc8JGGTzgwAR+g/iC4JY5d0gXPaN:A8Me6W9GEYcyG4hgT54JyegX+
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\zdVGo_MJ1.pps
|
MD5:
359571452ad8da37b5dfe2d88de2d9a6
SHA1:
2b5af5e622f19c2001fa42a036a42090c5734862
SHA256:
8e9a381d257f25d93bbad371808d7f6c7008834e65737b4206d68e6fc6694095
SSDeep:
12288:v99GfnoyThWDJVfFYWLn9Mwm9YXecxKeFU7cWd2r6x0irXkVSHDz13evhbFkms7s:41S7dYWLYoU4Wd21irjUb7Bj
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0b7yZuEwur2k\zdVGo_MJ1.pps.locked
|
MD5:
5632aa9a3bc9b873d72db4fe9d11a8e2
SHA1:
c3b4f8122e868f49a72ec1be3f8c7e7272daaebc
SHA256:
872fb87da92a68875b10bc6dcdf59928bd39de718eb2c508273c5163ce99a734
SSDeep:
1536:2S/cNBouo7PPxzSqwEcV4yIvwoDFvFhiQqtSSwP8tVl/tv7:G7XiReqw5V4yIvxpr6tAPQV1x7
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2ezMVCYWAvCkclAbjq3h.docx
|
MD5:
b09a2906ba029f17da47356c33d513d4
SHA1:
23bda0e93479ba2324da6e01d0e0b2a05657261e
SHA256:
813d06094331d88f19da3ecbacfcbf3526c1a79ee5718db056dc21c15549e5ab
SSDeep:
12288:+xvhaZzb3chXjLPV3RNMLSP80g9k9h0/hPUCYaW7yPqgnqp/il36lJCLRWcz7Xnl:GaNAXjLtnMLSPZIMOBW2a/iAlJOnxgw9
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\2ezMVCYWAvCkclAbjq3h.docx.locked
|
MD5:
ba2f2d6b0375e55bbcd7726c7db365f3
SHA1:
214e49aafe937bcd0b8655ea9559961b4d5cd815
SHA256:
b2065d88a3c32b7792d496961957a5a5923807c9527069a4a4ec16b890d13977
SSDeep:
768:RTVbYY/SMsWlZ66hFALiLpkXIVdSGwUx0shjWNhIJF:dVB/SRWljAAd1wjyMhIJF
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\8LniyxNE2e-nwscp.docx
|
MD5:
877fd17929ddd8f44ffa4bb7786ea495
SHA1:
6ab7a87c7e7b59a5ac41c0299665ea1ba51c94af
SHA256:
68141c61cc977a14d5eae996d4505424c9e22748825da110556124944a076e34
SSDeep:
24576:jIw9fF9yAVIaVx4m+Hgh6vLZXivYo7ikiNBQDn:uaavLdwy6n
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\8LniyxNE2e-nwscp.docx.locked
|
MD5:
ac5709d0aecbd502cf9f47e763cd6b78
SHA1:
19752d334a42ab830d952006fd6087c2fa52e3e1
SHA256:
b523fa0fe18afb202f6c648340b1acb88bf65ae6683364be52bf98ee01c4af5a
SSDeep:
1536:5ijmzyFpZaTbGvHMYZ/f58fb3q6mxM99QxJbz9EoCcAE7CRjN9F86gst9wTmscpS:5ijTTgbGvsbjyM990bREG7OXK6vt97TS
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9LkRW2rL.pptx
|
MD5:
b83719a1ba5db049fbbd3394daeae15e
SHA1:
f3085b0572a1057fc011d97c08468e15ac1dd5ce
SHA256:
be0942e96bac415c38cd237dcb67d59c085a7003fc836f05f5c25686f35ddb0e
SSDeep:
12288:uMk0nvmcAqaQycwDqWjyaTyoJac5rvccUf+njzBnJbOJpmP/ka8STsiUIwVYoxMs:xdvmNdHLeWLxqWxFsmkl4GKG/aYxz
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\9LkRW2rL.pptx.locked
|
MD5:
51fa1a8e79fe9f86c0f3cd164175b70c
SHA1:
a59747b3eb5d6717681a2fadde890502357643ed
SHA256:
19f7d675338e39d597543ee2d9360374d2a2e2498a8156e2fc2cc0f7052d6e38
SSDeep:
1536:baCjOaVu3ZCazUYZ2U1FOCzqdhFwq5mZFQ20XfIbMTnr/v+poRBY9i4J1lb:eK28azUspFO/3wq5mzinr/ZIJ7
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_akt2p-l8.docx
|
MD5:
2f021411fdda211e09b6d47d1f6e4347
SHA1:
75a8a08ca3cbb9f24a015435f13d9b720ed60a00
SHA256:
f151b4c93214e0eeade4c78b5a47a763f835774b852a3f2da931f87ced300ede
SSDeep:
24576:x1Zvc14h+zBtVdr+qX/pcqzgwqild/PNHvlqYQyQS:NkbDYE5Qyd
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_akt2p-l8.docx.locked
|
MD5:
e08062931b2800e9984c85719c35ef2b
SHA1:
4a91ad9a07aa686271587effc1547f3a2c8d9496
SHA256:
c25f29e59c2e16c9c7cc616447cec04f938c4389b3fd2172e8b7d47b9f817f44
SSDeep:
1536:wbzo2wYccb+g40t7ZDkbBCesOeAsHzxQ2CrlCO1We/qu/TVJAn10/kHCU:iJb+gXvDkhsOeAyQxlCQ1/qu/TrAnik
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_lqh_urTe6w3bce0L4w.xlsx
|
MD5:
a4a72fb6a780f3901ea4c28447dfaa3e
SHA1:
6cbe4195377cfc7ce04b2dae448ce00b8e2364de
SHA256:
8d8e3919a1a3bc8aa809c9adb82f1c5e89c3370dbf7c1a8a04f1c5adba406288
SSDeep:
24576:om9vBOp5awy1mWV7YJv8YNOymltVvh7TgPMHcFUwFGUMC:3BOT8TeSwFT
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_lqh_urTe6w3bce0L4w.xlsx.locked
|
MD5:
0baab991c37a138092c41f5869413f13
SHA1:
3698ceb0e0edcd6061665e7985da8214db15661f
SHA256:
fce23df22a38cd9b0c737b8e19c961547a8d5ba923907de900dc95cd95d30812
SSDeep:
1536:wy2y2ZKIkW51lyvGg13Ftt0A9JnzBK5XV1ptEsuEMzO3Y8IK+QA5EOBwCSLoLRJ:n2fEx21YG+Jzo5VZtlMC3YzK0SLkRJ
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\BJ4aafHvZ15.ots
|
MD5:
6775a98947c7b3242ab8cc3ee81f8e80
SHA1:
3ec8d2775eecca67df80474a30cbedf9e2ef347c
SHA256:
5209fbe36345bcc0a4a7d3a14e67f51cf7828378e6e9ad3040657ff78bbfec84
SSDeep:
24576:Jo398aa/ZaM1rlGmHwtX/RyuNVagwx8N6QI:y66C8XRm0c
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\BJ4aafHvZ15.ots.locked
|
MD5:
cd1a9dd42f9f1e1aa1ee576d405456cb
SHA1:
8b12542860de3c4dedb8c64eb24cfc46d51f930c
SHA256:
f322eb6b6d583d238bec7594e9d74d10bd51807f22202836ed69c07008fd58df
SSDeep:
192:bSCMmDrWKm2obqmN3U0sW507tR2MIB+fNIla61CK2Io/O2O1Wu4m7orHrgiWyWuU:OmLobRN0W5y2+Ia60yLPWhrgLDV
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\BSb1A-i.xlsx
|
MD5:
0bda6ff92de8874de5da9bbdacb5002b
SHA1:
30a5b88a1f46b07e8c689db3619de9a9321b4192
SHA256:
42009869f85dfda62d7be652b0330aef4d02b9485f5edac1248822f4f4e84ed8
SSDeep:
24576:Ee6nzLEdY2+tB6n95qtdsBUX4LOxQPONGaC1Po:2g+B6XoZc1w
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\BSb1A-i.xlsx.locked
|
MD5:
f2f90c285a708c7731ec63cb398f4c41
SHA1:
da4e1807110c472f245182e49dfee45646a3896c
SHA256:
486bd91728fcf547f033dead75a9157dc5a3a08a032971670fa547f1dd8a0e6b
SSDeep:
768:SJWjDfd9u3UDD4cYgPaztTVsV49BN9XEGtE5/Suc5jXNd3XnD2jmby6EB:WW+3r7IaztTc83vWFyjXNdHmi6B
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Da8dDgi_.ots
|
MD5:
ff7462bff7acbb6200ad203ee83c38fb
SHA1:
a6e8713466c77059176102f4fbeea13c0712ab81
SHA256:
69a2daeaf79136e38b311f917343e904bd9f51f6d22b224900ffe302311a0309
SSDeep:
12288:fQihpnR3COsaSml9fLhZfs9oROtVudxqkmLpi+2YPmZJl1ATRiU0FEuJdRFKBwHq:YQ+Vml9faxIM/FaYPOGDMEGXWob0bn
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Da8dDgi_.ots.locked
|
MD5:
0e29953b74a4c8ead905b64b5d3d428f
SHA1:
849c817e558502eae69e458003ea2b8a340f150d
SHA256:
9ebedccd356c06fc21e3819e94b2ea26f01ebd10e1e9c6474126fc91320f117c
SSDeep:
48:rwzy6s5nzLesCI6u3HZgC34Yck9eZgWXZULpnG2StBiZszTn:kzMnzPCHvBk0qpnYtBN/n
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\GblPR.xlsx
|
MD5:
2d5683a43acd20916efd18f431059334
SHA1:
b00b7f8816a8c6044b339b19a7b0d9a3cbd1d390
SHA256:
be3ace585655d9ee1f8f896ba3a8a1d1f5027c4bf2a639390502958c4629dad5
SSDeep:
24576:jyMM0aiB1SCc3nWWFjJIiU/fAHDWiQLTJ0sS9ZE:jBM0aiBEGWRT6IEpS9ZE
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\GblPR.xlsx.locked
|
MD5:
c50a3c15edb5897aab902e7ca580a9f9
SHA1:
f70172925d598943bdb4a70f458dd28680a14414
SHA256:
5ab1f54a82584a202c19c775b986529ae1e9ec29d1c3eba9cdbfa5be6dac7c71
SSDeep:
192:x5RC56ZyEKrmmAhTcvS5t4vO4PKBjPJNTf43bDaRW2Z3k44miOLJ3xl87E+E:x5RCMZ26XSmt4vTuDJNTMDa02xk44mLF
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\H0bm.docx
|
MD5:
14b8148332f9327159929f15114ab36d
SHA1:
13ceb1fb2aac020cdda86a50cffd59e3782947b5
SHA256:
345c76cf9ef693b0d4b9a4fb592ef443bac4a371045689ee28789a50a39d4af4
SSDeep:
24576:0jgUu3VmRAZfy+AovK8zXsZ6GjPw/0W3ExVvF12:0sUDSKLjbxI
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\H0bm.docx.locked
|
MD5:
eb8e326925e1d1ec1c6db635211b9c4e
SHA1:
e07dcb9558e233522d039aedb289c9d4247510ef
SHA256:
48650362697a76135c5d67a4b37505b0784591df3a6453255974642b843a5f64
SSDeep:
384:wPBnOVCI8sg+GSzOZRNqW3V9zYp332VAkunbyQHRNJAz:wPtiQ9+GAmRQWlCp3tkuu+bAz
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HNrcP.pptx
|
MD5:
d20b4a71a5cea24a1024baad7a07f2bc
SHA1:
e56149bae7c9edb10f1051a60fac4f8c30f6646a
SHA256:
ec14f364c40f9753df4805266a0c322dc556830850083f10a4e15ff61954ebd6
SSDeep:
12288:rAm/rPhUBrdLQ5J5WB9u6ApQ+K1rtvVFoJT9yog0VXVnmoFjgwLOrs1fdrly41Nb:JNURm5jCuW+K1lo9AcVX8VrwVQQZmBg
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HNrcP.pptx.locked
|
MD5:
f4fcad30487bf6c8c46f762c0b4f8ca9
SHA1:
f4ec23337d550e72e95a536c732bd9489cba33f8
SHA256:
9644c89f237e1a6148b9f9c222a2ead6d26e8044624f31a906098b798a0151ed
SSDeep:
1536:Ny7MdWCj9oC92CM8psACeVW8v/C+XxErCTKKTeKh:bVutCvsAZAc/CexEMfJ
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HTbn-meP9cur.pptx
|
MD5:
98c758185bcf1297538788e60fb23737
SHA1:
c459481c5405bdaa4925830bf8872bdf5115a384
SHA256:
6c72f3d49045a594451c3af88e92936f0859774f4818cc4c7b333dc0e4066777
SSDeep:
12288:XGGJo0gvcbMdienn8CJVZozOreB7tP/uDLdHMugGjE3rqWuLWjLGF1fuciaWHvA:XGGq0gDdie8CXiOKBZ/WgIEGpLFsFFHI
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HTbn-meP9cur.pptx.locked
|
MD5:
a5236c535e4eddff56634c6eb778c53c
SHA1:
cf0eebe4fab5cebfc012d1c7219e20efec93ee22
SHA256:
69b5079278bf61afad92ff2061a4a6963b8d6d1e4f711e4915dba47616bee6c2
SSDeep:
384:+cpqxch83Lje07A9w9PyX/wi0vVRgyYX+5eNkPmFDjwZqYswJdWR:tP83357nu/wXuu5Sk+FDMswbWR
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Ivl6.docx
|
MD5:
9a9d88ca550f467f49372483f1dcdd1c
SHA1:
70838ee834e054dcf5c77602410ab8912a18bbc8
SHA256:
1e350e511877cf813e94d3d0297e4e9b21051d52fe3caaa04cd2f4259f003b3c
SSDeep:
12288:a5CLqYFY1kVaNL68R21mrIc73Kd0k//mKH8di+vqZSmx0i6XgmoNkRyDbB/0kPKZ:y2FYaq6g2crzdyeLdi+vdXi61bkDNg
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Ivl6.docx.locked
|
MD5:
8683ca1d2e1d906878d7643e1460e986
SHA1:
4c014d9df2ac7226b48bca79b70a3013b11907b2
SHA256:
2c564699461cc71beee8c54325acfda96e22a82c810a84b74313b874ba6391fc
SSDeep:
768:fLRcWBkFvl9IHEBwjD6GMJ8GPfup/hDXiyJgL:zwFNOHEs6jJ8KIEI6
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\kj-Ny_zPmOl6.pptx
|
MD5:
3d2be6de71e7241f601a262353fc753b
SHA1:
623a543fd307f5f93a6aa9296e7f2c2d3c5d8163
SHA256:
97b2426ef171796148d4cee961262889a6f67235a227fa66fcaf346f082815b0
SSDeep:
12288:WqOf0vKdxPUbvTFKnC8szEAvIGtyejy5RhDg9vFKWnsgT+Ivt6hIoKJSy:WJxDIvesb5tyejaK99KWnsgCI1+I7My
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\kj-Ny_zPmOl6.pptx.locked
|
MD5:
efa15dbbd32f53dfb4e68d185bc7781b
SHA1:
ea1bbac2cf89bd92b06729e8bbddb04bb56d4b54
SHA256:
9d2053c50706f92f1374182239acd37ea366084f427c770c34ab0e4853701525
SSDeep:
1536:XI8qx7onnf3oS5xMp6x9UAofPj9MrQBAcxy:XI8qE3oQK6vUAGMrQBAcE
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\lX_YQ8YOrrB.docx
|
MD5:
038de266d6f003604721223e9e2f1897
SHA1:
11f39dc72c572a6713d6d4c49ee24cec25161a70
SHA256:
33679ba730f0b5f7452ca51afa92313dd0ec56002203a05a1bdd96e7503a525f
SSDeep:
24576:P+Qllq4MK9fQWzV/WuP0cTcxQrxx2jqXxEkahLsDCA2II6:PxJlx+rl6DCAvI6
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\lX_YQ8YOrrB.docx.locked
|
MD5:
e5219ac0f0a6f9395aa2eca1f755a9ea
SHA1:
05c28ae7a47f75a015cd527799d788e649f70c72
SHA256:
99e4260a5cc255674fda71d026b1c35d62cbf3380cdd54a94b62cef65e3e8d74
SSDeep:
384:aqyau5ZuZozK64/pDdr/DHxfCHvT9pLccQa+Bfd7Eos:D2wsuVx9fC/Lc9ayd7Eos
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\96cYvgj8H.docx
|
MD5:
8c9d3e69217acc811bf4700495dafdec
SHA1:
ad219a84a4420841355c0c9d970f99cacdd39214
SHA256:
d2ddda91eddd20e3f249010a0e5ee63b1168087909749fb8bf55ef2bba76214b
SSDeep:
24576:XrTRyiurgggBu3Gsw9SuS8OTUGMBoLlGL4ybS:5AIKDJ2S
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\96cYvgj8H.docx.locked
|
MD5:
af73d8ab141e2bc3c272720481891f49
SHA1:
333e31c36829af7d7748f5b6509d37085d38f166
SHA256:
b27437d26620f2127e4ebf7f652eb2603137a9657fa299ff5b26e88a7ead643d
SSDeep:
1536:YWX6CdG77S5eCksUmvL0d7U9+Rj9isGubcw+lDpQTXqj9Mu+sw/id:TKCKCeCzvQi9+riLu0Np6XqpMl3qd
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\IDxpARX2VeyVm-H34.ots
|
MD5:
91f754468a48546583c70e1f47c2abd9
SHA1:
c55616daaaf4b6686eb757d268347f72b42299a2
SHA256:
d37bbdefac17dea740042e48d7a91a809e6c3e03f27123e475dfe30a4e3bd41e
SSDeep:
24576:xH2SeM7Nv70XHB0I74Y8efMot5+1Mn+06H75Czzl4cI+:xF1cKg4AEoKMcUC2
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\IDxpARX2VeyVm-H34.ots.locked
|
MD5:
4db6a25b1736d287e3b8c9a86e823896
SHA1:
9913edd5f06f325b03623b9b2fcc5efe15387265
SHA256:
2e92f1f46616e46561087322590e8185ba98b8e95f16f5ec1bc87773863a5efc
SSDeep:
1536:9JuUTP7pROR2yUeXSNN5PtpJvxukNDJwnrZ3rma8+9/wVpQBNlh/zfxOzST1:DzpRORhQvPXJ53DwqKYpuVfxaST1
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\IsVV7zX8bE.docx
|
MD5:
6c433d2811973588798e6c432a8d9fc3
SHA1:
0d46a5f9d59ef53b6c7436bdfb01e02810b85909
SHA256:
fa50264af1f1a5647287b94c07b421848b0caf19172553b18377c929d8d01e36
SSDeep:
24576:3rQXgMHrE6+DEclyJqYDf2amZ1dLMW7oRKjQW:DML/MueDoRI
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\IsVV7zX8bE.docx.locked
|
MD5:
380719b25c5ef6729db3f1ff9367e5e1
SHA1:
d2486c485f3dff3cfded436c7d5181da865700e5
SHA256:
88773a99b688592a6461bc51ef05de4d240edecfb57e573a8f5faf1df2b8ac5a
SSDeep:
1536:gCidJ6eM3DWCbq60mmKSkqd9vCQDaHc6+J:gHM31q6DZSkAa86e
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\xjaBorv0sdvvQYK31l.odp
|
MD5:
b509aec8facd45a85ab7049c7ea08948
SHA1:
211816292dd105354da3b1e3d81768d0a527633f
SHA256:
3edc8cc48ea01e0a870f6d972bd140ef44b3fbf0786b0b895eb70d27fa7cae98
SSDeep:
24576:iDd0cJzrtYV0OmhUU3E6qBuYhg9qD9G8j+K+m020Xy3h:afZnC+KG4Xp
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\M x835\XCGydrGruuIjtxTI\xjaBorv0sdvvQYK31l.odp.locked
|
MD5:
869f7fd012ec00f18850f756c0d10704
SHA1:
e9793347ff04e993b083560f1e4729eab0ad3d6e
SHA256:
6642b7ccb299f04ee1419c64bba1e0ee4db91eea81b57231be5c169659eca8c7
SSDeep:
1536:T30Zkndd59izocstM63YZA0Kz1dU0+LNjEAZ2pxDQ4e310hSf67Lah:T3Qknd9xcsu63eKBAEA+Q10Qe4
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Music.locked
|
-
|
Access
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\_private\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\My Shapes\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\O61ONocbtu__NDZT.xlsx
|
MD5:
ab2904ce56afb84b1e0dde8a7211907c
SHA1:
9e858be72a4d5e7194e2b6e62f67dbac2f44e416
SHA256:
5d9fe1cdf1b51e0a389b086163a4273b7217f003fc8b814c6a6c088efeaa83b6
SSDeep:
24576:rFxQg5EmRdZLeuDMhFcvD2f95lEceS3T96:zQGd7hQU
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\O61ONocbtu__NDZT.xlsx.locked
|
MD5:
da9174c90be86416c19b6a5fe7083a58
SHA1:
077e43acef2284d98df99b4a1cfbc40862c12e93
SHA256:
7e6e83f418267af5e617b5f7a403ef35c7b5c24b91c550565c25bea7ef18ddba
SSDeep:
1536:24jIp+yjzU5j/7IqglPSiTXtG5h93LjUAtv1ft2mP6L7B90rRgiVC:2zp+yE53IxlPSirtG5rrvxPu9qRZVC
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ODDBujQj6.pptx
|
MD5:
21879e180839d7163c30194f5f708423
SHA1:
5e9ddbda6cbe1a947a69467e3492f998bf320c18
SHA256:
405392f757e01476300a5851553d67f76ed3cf887bd1d4457de479685bba9f9f
SSDeep:
24576:TN6ZTWLRK5bKfCLshnUy4Hjm0YYvwL3kwzNZG9rC29d:pYBwhUyBxYY9SrCa
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\ODDBujQj6.pptx.locked
|
MD5:
b3ee2385365ac567958c364c5f785beb
SHA1:
9b83c530d0a249646653999a2f73cd4a01afb175
SHA256:
523745980aa4237077ed8a15c083b028a8ab87193533106eea0e5fadd71d470d
SSDeep:
768:8b1Ar/EM3kzFSvIEWhjCaBsTZHrPXYE00po97v:8b1ArV3kzFiIEWhjcTh7I8o9L
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst
|
MD5:
d0df6bd4fb2181a342862a07f3b6e2ed
SHA1:
7522f00372f27673bca93d7361f240e4b893fd40
SHA256:
f72e64536577dd75cedadebe814892f6391fd6386a16779454ab8a6641a5bf9e
SSDeep:
24576:oTuCTN1YZ8c3r1B7A1LIY+9SCTlXdeEUktPC9:tBS1LiPXPu
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Outlook Files\voeimd@djhreuu.uhd.pst.locked
|
MD5:
38f5ba7682e5955130e6d94bde253e83
SHA1:
07d7f89c7332f6d5f468c82bcab15325b6f3314b
SHA256:
56d85ba37439d092bace76f266098d1cd3bad7018cdd2d5631dabe8cd979cae5
SSDeep:
6144:mnH/a8Xx1L2S7juKgnDnGmyHYo28Bf///J9zhBU0nTkwXZ:wHyoLv7j7yZgVZHnzheYkM
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\pgTrPSboT36f6A nXL0.docx
|
MD5:
68c7a59683f5fabd8152bcedf0605351
SHA1:
cb9bc47711d229aed5ec8fe233ad1d9bf7393c96
SHA256:
60e1cc056f1b108001eaec5f947181e09905379784efde242387a768fbb01880
SSDeep:
12288:W9Vh77d5Fw5INBCgB9pOPGqeGfZl5Pf+Q1qrV77yKz3p0auKuUeOPoysVS6Egh:WnhJdeWqeSZnfN1mVa05xDe6pkJ
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\pgTrPSboT36f6A nXL0.docx.locked
|
MD5:
18bb0184eefc65bb9c778bf84e8de7d4
SHA1:
3e0a71aa3f9cb07a16cf035e7f0df66013e7538f
SHA256:
e0ef8a00cb78e7d8fa5ac1d167619afb94506785f99af12da8380253ab962b48
SSDeep:
1536:786U+VFfJEiKhLK9znHUJ4v46r4/neIhjjFnMpq524PP:786dTBEfK9znHK4gAuJhNGq5Z
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\R7Uvq6.pdf
|
MD5:
cbbfd778a031541a57b4a624cb8f0966
SHA1:
546bc0e33350ff5d45357978502a574ecf323e0a
SHA256:
d1c11926486829f011ef4d9990c3c30d286c08f85de4e5e04b6a878874c6f3de
SSDeep:
24576:SjLK6v/42bF0byX7MSL7snqDSuTP8LzdmwVLAL3+Mkbb:SXoUocFmuT8Lzh2L2b
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\R7Uvq6.pdf.locked
|
MD5:
baf62e54d0e506866d6576a298727477
SHA1:
aa5912039e02ae7c9f66456cd4856b18708b06e4
SHA256:
686adbec4757029443618c195f42f059d3754a720bf97a08df4b88b1b3f28fa8
SSDeep:
1536:otDYU2j6lJ7KB0675Z4WsqC3Gg3UlEluNGh0Z+waseavDWb8DTBZUKvUmdJ8dXcg:EYLj6lA0c+V/4iuULftb8HbBDAqg
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\t7HMm.docx
|
MD5:
da24ac23cbf96b6e3ac00c76892afce9
SHA1:
517412f100b77f39fa96e83f1337c0c7d2494bd5
SHA256:
7b4775d3bd53dc2e220432e4f6564a6c63b844fd8db4e2e878e17bc98a30d913
SSDeep:
24576:iaNNU0vwmFp6EzIG/P7E3YpdXeLLHIUfc:X16Aiho7
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\t7HMm.docx.locked
|
MD5:
86b498e607e0ce8f340da3799fb1b49d
SHA1:
f6ec65b4e796fdf7626f58ca2f66e797d9ddd73b
SHA256:
3e55bb7ee088a8ac1674025cdbf7b96ec08d3e5ebf998937fc186e1487d59eb4
SSDeep:
1536:/5M7xdOHc2oi9cXR6UJ2rcpIdOwf1evgDsngcMSp4Z5zdbCKzuSL:/27ryc2Tch6UggVaUvgDYgD5zOq
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\TGaieR2KteUuqJ6Eyu.xlsx
|
MD5:
c3fbfe0f55d91da559cdff3cc32a31ee
SHA1:
9088a547d552b7644eaa52ee1d54aa1cd889cdfa
SHA256:
93975bc8e5cfdccb7806f98e570a5bc8500872c909a02af1b49901fac4a72474
SSDeep:
24576:F1iMYv3wSbUr1IXo2j3Vn5LNok94ixZUDF16/vTW0:FYat0ap4l
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\TGaieR2KteUuqJ6Eyu.xlsx.locked
|
MD5:
4e4997d7ca1ac497fdb5fb25ee753e2e
SHA1:
ad84b74d78e1e9a10944b8df8d2070b6bc98ce09
SHA256:
5386161ec072c092b285ee7b8eaa0398dd307e045bc4e48ee6399dacd15bba3b
SSDeep:
1536:6nSRU6zHMwrcpHJtJG06RwHLxKz/rzUhCz1JvDLH+CQjcbN0H5tCoY:dRU6rMJXGzRyxKz/nUhCzadHH5IoY
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\6BZCz.docx
|
MD5:
12a282021424fc1cd541dbbfdd9c476b
SHA1:
e830e401a49c9051a288de46f44f2bf2edf49e3c
SHA256:
7a077d93e87e6cb78b82577a604b9d3c717ae98792f61409ab358d22da54fad6
SSDeep:
24576:b9U5pMqnxb9X98WdpwYIx48FCWpKyYb1LYVBy:Jk9KayGYDy
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\6BZCz.docx.locked
|
MD5:
c86520cff257acb0bb99274e318b9c1d
SHA1:
ecf6f33a016b80c546cfb2c59cf93da9f3f3457c
SHA256:
d4d0f265fb41fec3259810718c10bea7ab16f35808d246b56b068682432b2589
SSDeep:
1536:SV8oi3T7yqbDnNBN1inHKLArwhpyd1k8tbY78hzj:JvyuJB6HKLW2i1ksbRzj
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\chJ5ibzvS1 nCo.odp
|
MD5:
aabb5f40eb63a6ffccee7c411ea98b25
SHA1:
dc34ad28bd44b615afd77db76891a18008d954e3
SHA256:
672d0f59233d848083cbcdca366da34e81331379f005f5f2ffac44c4757325b0
SSDeep:
24576:iukgu2ti5HYA1gQozeGWFpKQdgbyOd0MPE:E4sjZZ7XXuE
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\chJ5ibzvS1 nCo.odp.locked
|
MD5:
c07e9891208d45a04aba5294e0328665
SHA1:
2922e1e7ace28845dabeaf8edbcc70e966df5cbe
SHA256:
e0e534058d135adbb07b9af59b19a35a2600a19335eada08874345e23d39c19d
SSDeep:
768:jimQDKeSXTWS6bIZbeKXCl0sXAFMRJF5pvt+c1vRGGYm5f4QGn3kA6tY8tnuy6:j6DhwTgipCl0wAFgFrvtBGGxf4/T6De
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\HDcC2t0ljwQ1.xlsx
|
MD5:
7591e0eaeb0bdaa85a8b8381116a67bf
SHA1:
031bf646abf9e19fbdc338b0eee944c9852719cd
SHA256:
835ce9f3a267ff9fd6fd5bb9c39e0382b8016ff030286788739e82943d69cde8
SSDeep:
24576:cPPoKU78mnkPzWxmx/SMs2SYmEMiTmKX7QMHkDUWctk:SBbntFBXk
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\HDcC2t0ljwQ1.xlsx.locked
|
MD5:
a5bb8f12a69bf5139bba7be05cfe8ef9
SHA1:
160478bcf8c7f55c4d5b9287eac6b6073ffbf0c1
SHA256:
d30859016291f25c7da48fa25075327a6669273a6c4385e8b81afb23ae075d93
SSDeep:
768:M2Rlp+lBfPduZKo/cIV82D+R7eQx9cFnVT1kISrzPxpF7BVk9Q:M2Oluco/cIx+RpxMVTiISrzPBNVJ
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\oYKt_R0Y_b2xlgmA.ods
|
MD5:
90db5039826ee296d0cace080051ea2b
SHA1:
89dd6140ca57ce1bc9d9b140dc670b183ef2e636
SHA256:
fc3ca701f99f95074efb5ec70faffd757e4a49e85282f8b960dcf6ff61f265b5
SSDeep:
24576:8KpSX50jpEu/ZzPn6l8n3Pq4BgRSM9QlsS:N97bnHfdQisS
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\oYKt_R0Y_b2xlgmA.ods.locked
|
MD5:
0518ab3a4ba79e866a742ca1bb1ffae7
SHA1:
6db5e285bb7133895aa289354d4a6c68f773ced2
SHA256:
5af9b0c21018054d570bb49929e69bf996d27cf17ec043782190b20f1c3ad9d9
SSDeep:
1536:N7s9oatX+tbiQmCRR/ww6Mu8kurM6XszXBQNjcuu9WneT+FrZ47vn8Sw9SVG:Zse8+tOCRR//u8kurMAFjfu9J+FiDn8h
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tV Kfx6dmkWrB\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uUisxR45sQ8rT-ppG.xlsx
|
MD5:
6097c34ff6ded32589fd3b65f7185172
SHA1:
97cd13eaff569852be9b0e07a9f60f563efc52b8
SHA256:
d529e6b20be967d0e0b3438fd08e264ae8b078440f4a5e1469155a758e4fa676
SSDeep:
24576:LTsWFWQQRsNccC4kU6fWI3lqF4Ywga6gw:cNxRdx0h
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uUisxR45sQ8rT-ppG.xlsx.locked
|
MD5:
78c978f32bf5d1b55386ebfb69d347e3
SHA1:
9e2372c0c8f9d6d23d1f01d56b52a455925a06fc
SHA256:
42613dc7688fcb715374dee46a6938a5070f347801dc5828bb09b0b3fa102f7e
SSDeep:
1536:f7/vOjZAplybNAzZJFLasvFcjxyrL2Bsmc/TZgTcwhS0:fb2ji7yO/FLJF1rL2SmcLUrN
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VaIk2OY.docx
|
MD5:
ca2d0cd38ac6e95e6a004aaef2e72e18
SHA1:
9c0f5af353d4885726601d0885cf54d1293a0d68
SHA256:
873d4b98c114a51db8e27828c8885c16a90325d5ad588c0ea2f9e454879f3c20
SSDeep:
12288:EPW1O0OXt/MnjR39oqLYKM4aw/amd+KC2qrJhhEBFeQVtuvT4EXqsi2KLCrkLBlr:4W1O0OWR39dMqarmCrzSWasiK2ggLX
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VaIk2OY.docx.locked
|
MD5:
5e43c20779fe28df093229d62186e43f
SHA1:
148acd5982a0e07ed92d1896c273edaf88881f11
SHA256:
594bcc6b4b4bf6b6c42b525b9dfa83644cea6c739d6189ead00cb7aa3ec7c74f
SSDeep:
1536:JFCQvXTaJ8sgiHyVcSOunlwxNoQrTsfMoCt9OJ7X4q6UnDZuaU/5:iQ/TMMVcSDnlwDbOuqpDZbU/5
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\zdFozK6ayY_Zy.pptx
|
MD5:
573b28716e27ada092e990485ee493fa
SHA1:
0bd0a00ea2fdb1a6e3523ece33bab2946854c6a8
SHA256:
f820d57cf49e0532f7f1ffc8d1151d4ffff0f701e6b2da96444c42649bbe01da
SSDeep:
12288:pVAZnJVLyA/mCeB2EeGADM7cmorMmo8XezxgE/l3HA73tabShnJAb5sNW8bo:pVAVmseBNPEMPorMmBe7A7QbEE5mbo
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\zdFozK6ayY_Zy.pptx.locked
|
MD5:
f23d9ee44384512e929b5b19ff9d50e0
SHA1:
1cafa14feaef19b336b4e374d15567eddc542781
SHA256:
75cbf801fd1d6d3bb5cf0d895edfdf7e05c43badf881b61f90631ad7d42ae414
SSDeep:
48:R5l8uaIy4hoAsaFRN8DhuiaS2IB8OWfIqtx0:fxly4jyDhes88N
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Downloads\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Links\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\Microsoft Websites\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\MSN Websites\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Favorites\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Links\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\0dEwy6YvrI.wav
|
MD5:
10d1edceeca24ef37d5c98dc18719bfd
SHA1:
682f7e5364c25db90f58bb369227c684d4399bea
SHA256:
3e27a1f5a9f0c805dae8897d360a084e91e331357b6da67039a91665f0c24e7b
SSDeep:
6144:eNeckZNgt4LisggTZXPMmUs3E0Ah34q4oYynUXlIO2n+hlO+6q:kqgt4LisgoZEm2Fh3coRnUXlIO7lGq
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\0dEwy6YvrI.wav.locked
|
MD5:
aaa50162a9520c824b0ee2d68dbb16a8
SHA1:
73746c5abdf6c636758e3c2d832bf62a54020a45
SHA256:
e553d4c810c5200d8e6e2b208b9e02aa1bbcd615713e43d41c2b97643a6921b5
SSDeep:
768:6iydR90Gl5VDwxjtZ2kFjvs076Rrni00Nz5clqlX/u8hlLDJh:6iyr99lnMxjtZLhvF2ni00xFLlb
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\0xXIC.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\0xXIC.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\DVQbLZ.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\DVQbLZ.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6k8.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\n6k8.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\0X2ddiZVs4DA31PQ7.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\0X2ddiZVs4DA31PQ7.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\5GnSgFoO6HV6A.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\5GnSgFoO6HV6A.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\_emrODG-qiiwrh.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\_emrODG-qiiwrh.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\C7wKyt6uESFEB_OLc.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\C7wKyt6uESFEB_OLc.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\FuOBRNKqbhD8.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\FuOBRNKqbhD8.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\oUL3gS.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\oUL3gS.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\V _p1.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\V _p1.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\ymfb48 fq6zs9cO0jAuB.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\ymfb48 fq6zs9cO0jAuB.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\ZHpGGF8Rtw5.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\au7kDC2G bV\ZHpGGF8Rtw5.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\fMrrxzfx.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\fMrrxzfx.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\GabfUQbk4lRt-7N9tulp.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\GabfUQbk4lRt-7N9tulp.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\H-FMGElX5s-jzYkc.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\H-FMGElX5s-jzYkc.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\HAa11-LRNJs0oiWXj.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\HAa11-LRNJs0oiWXj.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\PVH CWFN.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\PVH CWFN.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\w uiqJkqh2lm nTkN7.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\w uiqJkqh2lm nTkN7.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\YXzGa5H.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SjDoTknM565rJ6a0M\YXzGa5H.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\tAOoqBFD.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\tAOoqBFD.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\xyXHyxHSO10IhLMy-alF.wav
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\xyXHyxHSO10IhLMy-alF.wav.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\YO9K2KJd_mqp2CBdq.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Music\YO9K2KJd_mqp2CBdq.mp3.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iCy eW82Xan.bmp
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\iCy eW82Xan.bmp.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LH5BG1yA0G-9e5N7N5f.bmp
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LH5BG1yA0G-9e5N7N5f.bmp.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\O03_jJ7.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\O03_jJ7.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oghf7CTDWaCu.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\oghf7CTDWaCu.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\sBeamESA1.bmp
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\sBeamESA1.bmp.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\2d1KK4zn 7eStw.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\2d1KK4zn 7eStw.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\48UgAvz.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\48UgAvz.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\21PglXSsqt1Ns.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\21PglXSsqt1Ns.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\_nC9ZF-yUPo4fu.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\_nC9ZF-yUPo4fu.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\aLvps3kGtPUJ.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\aLvps3kGtPUJ.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\DCH7I0IJa USVCZzKCrJ.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\DCH7I0IJa USVCZzKCrJ.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\Dz4W7Gc_.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\Dz4W7Gc_.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\jG0RKtn2lZ.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\jG0RKtn2lZ.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\sfDKGBTbDaALDF.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\sfDKGBTbDaALDF.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\y-mORNpeLCQ.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\5iLB\y-mORNpeLCQ.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\cDRp.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\cDRp.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\0yFiTLFdz.bmp
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\0yFiTLFdz.bmp.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\2_fuxQwn.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\2_fuxQwn.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\7R1tAmtCqyCorI12d.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\7R1tAmtCqyCorI12d.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\mRYIUYmlUsjiQNuuTK.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\mRYIUYmlUsjiQNuuTK.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\o hGZY.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\o hGZY.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\p9RtToreFnLqe7_VLrP.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\p9RtToreFnLqe7_VLrP.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\R0pl_9DeXlU2-E8Am.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\R0pl_9DeXlU2-E8Am.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\S CKAarBCI-ODrfqgT.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\S CKAarBCI-ODrfqgT.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\zkAsIgo4u9jzq.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\0uoemulXZcC2W\zkAsIgo4u9jzq.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\fdYVc.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\fdYVc.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\VRXyyi5Zpips.bmp
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\VRXyyi5Zpips.bmp.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\Df16r.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\Df16r.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\Fw9s0O30zHh.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\Fw9s0O30zHh.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\T42O.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\T42O.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\WXJlaLjGQG2cKyRu.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\WXJlaLjGQG2cKyRu.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\8 3SZlyXN4cgy4BuhKsE.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\8 3SZlyXN4cgy4BuhKsE.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\t_-b FXN3HA.bmp
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\t_-b FXN3HA.bmp.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\wKRksH39VJsdMgajccV.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\wKRksH39VJsdMgajccV.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\x59Yg.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\wC-7esagT2iW9jZ\XQOjiYmCFyrW7 jaaO\x59Yg.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\zaI_RqOJ.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\zaI_RqOJ.jpg.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\Zq4AW_StLUTT.bmp
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\FMLmET4Sg G3II_Df-\Zq4AW_StLUTT.bmp.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\jFpkoaQ.gif
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\jFpkoaQ.gif.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\Jk6miBAq0k2.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\Jk6miBAq0k2.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XzNmy_ZGgk2C\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yqg2GNIEh9P9Z6 EsuF.png
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\yqg2GNIEh9P9Z6 EsuF.png.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Users\5p5NrGJn0jS HALPmcxz\Saved Games\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Searches\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\-jhy6DRTL1p.mp4
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\-jhy6DRTL1p.mp4.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\0fweZKaQjTJE.flv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\0fweZKaQjTJE.flv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\JxWkifB4nt1Zy5N.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\JxWkifB4nt1Zy5N.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\pUWvywyx e6d1hJdlZC\8LBsWw4IoJ9Mj.avi
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\pUWvywyx e6d1hJdlZC\8LBsWw4IoJ9Mj.avi.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\pUWvywyx e6d1hJdlZC\OI0076.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\pUWvywyx e6d1hJdlZC\OI0076.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\pUWvywyx e6d1hJdlZC\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\pUWvywyx e6d1hJdlZC\sreeqraLHsVBc.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\pUWvywyx e6d1hJdlZC\sreeqraLHsVBc.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\YAeGaTFk9WVd7y2KZ.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\02BIPRezhqv\YAeGaTFk9WVd7y2KZ.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0mPgSha_hglqPG\Ob8uJ.avi
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0mPgSha_hglqPG\Ob8uJ.avi.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\0mPgSha_hglqPG\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\bwptlErK5XIm.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\bwptlErK5XIm.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\L4_0PeYM8O-g8G3i9wbr.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\L4_0PeYM8O-g8G3i9wbr.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\PHtfiAF2Y68WOxxhNR.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\PHtfiAF2Y68WOxxhNR.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\PQU_P D6rg0Y.avi
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\PQU_P D6rg0Y.avi.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\PSCXFQWwgvgRgf5llE.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\PSCXFQWwgvgRgf5llE.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\kzJ A9XwU_FM\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LrgnJpWc.flv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LrgnJpWc.flv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\1ljCgU.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\1ljCgU.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\_OXeB0meli.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\_OXeB0meli.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\Dr5v8NEpKHNjV8v.mp4
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\Dr5v8NEpKHNjV8v.mp4.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\JlS7KdL_eYXZ.flv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\JlS7KdL_eYXZ.flv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oa9wW7mzAoEMfD_\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\8kK71S5-r0 UhPW.avi
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\8kK71S5-r0 UhPW.avi.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\DZNvil X.avi
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\DZNvil X.avi.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\pBm0aoqTwJe LMat_DX.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\pBm0aoqTwJe LMat_DX.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\QxTVG7m.mp4
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\QxTVG7m.mp4.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\PYHBzCZ\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tPuGW2kfjIHMCL-BTu-\4crjn z.mp4
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tPuGW2kfjIHMCL-BTu-\4crjn z.mp4.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tPuGW2kfjIHMCL-BTu-\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\v4saVJ-XFY9t5.swf
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\v4saVJ-XFY9t5.swf.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVfiH0sy.avi
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vVfiH0sy.avi.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\a J6zB1VWtNRm95H47.mp4
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\a J6zB1VWtNRm95H47.mp4.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\k1rylHtR2wA3iJl8.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\k1rylHtR2wA3iJl8.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\README.html
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\SzHQPH.swf
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\SzHQPH.swf.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\Ze4t1pRM9LC-S6g.mkv
|
-
|
Access, Read, Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\YNBgt-gOv\Ze4t1pRM9LC-S6g.mkv.locked
|
-
|
Write
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\windows
|
MD5:
f91487c34136410f8b7dc01debc65dc4
SHA1:
580fd3de604bb7861b313e477417d06ca325ef93
SHA256:
6383a556fa0b72aa16f6f27e86dd7b66af1faf35c0a23cc3d505e5323d470347
SSDeep:
48:uTb/0UXSt/i78DLUub0me1SGiLHQ4Ednwh:q8QC/i70LtIme1WrqO
ImpHash:
None
|
Access, Write
|
Dropped File
|
C:\Users\Default\Contacts\Administrator.contact
|
-
|
Access, Read, Write
|
|
C:\Users\Default\Contacts\Administrator.contact.locked
|
-
|
Write
|
|
C:\Users\Default\Contacts\README.html
|
-
|
Write
|
|
C:\Users\Default\Desktop\README.html
|
-
|
Write
|
|
C:\Users\Default\Documents\My Music.locked
|
-
|
Access
|
|
C:\Users\Default\Documents\README.html
|
-
|
Write
|
|
C:\Users\Default\Downloads\README.html
|
-
|
Write
|
|
C:\Users\Default\Favorites\Links\README.html
|
-
|
Write
|
|
C:\Users\Default\Favorites\Microsoft Websites\README.html
|
-
|
Write
|
|
C:\Users\Default\Favorites\MSN Websites\README.html
|
-
|
Write
|
|
C:\Users\Default\Favorites\README.html
|
-
|
Write
|
|
C:\Users\Default\Links\README.html
|
-
|
Write
|
|
C:\Users\Default\Music\README.html
|
-
|
Write
|
|
C:\Users\Default\Pictures\README.html
|
-
|
Write
|
|
C:\Users\Default\README.html
|
-
|
Write
|
|
C:\Users\Default\Saved Games\README.html
|
-
|
Write
|
|
C:\Users\Default\Searches\README.html
|
-
|
Write
|
|
C:\Users\Default\Videos\README.html
|
-
|
Write
|
|
C:\Users\Public\Desktop\README.html
|
-
|
Write
|
|
C:\Users\Public\Documents\My Music.locked
|
-
|
Access
|
|
C:\Users\Public\Documents\README.html
|
-
|
Write
|
|
C:\Users\Public\Downloads\README.html
|
-
|
Write
|
|
C:\Users\Public\Favorites\README.html
|
-
|
Write
|
|
C:\Users\Public\Libraries\README.html
|
-
|
Write
|
|
C:\Users\Public\Music\README.html
|
-
|
Write
|
|
C:\Users\Public\Music\Sample Music\Kalimba.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Music\Sample Music\Kalimba.mp3.locked
|
-
|
Write
|
|
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3.locked
|
-
|
Write
|
|
C:\Users\Public\Music\Sample Music\README.html
|
-
|
Write
|
|
C:\Users\Public\Music\Sample Music\Sleep Away.mp3
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Music\Sample Music\Sleep Away.mp3.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\README.html
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\README.html
|
-
|
Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.locked
|
-
|
Write
|
|
C:\Users\Public\README.html
|
-
|
Write
|
|
C:\Users\Public\Recorded TV\README.html
|
-
|
Write
|
|
C:\Users\Public\Recorded TV\Sample Media\README.html
|
-
|
Write
|
|
C:\Users\Public\Videos\README.html
|
-
|
Write
|
|
C:\Users\Public\Videos\Sample Videos\README.html
|
-
|
Write
|
|
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv
|
-
|
Access, Read, Write
|
|
C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.locked
|
-
|
Write
|
|
C:\Users\README.html
|
MD5:
49a8b7155eddf63c866eb42fa50f6b25
SHA1:
40316df3ba862015f3f31cdb5ef91091268c6d0d
SHA256:
5c430657827602280c4c4eb41bfd10e3eb71eba251d52b53e092a33be1c05594
SSDeep:
48:TGuuHVzxTb/0UXSt/i78DLUub0me1SGiLHQ4Ednw8VJ5EnZ1hljHJmbKVY:TGuuHZx8QC/i70LtIme1Wrq9GLhl7Eb/
ImpHash:
None
|
Write
|
Dropped File
|
C:\Windows\system32\cmd.exe
|
-
|
Access
|
|