Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uni.exe
|
MD5:
8116e91fec95489c642bd30a402960ba
SHA1:
fdb6f8c9e8487c06290efb68bec7617ff93bea2a
SHA256:
5435f4769f88fa3fb5f019d1788c78460fd974a3f1827e46d29d75c6fa5d81bb
SSDeep:
3072:vlqQsr2q0MSbpl/d6RfXpSWgIQROb2ODLx0lB+V7LAoeLNgJqtcQ:vPsr2q0MSbp+RfpXgFOXfV3kL
ImpHash:
45568e98a1cc4e7cd5f2271cf74bf160
|
Access, Create, Read, Write
|
Sample File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab
|
MD5:
fd43cf9a73846fb74bef0055b378a407
SHA1:
3c346ceca5266c3fdd4556fa3d87d06c34575c44
SHA256:
72ee2d7da07d31e81b6597144eeaabeca003a6ba9dbb1ec41cd9e9b22ebb2b3a
SSDeep:
196608:JWazG9JBMPunIMDcG6GJBdl8pFfpsY/T+w6yUsy7PXey7hlyZH2rp/:tGXnIMDpjvYfpsGT/ezX7DyUZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.un1que_readme
|
MD5:
dc340fec6221653983b002b81954acb0
SHA1:
9a244cb7a589ed2f60c439e32d6972ac5ea10743
SHA256:
706a40ac9aa0776db6c3122c5f964ef94e68f1c42289181417326ae5d523372f
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO2vLHYhwTjfodxUB2vPNOn2Cf1OFidY5gCC:aGXuHrSCTNblX2DHdTjQEionFyC
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi
|
MD5:
088563d613b490d47ad31a54ad4d3581
SHA1:
ec4993177416f1e250a12e30e1af41ca95d8a2b8
SHA256:
b903e37206f2789d99f0da8aeeacbf7b4007a8b4ffd8a963e63fb37cffea32bb
SSDeep:
49152:LY56gzmF5iMsOsT+heukAaQeImlHEzJUrVlhfyhbC8eDB1Sv8EjOU+kXuI:856gKrUT+k9A5FtzJklhqU8WmjWoj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.un1que_readme
|
MD5:
d5da857c4254f72459c55886ea6832e2
SHA1:
d8806b7af2b5ee034ac3e18c6c91221f2dd0589a
SHA256:
5e0007e40dfc63ec266d6906e8171f9eb69116069a701c2c7dfabaacceab4f84
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOgvLNeg5/ZR8IgFGCxM+6pRVjouD:aGXuHrSCTNblXgDEy/rgFzxM+wR2c
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml
|
MD5:
07aeca3e6cf215135e78730eec48bb95
SHA1:
792a2d17b130788cb5de9dab41858480e2c73204
SHA256:
bc276c55eb524738f80c7140ba79d2369c470d0709dc2e5cf37108a80b31975f
SSDeep:
48:aj092HPWaCeHmURWcIkJbJPhrzuF1PJ3Dacn:aI2veg+kJbvrz6PJ3Dac
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.un1que_readme
|
MD5:
ead3ec4e0b8e4996eec61205e6011d81
SHA1:
31f76a2d6e8895759059185d43c65c9aeda76d17
SHA256:
3422caa62a0a82a0394e327a5b6959ab09c22e77efcd50a3d87c6ccba9ce59f9
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOYvL5yX3F5AlvdGfO6RVrMv+M02db+/I:aGXuHrSCTNblXYD5MYvdwO8xy3
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
d0603829da47593e147fd28cbead07dd
SHA1:
f77e7742f249ab94f31904fb04ff17e79809ef4f
SHA256:
2a681a1999d0160b3aa91dd8ddc68376285cd4e4e8c8a6e8b1b6cd8b1104b47e
SSDeep:
48:j2C7E05TPqHbGjzQpM6qxXIIvgFwvr7Ix83lT0nh:M05b6oYNqxXIigFM7IxEIh
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme
|
MD5:
a6c1191e3d84750a6990529d203b4218
SHA1:
66a1ceaded0ee2e8e573d5be3249bc30ddbc1dd3
SHA256:
2ca85ed7882430ca3a51e9095f92f0257a4192480f13dff18daabc7259a201cb
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOhvLgrZTVjjkHe65hrshUovHv//hKmXFPZD7H3Ca5+dn:aGXuHrSCTNblXhDgrMHecrsFnEmhVb5Y
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi
|
MD5:
645248505af5e625d09a302091d38a5b
SHA1:
1f22446176f609d746f5d817f9a58582c78e142c
SHA256:
1778d87590555eb59fb8cee46959269fad8c56beed1a12019f58028e4876730b
SSDeep:
49152:S/PZtlguhOy6MM+US1zaPWqh2pQYF3k2MeiF7F9mx86:S/RtR6MMi1zaONpQ8m9+86
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.un1que_readme
|
MD5:
6503d1d2cca1bb00115f4e30ce89a07e
SHA1:
41fd47765a3739774e42943e1046ac4db884dea0
SHA256:
cb816101ebc2ecc1f6b9b57e8bc5188e0354b5a4c64faafe3494419153c817d4
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOCzIvL1cSd5EQwA8BoSyaZtxHzUn:aGXuHrSCTNblXVDaAEQZSyMt9Un
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml
|
MD5:
cc4b6d1c750bb485ea2feb3248374063
SHA1:
74f135dce0250f8542ee71bd964572a887b99dd1
SHA256:
3fbf331f57f3037c148731610cc54e60bc57e4132193638016ee89347c3002d0
SSDeep:
24:bIyfWORSezEL2JEVCKN14j0vhkVLn8mbEk7gx0N6OfAPpqsaJRlOh4qtUiPJCidr:bIyXRzELDrN1w0ux887gGiqsarlOh2NW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.un1que_readme
|
MD5:
24edd5e8645870c9c2f4ff487987e9da
SHA1:
beb1f7eed20bf1308991486538c1b4222896c3d1
SHA256:
5ded2c71629b078bd277f7751dbe3d6c6ef81a90a18eb38a7dbec7a89252e88e
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO+lvLdM2po4rwL12Qu79Mjo9mfViAB1z9XHP:aGXuHrSCTNblX+lDG2rwLkQqWjoQfQAJ
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab
|
MD5:
6ed1bc2d9a4da7f6144fd5564949d974
SHA1:
9dc5c76e9fd75a3419dd67885999139819106523
SHA256:
6694a6a6c3e2dea54a02c92ff45a86cbc58decae4fd86a40fbd2fcfa5d013fd8
SSDeep:
196608:lNv1OUuWKHRVpLyc9MfE/ZJj45bBJzBlVcy/gJLpv9O6knBgmJmJdGBbcxdJ:l1oUuWyVpLyfT5bP7VJ6pv9O9Bgs5idJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.un1que_readme
|
MD5:
8ddeebc9bdc0fbbd72b490528bdec7f7
SHA1:
65bd915e1aa18110705fe45deb1416fac44d2f08
SHA256:
f837ea08610ad9c08cb6e5f8cf8a34e2474528302c6646641a525e7d64811799
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO/kd7nvL0L0jSKsIowF3xvY3AuavVbbvprpgJOeAeAE:aGXuHrSCTNblX/WnDRWelvkJOAf
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
affbedb58232ffc8733b7b4cbe48e1ce
SHA1:
f344bb3169b7c4fd64fe432d09f88be75f78e931
SHA256:
f34b0986e9bd1e87510ea67a5fd82978505b4c827bd71b8d0030842820a7aa3a
SSDeep:
48:eXa+fYGuHgebDPw/IBnu/QEkm1KaLGf0DvW+YNXZqcKXXfHG:kpAgePPw8uBbXGfEYNX1YPG
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme
|
MD5:
bd3cd0cf8d88b16576f8fb0c17e190b1
SHA1:
d044b58d55c6c3932d7bf233fba924f01c8fa31b
SHA256:
83d7238bcb7cb0d44b69ea71347aa9972b34914d6ae7d655c0ff52c881e16d3f
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOYvLDzRABVgOC+YXhELy3u7u42SjaRT1Sv:aGXuHrSCTNblXYDDzRAkOC+O3st2Tcv
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab
|
MD5:
78201673d76a9507b7ef7cfd0c5fcc71
SHA1:
2eae188678fd15e72fe45267e747e1ad69efba2c
SHA256:
3a4d141a8b8f0fc87e902e8d9c5d33637d3afa44da8c0452ea031a28c250cf18
SSDeep:
196608:AvkTkaegW890uZSCgE84dX/WLCxJMon0Ywm8BkLp0RK17ahH8:xI8WU7f/KCxF1wVhYIc
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.un1que_readme
|
MD5:
963d04f9390bf99a6951c9811cf3cd54
SHA1:
c8641f18b49fd22f950fff91e15739246c43d409
SHA256:
4c346b05577c62da8d827001e439cf2530aa7283d833f1062e3235efa74f9c06
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOp6CvLJPCRem5gYY6shLKdZlg8dmHB7ioHRBvcNp48+e:aGXuHrSCTNblXoCDJPEVeL60LKdZlg8/
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi
|
MD5:
04db8470abf2aa10cbd1184bcb3c2bf5
SHA1:
d863fb51b91535771633548ce84c9f4e0c55e776
SHA256:
799acbea8cde8e8cc3eb72526e25c7366665768b00424fff272b5dc5ead23857
SSDeep:
49152:WX4wrqaio2eOu4e+QwQ4kJ2dadyurNjcXejog6hEFHLqU/B0RZ1:+45aiIdhMQ4QdgXZgs2HJ50RZ1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.un1que_readme
|
MD5:
b246742ce743a1379625092380e0d13e
SHA1:
7ea1b3725690dfc8f8bf090f9f8e02f91a9df0c8
SHA256:
ff674cdb94153560114f0422b68e19b1711e41800facc0e36cbafa4bc277a713
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOJvLxAlzL0KFncjVVRm08VQAn5cQFL:aGXuHrSCTNblXJDxWzwKIdm08eAWQFL
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml
|
MD5:
3455a7543196eb70ae27db4f4d697a70
SHA1:
9f868a6708de266fa2609f09ffbbb5bcaa5c0069
SHA256:
726d83b1a0654782aa631157cb6fdb1b5359e52e263837655ba23cca0aa4802b
SSDeep:
24:D1O60dY9aTrJ0/XgMfpST6vbOEq7vwFzMeCC3fGfQhp1wZsGySflUg+gbRi5JFdX:Q6y4aTrJ6TST6DAIFzMZC31hpqK4fRiX
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.un1que_readme
|
MD5:
6cbd4c3cdbb9a40cde70a33f401c2a5e
SHA1:
2d599fa4187e9f7c5fc75afce7ab64872e74ae9f
SHA256:
569a2d3da4b9c4b218e93c5b651e21f8372898c2a09c7d21174f9cb9adbc6ae4
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOceYvLPl/VcxVmh5tJoEhGF9wlP3Plnkcv:aGXuHrSCTNblXcRD9GxVMZ1GF+Ptnke
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
98ae29a0d0875603259a5ed773cdc427
SHA1:
5a62f1ccfe6f22964ad40dfca19b60184585927c
SHA256:
43e70efd7a501592a7611366777531d2284e8d491590310d0f6dc1db835172d7
SSDeep:
24:qMnjBlZI9I/kSzIRMNFa2YVmH/i48uGQ6qwfr1q3If5TFMFB+vhm6WPsUeBHV81p:qMhsIcSBYVh4+u4IYXWP09q1p
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme
|
MD5:
643cf9f5840f6ff9c9a6380f4e46e58b
SHA1:
6a31266428e5a04ed00284b258fbc31c873bd791
SHA256:
030e7ef2a990ca1a9b9b1b0b19ffa42f5b7c43a76879364c162d461916fd0b11
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOxjynvL8HfxzMxJo2pPpZqP68ST5oAnZa+F+xoiW0tO:aGXuHrSCTNblXInD8tMxJX7qdy5vnZ1r
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab
|
MD5:
dc916abceec59e2362f0c7d5f00544f0
SHA1:
bbb702541b057f7917d1137ba68cba5ce4ec16e3
SHA256:
8b391ed50eb499fe5a7c4dc2009741059d55150da588e9a594e65398a9042812
SSDeep:
196608:McX+hpkHoLw6iqEUfB581mQrLDBW1u2i1bSk7uOGf0L22OK+wq704tWEvdNEIRK:32pkHos6iKfBgF3BJj1bL++2bN70uwIg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.un1que_readme
|
MD5:
c4674b0d7f1623e752a3046602e7d496
SHA1:
17d035efa2164a84a30955eb59c44b2c91884879
SHA256:
1648408323fc251f7fb950450697a065986f12fd1607bcdef5b84194835d4b1d
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO7/vLjR2jnicfAr327kv/9tChEP8jolUqVe6:aGXuHrSCTNblXrDjRkc2SltoE0oO16
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi
|
MD5:
6793c835e652e8b4dd4814dd9f473dfe
SHA1:
ac7d7152c05b0140277ed3c53e37e2c3c1e550b0
SHA256:
a3491b6d7bb2cdd08bc1e850ede6994cd6c4bb7e5cab35fb1fffbb342f378382
SSDeep:
49152:o5qWIScR2q9NpAYbYYcmWTGMCUfrUapwzGGFXPdCAuGXEb4369b/5ac:o5hIScYWpAYNWTZNXXGZPgAuGUk36dBj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.un1que_readme
|
MD5:
5a0cf162bc99075a2cf2c806a1e1582e
SHA1:
086c9489af4d032bd00370588963c2f6ce20d21c
SHA256:
ef63cef92264e2acc964ade7407cd3190c2762a427c367db8edcada84c7eb7f6
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO/nvLVnNSeG1fV4YFZ+6pqXnsf0MDMwarqH9X:aGXuHrSCTNblX/nDVnNSzqY/+6pq3sf7
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml
|
MD5:
b118cbb51ab3b47febb7b15cbc395485
SHA1:
12e7323a81e267ccf6436b437cba542eff524b52
SHA256:
efeb1f658fe8e2b8c2f465f0278912f62120a08bb16ff54222d7240809647f18
SSDeep:
96:kfXz7y62vA5qeHya739pztHuDq2CZpAnGt1dm:kfXny6vqeHLLtO7CAyM
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.un1que_readme
|
MD5:
f2ddc7e6774e6474c86840b068325820
SHA1:
1704469913c3f3ad84e37819160bfc268de4fc6c
SHA256:
ae01fd0a30b67a68eb3631f7e5fdf5109c0b160d464d8d6f55728dad993cd113
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO3vLDK3bgZLdgP7Ifh1+cYgVGiaA:aGXuHrSCTNblX3DDyb2gEfv+QG0
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
a39cd88e5caac43f7fe26a1c88af6a18
SHA1:
04f97053ed48ddb088ce2f536b0fd20eb931233e
SHA256:
14849afed5acc5287680bc7ffa1169b2f48d3eff1f76c872a431ef7030c75d7a
SSDeep:
96:lW2CYmNUJAQJJcwah5nG2SCmbW9fWuXTiV+zq7fWphcwcWRNrjX061:tAQ4pSTbmHXWczq7rR+NrjE61
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme
|
MD5:
aa966382efb43b9d6b4d421ad8975626
SHA1:
7714a9407719aed5fe9b63c13f5e9e168f4eced9
SHA256:
66d21b5a309844f828c4170ebccfca6f5c09e2bef71832d1017ec90b24035f2e
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOFsnvLjJ/j4/tG2wTUag5D50Xc0eFZQ7ZluHJcsMqRG:aGXuHrSCTNblXFsnDjJ8lGsN510Xc0ew
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
9dbe17c109d677010b742fd4ffb490c6
SHA1:
19b95355ceeca4ee23bc26b6e4d6e10b31e6ff2f
SHA256:
c8cd673c3c9797f96e19b57d5b689caf77bbb3ebb73af88b999b8b2a24987703
SSDeep:
48:WRbpfAUaDLOYpbXgd/3aN1v1oEXckA+PdTsNEs9ISyxCbtJJ:e2UaDLOYpUd/3aN1CEXckvPqNEsWCzJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme
|
MD5:
6b2f39765e9b0c7d18df775e39c51307
SHA1:
29eee9fc42f1651e83225b1cd327a247af2c3b9a
SHA256:
3ca05dacd0693cc16b9e5c68e4d5821b7fc8d313030fca9466fecbcf5f337be3
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO3vLsnOwnuFW2S/URpW1qsOIRDQz99yRfy:aGXuHrSCTNblX3Ds2FxSsFMRfy
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab
|
MD5:
2103bc14acf410c436ca92018bbb1081
SHA1:
685c3eeeef9fb365643ba98c4e5c965dcd4fba99
SHA256:
8fee7290b604b0f13118c95d7ff994c6e5e4ffb4e6b6ac4447a248882eb7c8c5
SSDeep:
196608:J7ggn9VPhXcRZbSd2xEon2ARyBB901AmzVeL0Fyr3QVHFt:JNPhXsZi2xEon2Yyf901pzM+ew
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.un1que_readme
|
MD5:
86b198a99386617a1c2d417ee4085f25
SHA1:
b5a3a9a9848082d7d192b4f4870be76b2babf317
SHA256:
2370332bbd48489db41263ed866eeb345472e7c6d126235469fa1c996a5dda56
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO/zvLW3VdjXB9j4SSZgsv9C3YdumWc15FG74bNixkU:aGXuHrSCTNblX7DWFP9jXtY9P915csbO
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi
|
MD5:
8d13903e3627c9fa6274f23494cf91c2
SHA1:
8703fc1611c7d2514d8f97b4613d757e08540798
SHA256:
782ebd5859bd9a01aa2c586790820cf7deb58e3dbdb6bedc83fdbafd15e3ee7a
SSDeep:
49152:SY0noFGUFkZbRGNe8ivwny2Bb50fPKhnGtoYj/34wsWjsof+Kz2:GW1kZlGNe5vwy2BbMPKlAwwbjsoWKa
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.un1que_readme
|
MD5:
13e21ef86205c33104ec3fb3f04c05e0
SHA1:
a8cbe720da1d1898c6b3dbff07d9ae6e5ff55fd7
SHA256:
718bc5210c79c55ed7bfdeaaf0ea3d62b5eb325eaf15c54e120deac2323eb991
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOevLS2WYcDMz/+keYXLvQODUw2MbyTwGf:aGXuHrSCTNblXeDSTQzmWXbB97GTwGf
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml
|
MD5:
600e1c26ce86521690e46ba076fadcb3
SHA1:
f405979b85a73f616a9bc8a0cdf6f2db91453e12
SHA256:
ba3c7a4b7f18dc0ea262f7ef787512018b59401e6f3cd07e53d1d54a52957a8d
SSDeep:
48:JaSQ5f3cmvaoDEmL7ha+/cT6AOWaIWO2u:gSQN3cm7HAucYtIWxu
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.un1que_readme
|
MD5:
f3d6679df0ca076d8be382ec8665f74e
SHA1:
a1a9d287fd2875cd039ff9c4637029a7578c17eb
SHA256:
be0ef347bf2786ebb11d042da144f5fcb94934dac65acae1fb14e8854047b887
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOKvLiC6hiro79o2qFMYcfRl9BYGb5gTCSdnK9d5uB:aGXuHrSCTNblXKDiCdKK8YcfH9qJTDdz
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab
|
MD5:
d78ad6ba2eb6413fa1e1f9519a010431
SHA1:
0829b64abe5b384a0faceca707b1c164839f20a9
SHA256:
1516d72b7ccde79257f97e672b3b6b51da5a73855d70baf908af5adc38567a37
SSDeep:
196608:baaw4v0v5+gs9sYfxgb60cxJOxXGTRNcHaLGwDowyGfrVnmfHzl:p2snlfzKGTRNiaTrVuJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.un1que_readme
|
MD5:
7e797268e1dbe2a389530c75d1b5900e
SHA1:
f3087368d3f14df15d0c935e9767b7a2bfa1883d
SHA256:
435f5deacc91d8b1f937e45ec8e1158a82df09d65e03e27601907386d013d30d
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOkyAvL6A2T3neA9xTUsIDkDRZnEndWriCKQa5CqneEC:aGXuHrSCTNblXkrD6AI3eEYsIDkDEndq
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi
|
MD5:
2e5fe90bbe1610ad0f80527770a21f41
SHA1:
68f2e53211258f1e06b603ff8d3c3f9a1093da11
SHA256:
60c13e3e36344828a4098971835b59f51462b2baefe5ffd1d07fd31d58cc4423
SSDeep:
24576:VxQ9Mh5Lnzv556mr8bm9PKFkn7QO/LxP42pDfb:U9G3visumpKuQO/L1P
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.un1que_readme
|
MD5:
6e2b69ad969a0d492b3d601aeabe2d62
SHA1:
99433a7508bc9908faa7a0e55fe9bee6aa0e9c00
SHA256:
eda65679f238f5574269f0fb96fe6c7279c544fd98f612e0811f864c6728476b
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO00vLwXMCE7d3Jwe8xAoTEKYBBtZUDtTfp7pA:aGXuHrSCTNblX00DwXMKxAozYBBStTRi
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml
|
MD5:
0a20d60ee9e6111191d0a371cb0b121c
SHA1:
a0f598739560d4fb65c2cfc1bcce7d52a49d0f59
SHA256:
e4c829cd260fe604d1ac9e306fb7ce74522bd6e0dbccb4d6d85406c283a2860d
SSDeep:
24:xYi7Wk+HvN/CO8dZ0DgekvxIOTgR8gzE0dqWV5Y7i1IDeGZ39faRyjX5:xok+PN/adeU72OnQzqWTY7qgeY39iEd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.un1que_readme
|
MD5:
d4230017dfa0fd2d588c6dadad01c446
SHA1:
798c32686d6752131299ae4a4be707b0ed29cb5c
SHA256:
03235a844eebf5561139bb9ef1f47e2b0fe4b01c7e8a733fd0309e863acf0234
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOQvL6QBOVJeJg/l11kCJoc5USHrKGdQoJLWqeS7nZ:aGXuHrSCTNblXQDWVGg/l11t3DrLQoJd
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab
|
MD5:
2573546e0ab3334904a98cb75afee06f
SHA1:
4a62e5df7b8c398b8ce1020a3b7778d684c4b5e5
SHA256:
e92a2dd953795ab69a61e928f441f196555210b48e3447752803391434608eaa
SSDeep:
196608:5JdrFQFEw5CMyOBrfplx6IIDZshGIbmsS/Rf3HPWuu7dv06iCXgQg5p2X1FIt/+N:5/NwJdPE5uvbyXuN7dv05b50XMWN
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.un1que_readme
|
MD5:
b8dc8a1e809c85a8a91f74d074191d09
SHA1:
a517fc72af4f952f54d907583e67f1962f8260ad
SHA256:
676eead8b2dc3f3e81f3a72324dabc18f6495610db0c34f0f17092227d76a62b
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO5vLlBxBe8UXXZTvF4bD/eb+qjlP:aGXuHrSCTNblX5DlBne8iX9F4u6qRP
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi
|
MD5:
ae8e63748207c87f60b857f4317e56ba
SHA1:
905875e7678373daee2988f44c70fce1819154fb
SHA256:
96c5886b611148c87ea1490deafdaddbf8131f7f03cd507b340ff43ec70c8de9
SSDeep:
12288:n+SzMCLalVyDs0/5FrlrGHq7k7eOIIlDEvZi7aksyLAc2hid43cFeA+wbE:n+Sz4VyDb1CkkaAuvryLAxjyeubE
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.un1que_readme
|
MD5:
9982597d5d739bdb0e2c565cdfba9596
SHA1:
03034e782171bc831680abeff056db9d39b3c3b6
SHA256:
6b46b3b915eb0fba64f8b2dcc8ed51d3a8c8f17115de7002cb9c1d60198f7ab8
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO7mvLVrfKuASLb6hnQdEi1KtHHSYmbd:aGXuHrSCTNblXaD9D+hnQd9OnxmB
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml
|
MD5:
ee90186efe7ebf62e697d8936cc8f582
SHA1:
2a6774abc694a5ad2bcc3f2d12275e0c59b7ef5e
SHA256:
9cea7abef444e305f883911f64994f6c72e52c2711f7830ce756a51257414534
SSDeep:
24:+MH+mWu/toxQlYI1vicxEudDNjYUv8wZvT14PIZUlYIK+O8gVWtIE+Ho/6YMCQyA:+MemWEtmQlYIvicxEudDJYtwZL143jKZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.un1que_readme
|
MD5:
663e70dcb6642f7b7f7a9ca2d7b1b0f4
SHA1:
75e7cf27244f7a8d533ff633f7c4b7e528ecac29
SHA256:
3d70a2e9992ad5200af3fe89073473054a9e3a38c493b6260248c26d58523021
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOFvL33FNDg/xenuZrd0x+T8BK5x:aGXuHrSCTNblXFD3mpas
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab
|
MD5:
ed4dc2191aac16565c9adb12e0dbfdb6
SHA1:
d110e6fb8c2a9459a56f28cb7a4b0940a54a9bdc
SHA256:
01fbd858a242897d355d7953b6eb17da0c9c3abb1674efe192c71c04b5101224
SSDeep:
196608:M7tODhuua3qyMe6Qw8MhnZxVKjPtLlqvBqYdxSR8ocYsX:M5Gux3qyMenw8KZxgFAvBqYzmTsX
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.un1que_readme
|
MD5:
62bdf2b585c62f9debf0d2c36740f865
SHA1:
6a9cc1b6888a4414ae7217a147d3a1a45d85f446
SHA256:
c76618bab2612ef3ab9476193377469ab024c2061404b922855b2280c7926b52
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO/JEqvLd/IdWFEUez4Bgv7w5xNbsd63:aGXuHrSCTNblX/qqDdgcEUSWgvAxqS
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi
|
MD5:
b6f3455d58e7331c776bcbee31634cda
SHA1:
d00edb2a6fb9773247756f267b5529e0a3c32207
SHA256:
dba70cace2f86ae15ff7555c843883a719265dda4c69862ee0bae268e6980dec
SSDeep:
24576:bxD2IzQcrLFxFPteAAFv+kN2V9+AcWTUacIvh:52IzQcrZ1e9LUXGWTRFh
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.un1que_readme
|
MD5:
2718d7422a97a4c0febd91ed42f5b97a
SHA1:
1cd1d210d8ab417d9b5d62b644f210e66e69052c
SHA256:
ff5851caba4d6eba4292a180e907c055d990a9e2700050b541b24a3ef6b5111f
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOpvLGA8wqoOHlvKnC/fBcZ7jFen:aGXuHrSCTNblXpDGA8wqoOFSnsetjFe
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml
|
MD5:
956201dbc64d3f444e09a0d5c5f6e621
SHA1:
7edcbf21b3b21bd2949f189277d97b6bd5dfb407
SHA256:
ebe24c7190a164bf8b8af92eed7cd2f8110788770f1b247429dcc360d29aeb14
SSDeep:
24:qQbrHX7YeVBsTsMsPoF4scEvbqU+y8/xrHkjgfswGoESDpaHIUjklfxpn:qQPEeZMNFjvmUu9HkjgsNStMIukRxp
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.un1que_readme
|
MD5:
84ccc953abdaed24294cac951c852dac
SHA1:
a42ca49bed1a9d9d6b6f9358fcaa47698f475c02
SHA256:
4a511d1301259b1e6c92881899cff0c87db79a6c6bf0b3bf78687a66252756cd
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOUvL2mAgLmzCV6njJLJNeIlAJD+//ajsbv:aGXuHrSCTNblXUD2mN3gn9LsJD+Xa4
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi
|
MD5:
6fc30d7c67c29dde4aa9c2cb9481b94a
SHA1:
6fc1c36f1683eb07e6b0aa52e4eb026db66f8062
SHA256:
f805bc40afb3a06fd7f6791e51f2584212f5eca74e25ca726fe69f6929e2c76d
SSDeep:
12288:6eM6FaOyKhh6AogQmbrnS/VHT827eyk3ip5YNP7xPJ399lnlGREGktR84g5TaL2y:6eHaOPhooQCTK5Zeyk3z0B8qT5TaL26j
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.un1que_readme
|
MD5:
8409341179071a1dba132236ddabc2b9
SHA1:
2c4d22cd696faba2a282453a0cb40420c65f09e5
SHA256:
936ce9743326c11a1d280bfa06e770fb4dc5097e49dc01d66597fbea77289e33
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOvJmvLh1r5RfbBfGgD854awHXWOz9xYLN4m1UEj7n:aGXuHrSCTNblXvJmDhxFle4bWOzrYKvk
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml
|
MD5:
53b25660d74700f47c1093424241511b
SHA1:
ad899c627dd022d6ef1424bc69148e3c854cbe6a
SHA256:
2eb0d6618048dfff12dadcd9956f2471a8491edcc901a6b4efa08076866a87d3
SSDeep:
12:mA45qnLGQun9AYw80rxRXPP3U1JdjfKhprkMA0J9+Hpam8tA+hnxEtiwn:mA45ELGBn9gnk13fKhprkr0JgJKZZO7n
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.un1que_readme
|
MD5:
ee3b84e961c94200887f33cc3cba04a7
SHA1:
f2f73d78e21d55664e5227c605b7a89ba1354fcb
SHA256:
fcf1a13655fcca8510b523483bb410f1845a42ab9939de607090b32a3c6335d9
SSDeep:
24:aGvGzqukMrSJgTN8ogsEORvLBFamwsOzWaJ27ZPnpVmtrQNPX2mNaL:aGXuHrSCTNblXRDheJ27ZPpVkrnmNaL
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
99b5ded01f18495e0f1d3fef3e88d365
SHA1:
70ca5d68cf4bd151ba737023f9840487b4598f4e
SHA256:
a9bb4a686dad5078736189b6c124fdfe04ffcede6ac3b147f0d32850a3e19d5b
SSDeep:
96:H5eHQst/+PcyqRyfGEoegIXwceIihnFBMLBv1i4rVqQj6eqUjfWhdgP+9dY76TMB:HMQsbuGEhggbucLFVqBTUjOhdgJEMPhz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme
|
MD5:
5b1747ee80e92c4db1ff39d6a1534053
SHA1:
f8e714be55e5514dfadb3ea7cfb70acfbe374c7c
SHA256:
2d5b89818f7273f63b4781641f9be3631ca27b947d66722875adeb5a0be82ade
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOqovnvLKuxvh0ZYBxSO7LSzdlKqpX7i/X5K:aGXuHrSCTNblXTvnDKuxvh0ZYBxzcdZ9
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab
|
MD5:
77b4c9c6cd7e8dc8c7c158ef43573491
SHA1:
66a2240d6a8fef5f7fd6e61b3ba1fa10022a96c5
SHA256:
67afcd7e2e60e314fe9a107d98e29d134d0d121f0df42517e02e2af2ae0786b3
SSDeep:
49152:IWa4xuo/pyTJ6QjXhIK5tmsC31psKnWvr1SmNCng3oIvvfSBSC/TmN9K:IWa4QoBylp6+tlCFFnWhSmNl3wBSATak
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.un1que_readme
|
MD5:
3783330bed01c79285d8966f200bead3
SHA1:
3862c9139f821e62b4651cbf4a57797a5e6fb9ea
SHA256:
af60b55c3726121a1a3d99126792cbcc294c9ec39dcb3277c50bdfec0c88ac95
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOUvLKIcdL+g/tuPEJwdSX9ls:aGXuHrSCTNblXUDKIcFDtuPFdSXjs
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi
|
MD5:
6b6b9f0928eb83ebe98eb88acbc2a88b
SHA1:
3029bc76addd7085c60d1fececdf68820c3fdaaa
SHA256:
d52461cec15046605370b8fbc8fba12239c8ce22a676c75e09783f4139da8db3
SSDeep:
24576:xK26HG4CK28/hdw4gYYi/2aD9tdWUAv9ZsOeQv4SB5zC:/6HbzpdFgz8R9tkUAv7KQQSnC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.un1que_readme
|
MD5:
aa84d621cc29541e3d1b0de86bc1e01b
SHA1:
9727c972d3780a4cc4f3277cbd03b74221d9a290
SHA256:
d75f6dee0ee4f6e25cc83a8850555530b6190703878b118b35d65ee0c5ace58e
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOAhGvLRPFD+PCSSjcHUlWvVR5O:aGXuHrSCTNblXAhGDRP0PPd0lKVu
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml
|
MD5:
fd393e6a4d741ab4afa9dd46f8df7574
SHA1:
db99c3f05843f23740af9233c6f2d31a784a325b
SHA256:
905d48fd017e84f2bc79a9eaf19b15e1bf906d4fd979687493dabd2eed7264b0
SSDeep:
24:8EUgQwd9Tkft3IoOe6rbt2QEepzgLXn7RKO7MjgKQ5UizZp4LrGMmoiGMmVHAW4a:DQ2klxS/8oKNKpjgKRiVp4OVmRDYImGT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.un1que_readme
|
MD5:
9492510efcf2d1aacdc225adcc7c4879
SHA1:
f33357874e8abf33de219e89d4f0bfd75ce7e850
SHA256:
3dc9547bc0cc0ef80343819f504670fa2757c80234d32853512c4b569237bc17
SSDeep:
24:aGvGzqukMrSJgTN8ogsEO99vL4eJk3sAuRMET1vBTZyRX5:aGXuHrSCTNblXbDJEEsX5
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
fadf952f38606218dd241d16e698e2b2
SHA1:
fdefe4303354200371e4310e0bbab53dd1246e18
SHA256:
dc7ad7e681b27718adab54698218458afd514ac0716efa665e36ef04507c9cbd
SSDeep:
48:CN+kxdfF8WAGepyWVNbnKwxIEBcTOJBSHIxCT8cWDy:cYVGetVUw0MkHIwT8cr
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme
|
MD5:
4db945da9acd07fd814e34b2e9356e20
SHA1:
913e39050fa8f40a4486b7282bcdb5084421c27a
SHA256:
1ff6de93defec1757295889f66197301da1ba041a9acae97f069677f0a8b0189
SSDeep:
24:aGvGzqukMrSJgTN8ogsEOhYvLJtKdRTidBp2OHmIz580MKl9BYBE76:aGXuHrSCTNblXhYDJUdRmdL2OHmmsKlG
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab
|
MD5:
1c8422637a946dc2c95d45bfa9462605
SHA1:
d989361c6e4fe4151618093693115a20410e51ca
SHA256:
dab0dfb8673da78a5a87ff1a71a0890736e48199b975dadfb9cf05c73411653a
SSDeep:
24576:eLWcKIgFPAM0tJb4/DXCSpAfl/RLmfJ4aAoAXfgCvsKq:eiFktJ4ReCfJ419Xo0Hq
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5P5NRG~1\AppData\Local\Temp\kP8E59.tmp
|
MD5:
e028c8417dd1f4a1bbebe990687f60be
SHA1:
735a00747091318bb37e2a99495d7d2d329eeddc
SHA256:
ad1745fb0662b3217f3d8e591fc3476278766709a185b43bdea26c966071a6c3
SSDeep:
3:pMCMj:3Mj
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\Windows\TEMP\1j5C5.tmp
|
MD5:
c44e117bcbef4685632a3660f69040ed
SHA1:
8189a5f443b014142cc478c1ded09b83f6f5fdb6
SHA256:
d097e7399a6d3e57e57529ae65b49d6dd5fccd5259638fac08c44d2f5efac010
SSDeep:
3:TdiHXDXCWv:RQDyo
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Windows\TEMP\EG1F9B2.tmp
|
MD5:
b1080b9e249ebba794ca2a1cbeecd213
SHA1:
ee0cf6f57765a76b58b5bfdd9be10dfd2597f556
SHA256:
1dc1b0ae7ef38e8c382e27e0d1e8346c5de8ac55685b6a0513cd6e31ebd94cd8
SSDeep:
3:TdiHJhXcsR5RAkSZv:RK5mfR
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Windows\TEMP\eRE9C7.tmp
|
MD5:
4678067bd01181640bde714e7434d241
SHA1:
fcbaf15ccf3149fa1af11d1a7c3a1f30454ad233
SHA256:
80198ae0df1a42c0375515db21dd34bbe35774c543ac848ae449649b5296f3f1
SSDeep:
3:TdiHTmJh1k5RAkSZv:Rewh+5mfR
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Windows\TEMP\wE9C6.tmp
|
MD5:
1497efd1e5f1395f13cac021b9a2115c
SHA1:
980ae7f7c1f6f33bd5300ebd45930da3d0c1f238
SHA256:
c2a4b12da8a8d17786b197e61c5fe8d24e1441214b8d06212688e6cb5e2e387d
SSDeep:
3:cPBk3QRtucmJhpov:oBk3QbTwhpy
ImpHash:
-
|
Access, Create, Delete, Read
|
Dropped File
|
|
C:\Windows\TEMP\xEEF6.tmp
|
MD5:
db979d53371d4bde6672ba3db1ff2771
SHA1:
44ef8f92be27376ab9126e05f7092f55afdba7c6
SHA256:
3f2c028d618726c98e729f249c9960930581197f76220ed7b31e329f48cc88fa
SSDeep:
3:cPBk3QRtucmJhpozzlLq3QRtt7hX4an:oBk3QbTwhp4oAbt6a
ImpHash:
-
|
Access, Create, Delete, Read
|
Dropped File
|
|
C:\Windows\TEMP\z8xE0EE.tmp
|
MD5:
c3cda15142c7ce754c30f2c58ce2a57b
SHA1:
63c858187dfabcd0a71b8869418d5a6151cc1414
SHA256:
3768652c2a9eea691e968779d892bd4bfb8f256b1c031deb85431c2138e1a1b3
SSDeep:
3:cPBk3QRtucmJhpozWNk3QRtucmJhpov:oBk3QbTwhp4WNk3QbTwhpy
ImpHash:
-
|
Access, Create, Delete, Read
|
Dropped File
|
|
C:\Users\5P5NRG~1\AppData\Roaming\2K1JYkQzE
|
MD5:
d41d8cd98f00b204e9800998ecf8427e
SHA1:
da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SSDeep:
3::
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
|
|
C:\Windows\system32\wbem\WmiApSrv.exe:0
|
MD5:
38b84c94c5a8af291adfea478ae54f93
SHA1:
858ac7b85f44b29b16cbbac3a26f78790eb4270c
SHA256:
1ac267ac73670bea5f3785c9ad9db146f8e993a862c843742b21fdb90d102b2a
SSDeep:
3072:8ux+K3HzuejYqsRQv7120Ly762B3at7VGpWnlkfNFA8w722J4h8e:8k++HiejY3RQv71xKq78w722Sh
ImpHash:
60258ff8adf15923ca3a6fc91dc62919
|
Access, Create, Write
|
Dropped File
|
|
C:\$Recycle.Bin
|
-
|
Access
|
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000
|
-
|
Access
|
|
|
C:\Boot
|
-
|
Access
|
|
|
C:\Boot\BCD.LOG
|
-
|
Access
|
|
|
C:\Boot\BCD.LOG1
|
-
|
Access
|
|
|
C:\Boot\BCD.LOG2
|
-
|
Access
|
|
|
C:\Boot\BOOTSTAT.DAT
|
-
|
Access
|
|
|
C:\Boot\Fonts
|
-
|
Access
|
|
|
C:\Boot\Fonts\chs_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\cht_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\jpn_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\kor_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\wgl4_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\cs-CZ
|
-
|
Access
|
|
|
C:\Boot\cs-CZ\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\da-DK
|
-
|
Access
|
|
|
C:\Boot\da-DK\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\de-DE
|
-
|
Access
|
|
|
C:\Boot\de-DE\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\el-GR
|
-
|
Access
|
|
|
C:\Boot\el-GR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\en-US
|
-
|
Access
|
|
|
C:\Boot\en-US\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\en-US\memtest.exe.mui
|
-
|
Access
|
|
|
C:\Boot\es-ES
|
-
|
Access
|
|
|
C:\Boot\es-ES\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\fi-FI
|
-
|
Access
|
|
|
C:\Boot\fi-FI\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\fr-FR
|
-
|
Access
|
|
|
C:\Boot\fr-FR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\hu-HU
|
-
|
Access
|
|
|
C:\Boot\hu-HU\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\it-IT
|
-
|
Access
|
|
|
C:\Boot\it-IT\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\ja-JP
|
-
|
Access
|
|
|
C:\Boot\ja-JP\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\ko-KR
|
-
|
Access
|
|
|
C:\Boot\ko-KR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\nb-NO
|
-
|
Access
|
|
|
C:\Boot\nb-NO\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\nl-NL
|
-
|
Access
|
|
|
C:\Boot\nl-NL\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\pl-PL
|
-
|
Access
|
|
|
C:\Boot\pl-PL\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\pt-BR
|
-
|
Access
|
|
|
C:\Boot\pt-BR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\pt-PT
|
-
|
Access
|
|
|
C:\Boot\pt-PT\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\ru-RU
|
-
|
Access
|
|
|
C:\Boot\ru-RU\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\sv-SE
|
-
|
Access
|
|
|
C:\Boot\sv-SE\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\tr-TR
|
-
|
Access
|
|
|
C:\Boot\tr-TR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\zh-CN
|
-
|
Access
|
|
|
C:\Boot\zh-CN\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\zh-HK
|
-
|
Access
|
|
|
C:\Boot\zh-HK\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\zh-TW
|
-
|
Access
|
|
|
C:\Boot\zh-TW\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Config.Msi
|
-
|
Access
|
|
|
C:\Documents and Settings
|
-
|
Access
|
|
|
C:\MSOCache
|
-
|
Access
|
|
|
C:\MSOCache\All Users
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.un1que_readme
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi
|
-
|
Access, Read
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\PerfLogs
|
-
|
Access
|
|
|
C:\PerfLogs\Admin
|
-
|
Access
|
|
|
C:\Program Files
|
-
|
Access
|
|
|
C:\Program Files (x86)
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Esl
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR
|
-
|
Access
|
|
|
C:\Program Files\Common Files
|
-
|
Access
|
|
|
C:\Program Files\Common Files\DESIGNER
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\DW
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EURO
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Help
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\PROOF
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Source Engine
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Stationery
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Triedit
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VC
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VGX
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Folders
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\da-DK
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\de-DE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\el-GR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\es-ES
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\et-EE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\he-IL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\it-IT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\th-TH
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Services
|
-
|
Access
|
|
|
C:\Program Files\Common Files\SpeechEngines
|
-
|
Access
|
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft
|
-
|
Access
|
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20
|
-
|
Access
|
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\MSMAPI
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\MSMAPI\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\Ole DB
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\Ole DB\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\ado
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\ado\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\msadc
|
-
|
Access
|
|
|
C:\Program Files\Common Files\System\msadc\en-US
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Full
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Memories
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Performance
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Pets
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Push
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Sports
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Travel
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette
|
-
|
Access
|
|
|
C:\Program Files\DVD Maker\en-US
|
-
|
Access
|
|
|
C:\Program Files\Internet Explorer
|
-
|
Access
|
|
|
C:\Program Files\Internet Explorer\SIGNUP
|
-
|
Access
|
|
|
C:\Program Files\Internet Explorer\en-US
|
-
|
Access
|
|
|
C:\Program Files\MSBuild
|
-
|
Access
|
|
|
C:\Program Files\MSBuild\Microsoft
|
-
|
Access
|
|
|
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation
|
-
|
Access
|
|
|
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0
|
-
|
Access
|
|
|
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\CLIPART
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\CLIPART\Publisher
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Document Themes 14
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\Bibliography
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\DataServices
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\QuickStyles
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1033\Vsdir
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\1036
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\3082
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\ACCWIZ
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\ADDINS
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\AccessWeb
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\BORDERS
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Bibliography
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Bibliography\Sort
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Bibliography\Style
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\CONVERT
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\CONVERT\1033
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Document Parts
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Document Parts\1033
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Document Parts\1033\14
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\FORMS
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\FORMS\1033
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue
|
-
|
Access
|
|
|
For performance reasons, the remaining 169 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|