Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\one.exe
|
MD5:
af519c5afb2b0acba978364805f551ea
SHA1:
036875d44b48da311dbb731647bbe1ff1638abe1
SHA256:
58bb2f047f7d97ef930e775ca213b4b3ee8e1bee9b299111dfa81e007bbb9131
SSDeep:
1536:4r4HQSsC7L1jiAIyhaxJEvF4WHu3lUMQwrJgQqHa:4rtC7L/+EvFRH2lrQwdgQya
ImpHash:
a3581bfe28e762682dbc13d06bf2fda0
|
Access, Create
|
Sample File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\DefaultID.pdf
|
MD5:
696ddeadf3013de57e4f033768ad2a2d
SHA1:
0f4223483a162cbc7807a41062e6639adb527bdd
SHA256:
06bb9e7ebb25e5a5f8e6dc8054b368172e4a902393de48a1389d45338b5abe2e
SSDeep:
1536:hHVIrEOD9ghlkWfKADjE401ppbhkuiC2IiZzQYhC+p0xiThZamA1:jqEO5ghWI0dbhZipVJQYL0x2Pav1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\AdobeID.pdf
|
MD5:
37a0407358b69f2dc56ffb26dab28457
SHA1:
4e96eee34aca06c86177908107505142964941eb
SHA256:
17318130a3034cee7a68e2bb80e227c7988cb43efd60af0779d9084ba3aeb8bd
SSDeep:
1536:Ynq7p/EZjZ4RUGH1H89+t7R9OBdhAYdMXJWJoKE4n9bhMjIyT:gq7od431Hy+sGJWuKEQbyT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA\DefaultID.pdf
|
MD5:
4a4d9d2d600e3892661a7d5c3ce9c317
SHA1:
4471cb084fca28a5c30736262b6d465763246272
SHA256:
58044b585a4c3484fe9792b76863b5ad474366915cc34cee0e5227a0fceca9a2
SSDeep:
768:6h+Kxm1NxqCOGoc38xqevXssGMQE9b0XE77fzf+fwBTMCtNaBtOwSZ2VG3idmE7I:6h+ymDxqObMwWX5ZLhr8tOwSIQ3iLAd1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\AdobeID.pdf
|
MD5:
3d4a409c8c27088baa5209dce0151546
SHA1:
dbf1a39769f0dfde2b331c7259fadc790bc56646
SHA256:
d607c71c9d3410d0e4747c9b20aeb5f4217e0b0425b96d0a0b1d8d9381802f15
SSDeep:
384:h01fiZErhv3xO0UzfBcezY5CXUqoLQuWyntYAmr2nc0pAtz28xUrHNxTK:h01fjhkTzfE4XUqpuxObtymUy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV\DefaultID.pdf
|
MD5:
288447070fa0c963b5b8f595b00f5647
SHA1:
93e0bd8b337c684d9daa2760c5ccfdc38a3d2cb3
SHA256:
41117df8664f431fb2435a7f24e66721f43297b0e8e9a85b9be06169baf258fc
SSDeep:
384:1KapFYS/3Cu24Y6NnhyoVyPcL69xWXbdohkzt4rIJ:b78tDoVykLwWXwIJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\AdobeID.pdf
|
MD5:
3c53a3b163a75e6e2bf0487977e449c9
SHA1:
9d9b234b08d64e1afc1719ac6cecee002af303ee
SHA256:
f47311e0b346ad70c4d7c5c2a97bba3e6317d8cfdb94bdceb2d6c2120780b7b3
SSDeep:
1536:vzCLqZQUuKOLe68Mxyc8zA8JWjv4C/UgO0NyrhdDfF1IPqskKRQo1pnPWjhSxGNl:veLAtuKn684yvcWWjv4TpdjF1fskyXOV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN\DefaultID.pdf
|
MD5:
50574f610788857e525fbbfb51e218bc
SHA1:
9ed8740dd70dea3f474eec817b951186df2beb2c
SHA256:
2102fa7f217eb0936f01abf8e263dc78b3a83defeb471576f7853efb340168c5
SSDeep:
1536:3cvO4iCoMsxmNWFF9Er2SRaTsJhIkFzZu+BUVlgnvdgK7DXmgP4P/NH:MvO4JTsxLBErNRaTIIkFdJsMgOb7wHp
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\AdobeID.pdf
|
MD5:
588e4519775573c2a4e74a1110bbb26a
SHA1:
4be06e3894d32c478aa7ef8ebe4c235cd08d3414
SHA256:
fc9b1528dfcd4a23d301c63cab0b2518367ffa3b7fb509a835592f6a87875e8f
SSDeep:
1536:Ag5DHksWW/Igsb0THJHBqZDVdlYgi74BUJg70+uyaxK9:Ag9F/TsbWBqfdSl7lJSuS9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA\DefaultID.pdf
|
MD5:
c9ae4e8ec42a2a9310da99395777b4cd
SHA1:
b9c7c3d8d993440203bfb063b978327e48eb466e
SHA256:
92d909af5dcd324c01d158cbd664740467f00f2371693adbca0365964b074a42
SSDeep:
1536:DqK6WSZWDwvosY8/B5SqZeYa4d4C3/ewbidsIFxvmIr+Xp:MWYzgMB9ZWGrJ2dRFY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\AdobeID.pdf
|
MD5:
249c083d338e231aadbf24ee9922bb58
SHA1:
73adf48568039bfa61ed9dd199c6389a53c7d676
SHA256:
9a5a33f876b045df1afb1cba71d04e71a9f68f364817a94bf54442df2a98dbae
SSDeep:
384:gmsQX0FW+4Xn6ctRFZaMdZ9LICjV0Dzl77QFucVrALy5jewNNxtNxO:GJFW+4KyjsML9kKezeFtOLce0XVO
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN\DefaultID.pdf
|
MD5:
20ba1ac1f938221f17b538a34d5f6b4a
SHA1:
317dcd45b5128e8e890a7d09a695c940e8ba9b07
SHA256:
bdec3f919a557e1a362442866796f5666e0519abc83c09acd7fb335cdc2a53d4
SSDeep:
384:qd87c8oAN8kq9jsoA8dI/cVOt/cii824UWSW/hJoXtSfRS:ZQ8oKjxoXdTScrcSWJJ0cQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\AdobeID.pdf
|
MD5:
c1f47c52dfb2f3ad79b3c541083cf353
SHA1:
abb6df428461f631f4c7d1191219f8592cdcd879
SHA256:
6d63722cabc055f8342361d58fdbe14a10250780938ab2ce69ff018be59776b5
SSDeep:
384:9V7hAQc5UTO/WoE4EDaiysnMbZp4VACB5yzYYbAfeNL/34RfeYpoHnbROJfWIwIi:rq5uyFfzZn4VmzYYkmN+fuOJ+r/HdCu1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR\DefaultID.pdf
|
MD5:
683bcf71890c023fa27869ae6f6bcc0f
SHA1:
2d61a4eee60786cb5ad9fa447fe7c309bb853ae8
SHA256:
c622cc27c1c1b5c933aa710cfa7f4966fd39c42e8a9310da115b27d04a1218e2
SSDeep:
384:4lhGuhuihWqqJ8nRPGKrcnMEMH/Ub5WLTPipQkGaov52ljMv0a1RNys3:4lhGuUihWqegIKrcMEUwK2SbRyjSfgs3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\AdobeID.pdf
|
MD5:
8112e8484bc4bf86c29e0516872050fe
SHA1:
3e3553af61aea3e645cef93390741546c4138e31
SHA256:
7acb22e519a4573691f81a362fae1b5fd3f3c35944d6bf587be5015839143115
SSDeep:
1536:yZHFsWW/IgucrBAjk/AqEnAAQpAbprOfkkAVDb7QaeEVCzNz8:yZk/TTrBw0A9nBQplFAVbQaA5Y
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD\DefaultID.pdf
|
MD5:
cc6e567a806b1b5320fad4f6c59a8b52
SHA1:
9b1ab2dda4eea3f3531d3224049fc602d21a1a2d
SHA256:
c5d69b60391a82f1e80e29239f5e8e9b90882994f658677a0bc2caf5cf03856a
SSDeep:
1536:gXCWOAexDmW4Q6EGRpkP21oYPAlJ51Q26EOd2aRk:gyWSmLQsY+GDx1YS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\AdobeID.pdf
|
MD5:
b8a887436c4e58a39d634c581a5f31e1
SHA1:
7d99b05cc883de784f79d80c4713946c2e753118
SHA256:
ce293f3455f79da869353337253fbe71472240e8fa3a834ffd954df2db1f39f1
SSDeep:
1536:w0UNRPKK4Us1tF5aQzVphmVnmgcE7jthWHHIaOydnL8Q:uNx4dVkmg1nthGOydL8Q
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR\DefaultID.pdf
|
MD5:
38442e5326d05588425b7632c673c140
SHA1:
2e5f60ad15554591f864c8b4f9c7d4adaad1a938
SHA256:
c8b5846bb4041bccf5888c52e9bda10f68801c44e3a96adc2b19b54f7e5e957c
SSDeep:
1536:dOVIrEtD9ghlk+I+iqcyfmQdnq3vHGM8FJV1JA//Zn3GWjDigbCdIQ:qqEt5ghW+m125nWvdOnCpn3GWj9bpQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\AdobeID.pdf
|
MD5:
e168b942312b29cefd975666fc5a5807
SHA1:
8a985c77b79ebd90b7e0368e07d5a52efb9cb04f
SHA256:
f8e37e07393b92440cbc9d7be30c6a36cb6ff907f675755f88235be09409b1b3
SSDeep:
3072:Y4nGqY3V9dx8UnEAe4zuVpnJeGrddnmni2XnJqd:inLdgo2pJeGRdm9ZS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL\DefaultID.pdf
|
MD5:
25e0000763b4393d19360e2b68351618
SHA1:
aaf865837cb30a17e81d075a36d9c833340c0a4c
SHA256:
f1223bb8d55f9dae1850c19e0883f36311f64de902252bd18d19bff36f2c45e2
SSDeep:
3072:KQSa3asODMOnIh2WXrBErNRaTIIkFdJsMgOb7wbLCUwV7oJi:KQSa37OhnIh26Y/x7aMgawbLC3V7oJi
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\AdobeID.pdf
|
MD5:
1f1f6994ef660f9ec6b150e2a683a326
SHA1:
cfb8bdf3d571f0a5e186cf6688caa799234d207a
SHA256:
2b1dc6b14f7d305cab76f11a95ef5c1863b0cb9ed4d173d6cf902d594ea8d6c5
SSDeep:
1536:EhHog+v4L7nbF94Us1tF5aQzVphmVnmgcE7jthWHHIaOydnLHyU:UI/4LH74dVkmg1nthGOydLHF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB\DefaultID.pdf
|
MD5:
a3da2d82cb3e49b656ba4482bbabf3c0
SHA1:
c9e49c7e7fbe39ff2a47e2b5bd81f0817c9bdc18
SHA256:
cc84f8b1e1fc25a75dbcb550d07a49bcae48a9beb3df6ae99973d656668fb7b6
SSDeep:
1536:RFkdLGH0w3p4Yl5nQy2Ic9S8MGg8mNSwMtuZQRA3DnGdU8Y:LqKHx3ffQyG9S8FHAYRA3SUr
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\AdobeID.pdf
|
MD5:
729979a59df6a807cb3f7aef80165430
SHA1:
14e89fb3e3da0093715faa0268ed91a472d1af21
SHA256:
d3d41917435be3f309eefe3d75df9d4a7c7e2ce32784a3c06ad41e9ab8b20e7a
SSDeep:
384:TlJhxAql3xBwuEOHb+nyAqi3Cmvq37RX06z06UNw7Mz6/FVVXIwIIImu9IWax3Vk:Tl1xa4HCyAquCmvU106BUNw3/Vr/ahEW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM\DefaultID.pdf
|
MD5:
050c7ed6f65507a165898ac3a3fce4e6
SHA1:
785f72d5d48573519caf5fc5c1962155b7e18661
SHA256:
acb2475edcd111562636cbf4ebf424f3daa9e79f879f075d14860d539d0d91a3
SSDeep:
384:ZeVZPRrnWHvO7kCVIKddDTEKpQkjvcNIn/B5oqoHfUd+sxr1sK7d1UhJtjVm6pv1:UHjIO7kCV3ddMKMYM8FQyY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\AdobeID.pdf
|
MD5:
8f572c96b99e05e484c6c3bcefc88aa8
SHA1:
b31fc0a4ddada51d718b2f85e6ffdaa8ecb2c1c4
SHA256:
0f426a0edcf9ced5dcdf60620f6c5fc917e044ef6d6899d14d43bf23d6984d8e
SSDeep:
3072:xORm8PK4OtuYsEn684yvcWWjv4TpdjF1fskyXO16NJe:xOzKtJn689v/WjvgLfskyXr8
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS\DefaultID.pdf
|
MD5:
d47c65e85425b5aca679499bd820bee1
SHA1:
98d4194006e2e80f48332b3391f419dcad451b32
SHA256:
0a029861e4fb41d528953db6f1e64acb3a0c649a6438f3cbc7bf569675c8e9c8
SSDeep:
3072:JTFAMZbs3W8xnB2kax2q82xmucbZX9a3vz4Kps51elVLZ:JTFPb8xnB02SxoXqz4Os5EVLZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\AdobeID.pdf
|
MD5:
756a326ad636fbe0f3bc821e38139b17
SHA1:
5715d7cb92392f39082e43bb497e8ab60a44cfc0
SHA256:
882e09367e71812f570ef0cef38f54d4c545397829fb66e8833f1829e85ce55c
SSDeep:
1536:lCwnQ82aibhXTekigxvVSUYritGABZM3IpXd+xyo+ai5IB6dmKUOZ:jLuxT5ikUHrgGN6Xo8okZdmKUOZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY\DefaultID.pdf
|
MD5:
14a2142ba98d048b8c2597d814414dcd
SHA1:
3d2f3bd30a62092ebce5508400b7f8ae6e62a5ec
SHA256:
16a06186b5a922d086a9a550a3a0d3b4d3d6f393a6fb096225090cb5b29c260f
SSDeep:
1536:3Cg2GIqKzgq4lcqLXHrGTQwoHjP4X48Bwl0u23zaqZ5uRSfD25:3DJ6gqSXLGQwoHjkHduA25
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\AdobeID.pdf
|
MD5:
7bc4cb1597214e0ab2117eb3d9b8ee5b
SHA1:
a37708d5c1fe92c9c6d350f114951ef2912f867a
SHA256:
0f0a721511f46d85f42cdb5d64708515fcb280b0ad3e1b0fd3734ea58210c9d1
SSDeep:
384:b+KAtN3tzha2mN9quUxa0HxnN3AicycHbO9IIwII80ux3VJVn0:b2M2mnquXM9NQicycHeIr/80Q3Z0
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV\DefaultID.pdf
|
MD5:
e5498a2abb983181242b5e6fed6f18aa
SHA1:
9cbf38004eb2417aa2d34b41ec68e87796b003bc
SHA256:
3210e997409f87919735b13015aec18f9b8f4c656dc92fbc92dccf9e3135a24e
SSDeep:
384:NoZiXmOIIh2y37rxDWkCVIKddDTEKpQkjvcNIn/B5oqoVftdWAt4+CNw/UhJ1:+umCh2y3vUkCV3ddMKMYOFMHh
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\AdobeID.pdf
|
MD5:
7f55b91cc4f268fcd9f2a4111ffbf8e2
SHA1:
4a4ccf07c4ad2935b763a5fb8999b043f8c39679
SHA256:
cb545f80f4262e5502d62065c2f7f647d5f4f5d0b0f3090c63f0cbce7cb94368
SSDeep:
1536:75O4VOrKfSWFPK8WXdItu3Mee1Nf9QbWMbqXhUTCPNjipCl:75OYnXWX3chNfSKMeeyjuCl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO\DefaultID.pdf
|
MD5:
4d0aada6771386d8351323130b19abe0
SHA1:
c26afb844472b624c324c60042289dccc91a6ebb
SHA256:
c8e3a8ef59082927d142b9d79bf8aaf7b6c1eec30a14305ad5c401e0bae6c340
SSDeep:
1536:MgFkdL6R0w3p4XvosY8/B5SqZeYa4d4C3/ewbidsIFxvmIr+XV:MAq2Rx36gMB9ZWGrJ2dRFs
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\AdobeID.pdf
|
MD5:
7b07493fdccaf6b88f06545489754894
SHA1:
8f1b96297fa99c1eaad1de88d4a271e64993d335
SHA256:
855cdce0c4ce5b3b2de960f76210b3b32f1550a4fe069510cd0a33578fe4741b
SSDeep:
1536:8IH4VOrKfAgTbH7kyMrvwLmWnrlYtHYpnKClIYCnQ6fWzlTEf0tn:zHYcg2GmOlWxCQnQ6ylNtn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE\DefaultID.pdf
|
MD5:
3865e9120c94851a93c7f82fd16c5e3a
SHA1:
da06013b9f000f89e9443ebc7d08ffc3b7f404a4
SHA256:
c22c3c2b2323243f2f8ce982a550bdee7e05dd5e8f5b1db6a0a8f1cf92aab7d7
SSDeep:
1536:AtjH2VIrEbD9ghlkyW4Q6EGRpkP21oYPAlJ51Q26EOd2aRm5j:kjHEqEb5ghWyLQsY+GDx1Y0
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\AdobeID.pdf
|
MD5:
73b5e8acda30f17b7da0f3b380a88c82
SHA1:
51db9b4390284392723d73b21d5723a8e9b4084d
SHA256:
137317405ff91fcb0bdc363fb271f962d3566d8a91fb28515e9d8c7bebb4fc2d
SSDeep:
6144:vPGvRylEh7wIR+gI3qn5+tYu8Ncf370Sgmmgm8o2pJeGRdm9:Xgww+M+tYvU7331m8HWj9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR\DefaultID.pdf
|
MD5:
d4e456d3113a578a782c5273401d2d63
SHA1:
a964b53fcf2231a8ce99a9e238ab35898d8d26dd
SHA256:
d202d8615aa2657d23e4de5d95e96d0b30db05704b3a2ab32f882203c4035a90
SSDeep:
6144:J4y0YI7Uoc0zWfEj1GYf9hgdFjD8f8biRIrl1zWbPDDBJRK1vK0f:JfmUoew1zV6dFsEbpXMDD4f
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\AdobeID.pdf
|
MD5:
c4cd746ccba0b8ffc35fc1847ee35ff8
SHA1:
6f0eb2a3e3c698a8962a8de4de88d3955797748c
SHA256:
33dda92e112f3966628e92613ae9d48f29e641edec8da22fbbc5c80c535dbca0
SSDeep:
3072:evPLLIo/Ur9gn684yvcWWjv4TpdjF1fskyXO16NMRh:evPL0Mnn689v/WjvgLfskyXrM
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf
|
MD5:
c2dbb603581281742695d1f7cd4853df
SHA1:
ef5fb721aa5d9b29b3ad4f79c8f5011077dd3aee
SHA256:
45fb555f1a99bea306a778bcb98df26f95bbd8016d2022ac3dbed424f44bac34
SSDeep:
6144:S3/OJ+2lymRI9+KJPSq2HgtBQy+P3Qfnysne1vzAurOIXtor7Rr:4/qD4mm9+JeBJ+vQ/7nedEurvto5r
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\HOW TO DECRYPT FILES.txt
|
MD5:
8e178b18df2114b91b4342eb64011798
SHA1:
6e77f9b15602acabf7d4262d13311c2b775391de
SHA256:
b98c61cca2439c5cbc75cced9e74ea6cb6a88794b104c09ec95acb0685fd9f99
SSDeep:
12:AW36OWjhENkB+BRmXLLreYoIaRlWbCBErphzoMpUTtXKNYsK6H0wnDhy:3qjykgBcXLLVVCBK1YXUYsTy
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\Boot\BOOTSTAT.DAT
|
MD5:
1e00784936ef862573f32b07ed11d7fe
SHA1:
9313791beb98bcaaf08e8787c141af95de736883
SHA256:
3af2728334f711084ccfce90becbf9c04343b2a10a5d3f8101f72b9fc111ff76
SSDeep:
6:ORgT1bZG0cS4mgjtcGw1QlLeXKkGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG7:oA1lcS41FBlxa
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP\AdobeID.pdf
|
MD5:
33737b2217ae9efa62c01e074082d9c6
SHA1:
1ca526308be6401b6bab929ab148bedf2ab8f00f
SHA256:
18a619470165fabe7321081ab420606c094dce0be6cb65186f8f29d846f958e7
SSDeep:
1536:Idq7p/Rqb0THJHBqZDVdlYgi74BUJg70+uyax6u:Idq7XqbWBqfdSl7lJSuSu
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT\license.html
|
MD5:
a44456d6be60cf7f01c709d4bc29eb8b
SHA1:
746473489d5987b4f66eadee02327bc43b04c3af
SHA256:
0a9febb053059117058c2a2ac8dd0a482b2db2bcd2b4afc73491d1b3372ddacd
SSDeep:
1536:aFxYtLIlaSgcvYZ3GYCBy06qZhrEtEA5iLGpvEd5g2UJye3:aFxIIlaIYZGYC0Tyh4tf5iLqvEdm2U4y
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS\license.html
|
MD5:
2402a1cfce62d1f3ba9aeaf8f68c7173
SHA1:
46f179649722856c5ae89b45eb83120f477bdf2d
SHA256:
a63976bebbe0ccb9029c46cfb08917235f3298ce5a407c91598b381e051e3234
SSDeep:
1536:szrgEqDVFXVFrOuQcPYFofPwDutxu21Hh4twgzib0S3MCtDADDK+:s5qDuXoHwatxuMPguB3MCh+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT\license.html
|
MD5:
9618ca0d7dc524a447af77b66bbcc013
SHA1:
b729c97c0fb54e4d4b2c5a04424d33e97271efab
SHA256:
d551af70afafddcaeb4df38dfa96da9f47ce8b978d3d64451479f00e003bd24f
SSDeep:
1536:ZeXUsjV5EqEku4pD+sWJI+M3cYDhhZHTFNV25D5pgS3oVTcbGu:ZCEqE0D+LJPfYNhb25N6S6cSu
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\license.html
|
MD5:
9f71a2578a485b73178058ae6f025aee
SHA1:
d3ff7ab47f9c48c238112c76664737b81353f4b6
SHA256:
88fadb231ae7b8681b187d0c8fc66c3e689ae3f60fec4a74d633180fa0e1962b
SSDeep:
1536:MvRP6RzTmpKY8c640WXyPWNp+1v98DuaJez59viTK:M9UTmpKYl640YyY+A3Ez598K
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN\license.html
|
MD5:
5d939151a7fe5f256ee9b28edbc56635
SHA1:
2af73ab83516522493a71c9d1a307ba11ec371de
SHA256:
caf1b8c1d8c19db50142268e6ceeaa4f4c3e46e73fd60f340f9712deffc57548
SSDeep:
768:RmsqvfbrT1d5bHE/ZpmaK4eFge1llWe4JJ0uqxChve8PaqANWPGj:3w1d5wXVwgGlkVJ6uqxC1hPaXNW0
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU\license.html
|
MD5:
66fa66186e24cb17fc9c16a5df36796e
SHA1:
8517dd6230e2b9c270a30094a2acc7faac5b72f3
SHA256:
0237e78dd2e8f66ae9eb0e3adbbf8c0a32d82ad553925a62708c1fb696971499
SSDeep:
1536:ZDywEYZbuh/edEypJhGYBoRufe8tEIHEyRh:ZDvuMpzbBoUf3hHf
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU\license.html
|
MD5:
85a613ab5cd2f38a921bbf26526816c7
SHA1:
594f12c54e567adfdadc7ba3a70f8444332964cf
SHA256:
48ddf6ad3dd44655bb38534eb15eca0a10d6886f352ee83cb1203b84c5761a2b
SSDeep:
768:rmG+diUgG/cA8inHNn77qXuLJWNhtWgOMBZxosThG4vKx8diig9Y:FTo5Nnf7IbNXMshvTv
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP\license.html
|
MD5:
9a681c506d0f40b5211a049541ae1240
SHA1:
1ce5c028f8da6a19d8d0bd445100962086222811
SHA256:
d7fdab2bd2e68c3e9cd3f827136fdb2113a6c0aa05ac5822152aec419174c622
SSDeep:
768:/mOiUWVQG7ffHqYiai1mKDMAZjykkX6j7fLm8GP77Dbop+qDKWS+rddvs8phDh6G:eijl1mGM04g+P+hGwRfJBwSMq/xN
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ\license.html
|
MD5:
7fa6fa7351694a23df2f4f2bc4e195f6
SHA1:
6c9cfd0ff146ac9a668272373ef876f6817da3c1
SHA256:
838b508045cf15d8a13e1cf3d9fe8718017ad5bc72afec454b0e0c5c9e080098
SSDeep:
768:2mNqJChSITASif5QPvFhbKwyZWZrBX+UtcL4E0puMbzQW1xxhu88o0urObIXxTgN:dKChBBixcPbzLjaL4Jp/Q0IyrOMhTp2
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA\license.html
|
MD5:
6e63a6ab6f179df8fd3470cd8ec33357
SHA1:
11541bb6f16122731045bd4e384b64535b5feaa7
SHA256:
013b70187fda38b9b835d67aeba1f887ae78f3fc054f97864599988b66244243
SSDeep:
1536:jVeFPzkCflCpyMwMpMHk2Mm0yx7sJzt4zYA8JCyHuF+Qvo9vA:jVgkCflCEIpSsmKRJCyHuFbOvA
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV\license.html
|
MD5:
a2931db5f7bcdec0e530f180596cdf53
SHA1:
3c11470cbe1555e2922c88c2677bcc417d0688f7
SHA256:
5a1e9de18dc50f5ac59f8fc2c8cdc58ab6a56af03d3e14d7b8d3573a8363eff2
SSDeep:
768:1g3Iz4QCA97YBbuq+GsYqrZcOy/7C1gxTKB+arx3WQGb5YJlAwFkESN8S9i5N/xu:aIh9Eqqd+1hVXCi5CcI3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\license.html
|
MD5:
b84e081db876df1e4d039e9677ae17e1
SHA1:
ba38567b51d039c1dff2f642f53f2b8bc24b4bce
SHA256:
1d86367e505fc46f481dbfa793eb141b31653b7a007f34f1cd6caaa599272750
SSDeep:
768:biuIGcx1SxJqYWdYKt3E12cM4F5hm1sIuxpyQuyReCHSXYihnK/tSu+7jcquuuIe:zIn1qeSm54F5hooreCy1BP5ycjNgJUnQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\license.html
|
MD5:
e45d5f0fabdf734e0bb5b6a31964cf79
SHA1:
1ba08a2ed3bd1f3676ff6e9617c16c7492a93e05
SHA256:
827db86d951b1dd9353cc4423df5e1e23f2d363e3cfe31945ebc145bd36337b4
SSDeep:
1536:GgkFJwK0oYgrKLfQ0bglK6R8pzjrHdoHMBr:GgkFJz0oY1LfQ0R08pzjpWMZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\license.html
|
MD5:
275f627dc7d340f8d6d17ea43ea64e7c
SHA1:
89ccc7a85311a76d2a1d6f36f5a9c6ea7a841ddd
SHA256:
a1a5a53296b45285b637d39d9f6b01ba81175721ecfb8b236632d0c6c2f8a6d3
SSDeep:
3072:3G/G3dHgOr4o4SEkQw+nEIvu4wb6crbeTgGYC:Tc8WEIW4Y6tYC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\license.html
|
MD5:
0a78db4296d899fbe8c652306dff0466
SHA1:
1b145e5e5d84376543d8639935174024db6afac4
SHA256:
19e55e12a8c8fb6b66cb2df9d2b14fc483a43a8ad84ba80e3c0a2895c0f5fc11
SSDeep:
1536:TgIruS3xzVNSne3FJwPbvg/MIVO/i5G95+xaaYBynkgLTMzvwBWGLZ6Vaqv0Q:TfruS3xzyugenIf2xarGcwBWG9ga0
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NLD\license.html
|
MD5:
d5de0a6f62ef649570858973a0128dd3
SHA1:
7be2e32b582cd738a3b14b2aa9a47767f8df2ad5
SHA256:
1163d509581e2fc6b662ac83162c0e77da3e40711cbc3d01be4ce37e0af31c64
SSDeep:
1536:T5mn74hVgs8/vo57u+yGt776EhnVrJymFaLroxnm:T5mncos8CFyE7G0fymW8xnm
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\license.html
|
MD5:
9b76f4b7adedfe48ca899c993e152659
SHA1:
70b1543ab22122aac6ef27ff5b50eeed34c1c5e3
SHA256:
330e61ffb10945818ce40ff3f58cc8d2f5dc944a3513df4f15aaf216ae65e681
SSDeep:
768:JmEqQSQL3vn8WZdSqAk9fgz2zoD2GcWONpcEXgcu/32gVD6kquqU+986YdEZcI8I:xqQnzP8Imm1cONXXcegkk9tU8dp4nxj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL\license.html
|
MD5:
23abe2e599494a5203a3e3c88bf40481
SHA1:
a05195e62605e89dfb37e4114bfe2dcc6aaac90c
SHA256:
e5928a1ad74e035e9c1e25d00b646869b9c23d24861ef6530cdd6bce621806cc
SSDeep:
1536:VtjVhXMV/3HlLVgSOXmsw1tWg7RcXJMacL0oclLs:RhXk/3HZVgqtHWgd5+lLs
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\PTB\license.html
|
MD5:
84091f4cd8fa099a0ebda745573f5681
SHA1:
015e47fbdf211ee8496166956e6ae55f927950d4
SHA256:
fadcc388f54f2f3d3fcf74ed819483eb013991126dc80881262c4b78fc2bdb68
SSDeep:
768:jmNvjsZWLDU/nrRUiAeKQT1li/hpFcf2pMJprP2bDdsykw6ITB82tDEDFR+fB8PA:gvjsYLm7AeKOeyf0DW3w6IBOFAfo2xtV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM\license.html
|
MD5:
9464b1e1a732bb34b58d840c9bd00015
SHA1:
2836f75381d826d97e30d69b92b19b2224c813e4
SHA256:
c5496082cb4063b479484cc10b9d78a926fb134383dcdf6d0162ede6645a7e41
SSDeep:
768:3hmYDqHNk86RUbl+Bmcgc0XMBAyVUjOBLcgJAZrxwjdSeDqsyALCvSmhpyCOoRSX:3q/WSQBEc0M72OxA5qjEepRm/hpao4t
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS\license.html
|
MD5:
9f7df0073241862ccc46a12f2df23ec6
SHA1:
b48398a58e7a90f8af711ae318e99cf70a7ce543
SHA256:
81937bbda03fae1657d1bf49c6ac09f7baafab99b2769343bf51d9bf7d300cf8
SSDeep:
3072:i+UFrgwcPT1JEwhuTiifivQPVEXJ1mPrHPNlXhNmefsOqtIg+h9dS9wgQHK4+:9X+mBKxv+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SKY\license.html
|
MD5:
dfb0440f0abeea6c52a9d3ebc3039822
SHA1:
6b18e3c4780906f595eb60e01a25971191237224
SHA256:
6229aeaf1bde52670781321456f86123a8f4586977c4bacd75db11a91659cc24
SSDeep:
768:EHjg67H3ynjZqIMfZcoo6fPssvcx6K+GXJ01kkDeH/JhgNXr/jgFVVngiyFgFgif:VYZTLYu1kkmgKbg1y942zZ03mJEmV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SLV\license.html
|
MD5:
ba8bdb71adfbeb7a23c15fe291dd9cff
SHA1:
f334fa5ee93eba6f9e963ad63ca9d69a5536f167
SHA256:
730c5382a8e97357a600eea279ced36b90c67b30940b98d5a9ded23822266b8d
SSDeep:
768:+mmhoP6qfifCGNi2JeNSETg4AWOIK/zunxiEHPVbHSYbpKVb1T46pPle:EKiaGNXwSx4Cun0CP0YbkVbeX
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO\license.html
|
MD5:
65e27d70eaf95c6e74a670b3482401ef
SHA1:
607ac2d1118592eadf856b795be88d4806f10e82
SHA256:
3490181613028caeaf0efd3507c5105041ee1d73607a5e09753b79cc3ec2000d
SSDeep:
1536:4fDtzZchItSRchkkyTVb7iwnRmGBmt69+:4MR6kkyN7sGwz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\license.html
|
MD5:
a08dbf637462661bd5510f6bbb6e3db0
SHA1:
eaf691827cbd48cea23630003674abcaa94a4c42
SHA256:
070e0da41c5f61b946743a9953f8241dbc8ecdf1a6b438cbcff3c4acfb927187
SSDeep:
768:ITJOrm4SyxErNHyvt5RACosESOlipBRh5jUJttCcwlWGaePZ/gUQI133Nll3:8gBSC3v/qCZHsiHdMtMci5PFNQK3NL3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\license.html
|
MD5:
aaf113f655af4957381d28d2387f1077
SHA1:
4edf2488fe69e90412cc2230a230e765e1c272e4
SHA256:
1124ae648681bae5c92b1fa622d8d967981dba5428ae6cc9fb239d8da70bc8d2
SSDeep:
1536:Iy8ATG0rwZC63M1N8x0hguz/OfCL3Ld1DR:Iy8GGhZC63iNS0uusC3Ldf
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\license.html
|
MD5:
4c433c247b842f2fe9390714cacd7cb1
SHA1:
1f0f0882baec30997cca231b8f06c9dee68ce19a
SHA256:
b2408a300ac729f00aaf26ab568fc9717ee829a81ffb0562ad1163dc5037819e
SSDeep:
3072:4XEAb/9XnNdddyV1pW5XLSXldIIfcKRV68fcITOm4mDPu69+cgnXn7rOuZ0xF2:+j59XdyDpWCeS/xfsZmDPu6A7rsw
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.lockerxxs
|
MD5:
eae19a620d59b5a20a81adc9499d6b94
SHA1:
a93a7108d720936377738d2485a3939380ffd3a6
SHA256:
e1d9523bf491a28f0faad5067fe5f9397395d8565b5feb262925a0f0a7ea6c24
SSDeep:
24:vIN6BBFoYrCspoWe0tjtFbdL7i+8w7TXaR4F5ruAwWKtIclPDAz7WtFhT:3BoYrCspbRzJL7i3wzuRVPDAz7WJ
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG
|
MD5:
ef244529039669cd0ea90fa44e1f70ba
SHA1:
d86ec3d35c45de37c88bc8aa9bb6510bcfa36f65
SHA256:
3ef8fe26f5acb9bed7e10c67980affe7ba67f8e5126db5ea5d66b04d3d17299d
SSDeep:
48:Kx7bMl8z70SdnuzRTkcQkntaDnnsMUD3TQ:K5Yl8z70SdQVkcbntaDnnsdDQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.lockerxxs
|
MD5:
e9214165220cce36f1fc24ee5769faaa
SHA1:
dada2d116cffe12e2bd28dad9e8d953f8759c9a9
SHA256:
caf39c0546d0e6bf0135906c458f4f2db70fa7ea2e5c369de10d3e60d4ba0578
SSDeep:
192:/l2pPuvX+184eb5fe8/mX/tGFVuhL3/cobTZd++V72+57X:/l2p2vX+184ebXqVUobW+V72+5D
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT
|
MD5:
1365b25ec76578fc993b6fe575c6adcc
SHA1:
e328cef1d361226f256166cb237f23eddb0c021b
SHA256:
5581cd87081b64ec8e4ba080821b7a21d937490934e3307d1d651ad168a8c738
SSDeep:
768:dRolS/O2+a0TSiwTWB4px6O1D+7K344P/PwOY9iQLRmLbFkY/3ql3YhtZMAqQx:XolS2ha1uB4px51f9P/xY9iQ9E/6lSZt
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT
|
MD5:
7aa1af65ae6e75929f82bc638b086f77
SHA1:
b02e58b52396e4076c3ae24bf7ad057febfaed72
SHA256:
773e3cb36fdf295dbcb58d3081f3cd413c7812573c11cb09747aa867f7e7a497
SSDeep:
24576:qqWaLiZdT91C1HJwhdHI96F/AVXcbHqcznYLkVOc16/G9AbdePa3Oz1I0KqLJnOF:M41h
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.lockerxxs
|
MD5:
da8bea069e356885b07227164fb9a50f
SHA1:
a3549bfeaeeb675221d346c94d2c3ba9e8800e2f
SHA256:
e773ffeb1c50b8961bd26c5074e3ac5d6ea5a49c100960edc35f86fc809aacdc
SSDeep:
384:Yk2nW5QCaIE0XFmGIKuo0UXWrX7U//ignMHX9jHnMBgiF/5b1RaajfnDhMa1PNrp:b2KEGj0U0GJyNHMeipT9nD51reO
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.lockerxxs
|
MD5:
efaa7e0dc58f8060bbf3d9c5dcfa4853
SHA1:
d3bf564376c67f51eff95681903e1c5d6be1edf6
SHA256:
770a66d55aad6c49973b8bfb586baff7fc7fae2c42bd7b5e483867a68df82cbe
SSDeep:
384:QMnwCvEEwBYczA3PFO3BNnaZHux/U6J5oMaXCdrYswyWfidhPQz1G4fz/uN:QtYElbcfYBNnEHl6J5xaXGrYswpidh68
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.lockerxxs
|
MD5:
1d588a4604c9e69f5947b541a5055614
SHA1:
49f48927f979bbbe8af0c24444f5e0128d5641b4
SHA256:
9646f3c412f374551bcdd4db1db7675aaffd5c5582879a7d37102ed41ba8c19c
SSDeep:
3072:vtgJS+h3k3ja0TX9MBzoQAN7aSKaTS6qIRc2ID1VHJHidLM7o70:FQS+h8qBsOeTZRc2IHJELMp
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg
|
MD5:
425ad0b0b64992f202360acede725783
SHA1:
71396472f7447fd0c64aeba56e7135e7f7acedd2
SHA256:
8d130d32e2fb2d22cea0e1f0fbc03ade6ad7537225f4ff321f9cee6f20ba77e8
SSDeep:
96:HMEc8BD8QfQn2P6eicQxBRmLERfamAAAIyAAAAAAAf43rXej5tqDGz4NgNibONWM:sCQUP6ey0EEm1euODn7WWyRDm7IEhgL
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsVersion1Warning.htm
|
MD5:
e009232db4d117523fdaa7ba0fc55c67
SHA1:
7edb5d83c69d012e12f56d69e6bad4b88f06079c
SHA256:
93bbf421ab367ac3f605dee58baea51dae93b8f9b1140877756e8a7d6041b35d
SSDeep:
48:ZLvVa4WRKG0/w154f9js7alTkbfAYqh7GBdEA:ZLw4WD/MoOlwbojh6Bp
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg
|
MD5:
49297499f3b9fec1ca50c932698c9252
SHA1:
b9590e6b7f568cf2a3f6ac410268f3b4f17251af
SHA256:
df5d50922f082b714ff9e6e2d61f3acc26a06510abfc22f2999556491a5c49e9
SSDeep:
96:4MEc1gdaaWoDrR+3AAA4E+RAAA/AAApNyAMrOUtIrI0Ggqy2QE12Eqi5vlc+ViCT:pOa/oDxnLaEHOQtBViCT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html
|
MD5:
b661da86258acf03789f4c4f97233a1b
SHA1:
598e847e78fd90a369af2c97124fc6b6c095782f
SHA256:
a1f63715dc668a21d2382d951e5b9f8051d70e9268fa1941dab88fa835c1da95
SSDeep:
96:ZLrI6WDxHC2eF//NkuTkAGBYvXG94eTy/ir+o8O/7R7HoqNNVL9:ZoZDpAFkuTkAGmvXGtT4iSod7lD9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewTemplate.html
|
MD5:
f20878d1fc80bca1c7804796037df09a
SHA1:
887e57419311aad9cb4fbb90831baac951774dd4
SHA256:
3d02ebdb24f826cafb68551c4936b24b07c2ae4c3884c85424bafd64331b5db9
SSDeep:
48:ZLviHiVp9WVusH2pBlJJ0JKXNvmhYe0CT225DGeIMbTP9XHhggTbQjPsI:ZLqHiVXW0oIJJ0JK9vmhsCTi9MbTFXHU
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg
|
MD5:
5c6e15e682ce6da0d7b9fe5c44562b61
SHA1:
532466336a48d9b36f71deafe73e74cb84824c88
SHA256:
2159920e92c6ff9867a1e0eafc1dba22df9d8e45409a366874c5e711019e2b82
SSDeep:
48:nOn5Xz2StBmPDSs5FvVFIJ5ffPDcusIa/b+BX0LXQG/5/YjdOJ1scuP:yXz9+DSevVybLcu0/6R0TJ/VYZOJ1sc4
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBlankPage.html
|
MD5:
b8c5b66d0719a1f290c385d225b8f838
SHA1:
7e7502a6fe15500cd0fd74149260a4046823643b
SHA256:
3577fa03f24a021314eaad086f5772a40eed9acbccde3cff3c1038851f322bf7
SSDeep:
24:L11N5zfxv9111111U7+h0VZTcpMNSUAfakJx5hHBU:ZLvVhIusAp3fHq
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBrowserUpgrade.html
|
MD5:
4b542335bcd02f193f49d6bc3520485d
SHA1:
a0dc7a4991645e42cd07ca77fdaca705ce59659e
SHA256:
3eac4331b18686b861fc2f81e167db6c9f967893658fb04573adde253204a9d8
SSDeep:
48:ZLvVhIq/WQLfkP3fvSuqgl3LVkF5pWGjWyB+nXGBGj:ZLrIofkvSuvl3eUyB+nXGBY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsColorChart.html
|
MD5:
afe53b9158a8373816b2b6015f2be372
SHA1:
8b1a964a17cd55947c1a90e491446485084e275d
SHA256:
8980aa22e59684bf193fccb856efe696b4f2f13500fbb6b14e68f0276fe58da4
SSDeep:
12:L11xL5wMXKK4ssGz1QcvG6111111Mog7k2XpSu6Ider5wSfZFtG3:L11N5zfxv9111111U7QrIdeRDC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html
|
MD5:
0ad1860ee71dd4437fce22673499b553
SHA1:
dec51c5d4ab2125c06cb82143961100a1e6b3454
SHA256:
c2a51d01ea65c12433a7c869cc575aa73a62d8f3b5bc097345c24cf8f3338cd4
SSDeep:
96:ZLsaxbhiFdrmXNDQ/wFQw9TyHg5Fk4t4Ik1KoEGGes7NyL:Zoaxbhinh/QX9TQg5K4t4jx7CZyL
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplateRTL.html
|
MD5:
2813370b05f12da7a646d2403c0bad26
SHA1:
fe796701844d45da75a6eee21a64d666b7080ea9
SHA256:
63372ea6e3d025e930c139c7740a56e65eb05efda4f49497e4a7421f7cc11fc0
SSDeep:
96:ZLdDJo5OUD7kDZZTmt526aq94oZ7TB2055EdEqscywqaaNACvi:ZFJo5OUN5DNtTB2OFcyaaNAei
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsImageTemplate.html
|
MD5:
37b7cc2c506a6bd1d9da86ee55774fd5
SHA1:
e4080975065a59c4d9f4ba41cc83bef3e481caf2
SHA256:
5096dd8b195a530785980a54eb729a3487041aa72887b4c3c50a92707781d6b9
SSDeep:
48:ZLvKbC7a+10C82Y6tSLxHiaYTQURktY2AlaF7:ZLyT+1/RxtS1fSQURktbAW7
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html
|
MD5:
5399208bebb290d889cf6e643b118f7b
SHA1:
b0d27279813e2a4176c541eb0c9911a8785c5f23
SHA256:
8710115fb0550075dfdada112260686058f7dc05bc5f9f8d47ba68f68bdd357f
SSDeep:
48:ZLv4v0RnylCj4bAJg2kgYnw6TBfKh0TyCuH:ZLwGyl1MJow6TBM0TyCuH
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplate.html
|
MD5:
2c4b85f936505efdabdba219c3dad19b
SHA1:
b25e08b6ace572bac31aa456ebb28ee896016d25
SHA256:
52a9bd424abf52c359f0f35ddcb79e2a37a8d1b7af109117b158f955641016db
SSDeep:
384:ZEa7tjAc4SV8Q8iPCi4zHiOy/nLBfjOsb1o2y9TElrwnHkfJMP4o:VmqV8VBHefLBbKEOQo
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplateRTL.html
|
MD5:
c8556dad3c7833e6b5087b8880d63cb7
SHA1:
422bb85130b8d32317a8e25f8cd6e0cad2f3f76b
SHA256:
137c6f0bb9a1f9f433b8237e3759250e5b74aae5c5735a7c70f8a522fb5a6b50
SSDeep:
384:ZF8q1amYk1FUdwgflmi7srESXiej4iLQPiZliXqWYiXppL3Xid+q:zMS1FUZflm2srESXirZPAUqW3H3Xidd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplate.html
|
MD5:
235b82b6d8a712420ffc0debdf14f8cd
SHA1:
4123c30d6b51a23ea9cf4cea52af0b27f2989de5
SHA256:
67ce5191ff23f380bf6c2e56a6edacbdd0432dc9fc0f093e8245879b8e7c9142
SSDeep:
24:L11N5zfxv9111111U7v6XiGYS+pPemKN/fPgvANkl2/2:ZLvF7lemmUfPgvX
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplateRTL.html
|
MD5:
39bfefef149635bc6fa0014c0e4d29c7
SHA1:
e5db23cc6dd030b97d8163ab6566a8dc9a20c468
SHA256:
076bd1d47fcb50e6a8f2041a6319b5de781288fa50a4b6d39f21eb75c87e26fc
SSDeep:
24:L11N5zfxv9111111U7bPXuetm+SjGqF+SCWgpHd/b6bpiQ18NMvd+m13ug:ZLvUGIqFNgpNYp1poql
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\InfoPathWelcomeImage.jpg
|
MD5:
261275c63717d42b140f92f808b318ff
SHA1:
7305720ef8661f8e37341e0f03771f5ea13eccd9
SHA256:
cf92229b77faedce29d4e303dc0a69d2e514563044ff74e5fed11430c70f57ce
SSDeep:
1536:Lss2qqqqqqKMGvSY+GiJJJ7cO868RAsRBjDrj:Lss2qqqqqqKMGvgGOc768WsT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIcon.jpg
|
MD5:
76a03d2a4dfc56aa8d4b8d1b995615f0
SHA1:
c743b3c699a19a38d331ce07f75987f82e8f78ce
SHA256:
fd1d2872e6354226a38ac57aba7fd90fa23a72758b8882afcd210ca234eb898c
SSDeep:
96:y2THgQY3EQezjJx986dH0H8X00uQX9wpR7QPMfiYrD36sS15:DH5fer3qwPgMvrD36sQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIcons.jpg
|
MD5:
069a0bf1b2d7bcf2a13dbea939d2a4c5
SHA1:
6dac14ebd98542c4101149a311f2a24261a5a43a
SHA256:
ff6498ece356e839bbd3d7c1ceacb7b359bab06e140b6bc98cfa142a93d26847
SSDeep:
192:P8868AghYixmxb6aCxv6qhF6u69KOFFeIu72hoPxaIzRqHtg263YblF:JrZmxb6aCxv6q3963Y12hqCz6oT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIcon.jpg
|
MD5:
e126595ff00bd20bc33e2bea8ba0f5ab
SHA1:
68e7b6dad2f46bfbffaf8d77a372b0ffd2790ad3
SHA256:
ef74f82dd4f66b65ee83ec4104571d396f8618830ec96d04e79d61c5a505a19c
SSDeep:
192:BfCiLgZ2tl4mpiLN+XVSTPpdOGwW6P8PX/lKKKKsRiZthsh:Jbtim0JcVwTOGwbSX/Hhw
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIcons.jpg
|
MD5:
2ab98ae4dc5cf68f4066fdea6aba83fd
SHA1:
4a3c3e96fa3d91cfe072398756d199f667ccfe79
SHA256:
3f5d816e90f97028fc2736776db813f4dd2a28ecb437fa2fc0ee3608b631fef7
SSDeep:
96:ihtSM9BTjXJL7EAiEHqS+YMpWYtqe9TiCzJ/P7YnrzfztzBcMBFmf8LoK4IltaE3:ipBTjGPEKTpWIB1iiOvfjckLoKF7ao
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg
|
MD5:
8faa2d4f40837bcf91664e6f77150e61
SHA1:
7f3bfdc7d8354e25e738c24c1384c7f8a0814fe9
SHA256:
4218faeded852dcb14d318fefb94e702d2e7da5d96a2eb2384dc9c891d3a7c43
SSDeep:
96:Q+W+5Fma55PV1EVNjvsaOFtvVmLoIIII8rgNpHl7ZE4TCJcmBgj6ITXHi:Q+DMuZEDYJFtQNcNpHZS+m+6UHi
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImages.jpg
|
MD5:
069d5eb90f324e6ee9b6283c88dd3df0
SHA1:
717c930b8273f0028aeda76c1fa9c3732fca127d
SHA256:
4e50c65b6ab6088ab20824caaf8fca24f214d150f1a122ca9e68c5f00ee38b65
SSDeep:
384:pZz4/4TBZVC085nL1oYndwKPwewk17lGNgpYV+ywGUHE5:QQTKL/nq4d17MgKak
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImage.jpg
|
MD5:
632c6608ac85b1378c9d66d92bfba1a9
SHA1:
2cc4e2a470fb25b26ba02bfca3591da99690b36e
SHA256:
b8a08b2acc2de291331ad9ccbf91e978f3580c44a67eff656583657ea5766b57
SSDeep:
384:9SMJfozFv4s0Uz4Boz429/AEmB24fVixQ36Y/zvRn6hWysJsFhxk6:bo5YUzAonVTb4fVzvj7qz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABOFF.JPG
|
MD5:
eed1c52e746946bb566d2b55cdac841f
SHA1:
ce6964db9be6f4773c1c9fd72ab8e8e0dbe701df
SHA256:
4de9b011eb5dd9ed4169e72a50cd81b48286d15e27d23999b2d577a88627289c
SSDeep:
48:R7jH8eYaV12VNnXgIN6IzjpZhwPRZReY6O6YJqJoPWeCqe:ZjHjVUNXgDIztwPjsaFmoP0F
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABON.JPG
|
MD5:
fbba59c35561529c3a609a9538f91a28
SHA1:
18ee84b6e87fd0a152d1f6e512af5a06048c822c
SHA256:
3a2a74fa1a3fa3a971c6b29486b8877ff086fd38aa60c216fcc78c2941b98994
SSDeep:
48:N7jH8eYaV1W1wPplAycpHupjSQpY15eBUovz6N3uAn:FjHjVajXpHuM0fOob6hue
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WHITEBOX.JPG
|
MD5:
e88aad25bc59fc86d3dd7489bd20b235
SHA1:
5dabca12860f874514d679e59d9e0ff70e612780
SHA256:
5d25857f8f0855edcb048117becc0d026831a9ac80097ecf22abd83f38b04456
SSDeep:
96:0KBh98Epa39LO8rYmNn4ZqRmhlZ+lZplZ+cZ+lZBlZ+lllZ+BZ+lZq:Fm6a395rYmN4EkolhoxoXYog
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIcons.jpg
|
MD5:
20a22ac3b354f8d7ef7726937e67771a
SHA1:
99be40b182b5ab656cfd7d38d79457196947e1e0
SHA256:
3541c196840a0732404e389f81592e3e68f30389511c791c1b3688377a71e7ea
SSDeep:
96:6xMGkvtJ5GsthuSNELt/WETCkHQ/TgGqiy3:6xMSsthLc/WEev/sGqB3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImages.jpg
|
MD5:
5617ccdc8c53832c9de43db5b821e8fb
SHA1:
9eda5b5fe8aa4961457a948b8d2ced0e154db92b
SHA256:
75acc0aee258216591b4d73488a4451c1d51f8397b3d13809ed39841613b1216
SSDeep:
96://uPVEa7Z/QZMnlh33vusnQI0kw4i5ud09n8L8T+ozDA+:H4LBkMn3Pusn903d5udsAi
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\JFONT.DAT
|
MD5:
c2bc3b0e6651cccaaf938b75f22276ee
SHA1:
2194bcfb3df3d95bb9abc57fa57a2b015d7b3bd4
SHA256:
27a17cd0d4c882d97e3d23c23c23704bc41123a81d7c7a580953735449db703a
SSDeep:
192:ggLK3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffH:dse7o809tqPLk/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\LOOKUP.DAT
|
MD5:
ac685d1cd90fcc06dba145c2a6efbd30
SHA1:
ea55ddc4e157260225226cc4e393871efffdfbdd
SHA256:
c3905138d218b1b9930d87b2068ab8d7daadb322121c2468ea396e23d5d3a8da
SSDeep:
768:U/CV7ygseFR/6Y0u72pSS0P3Dgjoy7q5SAwqJA52WJUFSxsSTV9:U/Rgp/P04kMu2/on
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\APPLAUSE.WAV
|
MD5:
6243dfd2775174f513da15f57f55edf2
SHA1:
9eb594613d64728e680c66264756ab92c9dc385e
SHA256:
c94432d96ca1444612736e300f38a664a4744f906432eeb969bb74f0ff5651a0
SSDeep:
768:Rkepm3PX6eOhW4jeRlX5MyyPvDI/Tl7OEfjsz:O1ak6eRAXD8a5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\ARROW.WAV
|
MD5:
b5dc0310d18ebbdc91215d190a34b797
SHA1:
97c7780dc1e67f9150859373cf46f943852acc66
SHA256:
d1b38dfab908053c8dc06fe4d605208f3ae6a758bdb2b912784f05ae8afa6820
SSDeep:
384:jKhTzf28yZNwj9friuiQVWk1ZNY4ElqWRYh9u9mpu+GK0Zm5Q+WdYyJwXXAn:aTb2/XwRjviYW4/Y5JRQ9uUI+CEQFdY8
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\BOMB.WAV
|
MD5:
861d0d7a5a39a896df85a759b60fe2ca
SHA1:
b70c969c4cd5424447e93849ead6ecaef35edb2b
SHA256:
90bd6a1dd1801ad57fbd1994d72706b90e9b13138239d3796b690b046077851f
SSDeep:
3072:dAdnBYTEQknWSn8lFdelwv4TQa8wb0McM6mg6nrd5OlLfA5Eo0xz2eo:OdvnWqEFdealwb0McM6onOljNo0xz2N
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\BREEZE.WAV
|
MD5:
e03d2a214c0f8816f1e95e37a43b29a3
SHA1:
d35af3f10dd08bc5f66f978b9b1d91714515236f
SHA256:
152f014773bfdaeb841b1fde3750cdeb5a200408b6606c4275dea08a76fa357c
SSDeep:
96:WmF5jVj5stvnmMoaYC9qXBJVZBrVxnwifPuAEhX8x2FYmn2gAArCxTanR:jBGDT39KJl7wJlFf29AMT4R
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\CAMERA.WAV
|
MD5:
9a3f0f164686ca16b51d54243fb7d173
SHA1:
e3327ad6435b85d498e0870d872dd1f41c9e413d
SHA256:
712226755b8fa290cdf01a3dd726c0b38fb6d63805288c663968a974f8bb0101
SSDeep:
96:O0rzO9L4ohq+QZiI7kY9TKhFX97YwUwdy5jen6nVA8GABmrDkry:O0OqfpZiMkYNKv97YwUwdAjljoiy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\CASHREG.WAV
|
MD5:
82e146f27d1d3f3ec90096e6ddc29c49
SHA1:
9d0b34506f9dddc1ba213a54829d6ea1f219a09b
SHA256:
a599f8900cc3cc3e2d5b73846c5ff072450e976dfc363185f9c37e56150327a7
SSDeep:
192:JU80p7F5iMXea40y9xUjWFtI9CQRgHN2fiM3tX:q8sMbF0y9KqXIXRgHNT2tX
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\CHIMES.WAV
|
MD5:
b2e483f5274740da8b0c2fcab25c5102
SHA1:
465f791034d8d1a3860fb96b2acef91a2ca2315d
SHA256:
aa4cb15b565c4cc5a20ffee3a6fd558d6b1b7201447e45b68ea273b6beeb4645
SSDeep:
768:hMDIh44/ByL+YHJ/1obFtKrhGYcd+Wa0G/bRj4TNpyCGUoB:2Ih44YL+YHa4v9MJpyeM
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\CLICK.WAV
|
MD5:
902e345ea951a8cd3aa6badaba4f868a
SHA1:
de69d060f6f8b6d868fc16552879f809f10063cb
SHA256:
80e49fbdb4155b7e139f06a5ea910cf01951d9a85524a7d2a7ac5e73742233c9
SSDeep:
12:2one5NPz/VRD5Gy+IadLVIxwI4EkNdxK8+R8+VfevM2sLBrzRXkn9yWqmf3:xnYPzdN1laRVIxwIEY8+yKpl1XRQ9yWz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\COIN.WAV
|
MD5:
11a31e38cb2dd5ffb67fd6f23a81c7ce
SHA1:
27fd43de44fdb2117cf7adcea8804cb8f32d4287
SHA256:
92a5e99ddd09a80d7f11a96b7214d06a5b9ee3c1db7de533785d2287d438e4fe
SSDeep:
96:1KgHajtR4yJYktfEeBoutwojvAKmnPMFPiCgx1YB364GAD88Y+rE9McHqWiN1u2o:YMajtRDfEeBttFgPMFPFgxaEa0+r8McR
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\DRUMROLL.WAV.lockerxxs
|
MD5:
70b1aa04adaad1a9ffa84a383c491060
SHA1:
2dbf0c5d017b9f3fa92eca6e782fb0a06bfc4bb1
SHA256:
925391e1e0864ccbb7c2f71ab3ca3939afc0d68964b861ca50fdfd391766e8a9
SSDeep:
384:DQ7rwptVYoHzaR1FhqzUZGpyI0Su2O0tT9nSJBYcCgpFd8Le/Sz8:U7rwZOizHypSuGTnSJBUgFWLe9
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\EXPLODE.WAV.lockerxxs
|
MD5:
669d815eb5e5f416e249c638b0c85b1a
SHA1:
6f60fb77db5577ab25e3c3c9fc8809aa32b07574
SHA256:
074cb4519338029a9f7e4b4f132a81024c6bb1acee4652e3cd57bd9b733206e3
SSDeep:
384:os3rpnQvumw+rrKfrHtGO+69E1dTVZXhjiQsl65bw7fY5RmX3UQ5Ls3HDlplSaZR:p3dnQvlLrsGO+6OFZxWraYERcEQ5LCPd
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\HAMMER.WAV.lockerxxs
|
MD5:
1620dd3b2b0ab9ec57992a119f906844
SHA1:
cf354ac69abd740185b9776c48e355abf4b50b8a
SHA256:
7020f6c040838b67ff1908bae50bf13ac208d89054cf5f17a3c4f765002f0cb9
SSDeep:
96:j27rJJMnEclzb7Ob4U5Z/OWAhcN/eF3Who8oJhvJwTToTTo:yrn8zb7Ob9/mQ/AmDWhk
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\LASER.WAV.lockerxxs
|
MD5:
02c7e782824852aa4546ad2beb5ddcdb
SHA1:
c8326237f6e51d85bd79d272330709809335fe38
SHA256:
653b0a6944c2cefa9edb631d71339090087ce2e34202c701d3cdfc9ddd9a7b82
SSDeep:
48:PVwvg3T441YCKLBNImQCaujIgijPp9maAtwsgK0VfQ:PVwvgv1YrBN0Cau8pLmaq3gKgo
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\PUSH.WAV.lockerxxs
|
MD5:
e705d307a41ab45fb1b38a47c5240e37
SHA1:
ff8aff9d2e4a03b07905b3eef218efb0490dc54f
SHA256:
ab767b93c0f614fc9146b2efd69f5c5ab34349c8ecd051eb0eca118a43edc36e
SSDeep:
384:5j9n5StgJR0+3eF3jsNqFWaCTyTdd86y6h1PZmPrJW6k:xSqN3eCNqFWKTdiM1hmPrAh
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\SUCTION.WAV.lockerxxs
|
MD5:
f321cfe4324cea0babf3a5e12f59eb67
SHA1:
58764f2a7645235916032265db6266f07d73fd2b
SHA256:
0caf3996fab18a47ff00c6a324761493ab0f08dac0145ab0d2c236662c86a8fd
SSDeep:
96:5jNy+tYjXfiLzH69hw0Z9mkbDuoxOSyva5xJjj6jrbUZW+l7dhoOngWSrygkG9jM:n5SjXqLzH69FDmoaoxJEsGbu7l7oONSA
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\TYPE.WAV.lockerxxs
|
MD5:
96c23284e0811570e1ca32d7287f70f5
SHA1:
f4cc2200066eea94251a90a7d9278e169cdf4a2a
SHA256:
91ae2ab30de3d999839c952e8e2af364147c48e6d084e2e5a0a3100752fe64ac
SSDeep:
96:FkgzI41+qfwvwugf0MP4I388lkAINlYZYuoHA9AJt16k8J6:FkEjwaZP3plgNiZD07v6c
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\VOLTAGE.WAV.lockerxxs
|
MD5:
5ce5616c1c64ceddd9914d9a01bc5ecc
SHA1:
c428e94e056887b6afc0496a64ad7359a0c21e54
SHA256:
5750b3f14aa2fb1eaafccc340c5035d78deaa81f04e55701a3bb929a6a7bbaca
SSDeep:
192:z/PreWXnzHDeDtZu6Yvz3ZHBFPs9NIu28AhZHHY1Hy7q8X:PeWXLDepQBHX4uu28+Y1H6
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\WHOOSH.WAV.lockerxxs
|
MD5:
e7450f5a36ca82d1b9789be308662b97
SHA1:
aa249dfd3aab0438b010029c068a5c8b6809cb6f
SHA256:
e75df24abf3d336f8504ffa0a6877c1d60fa02aadceb76d2bc24b4e08e6ebb99
SSDeep:
48:jPlPPPP386KsA94MhsEWAL3O+iiVSJ2Fu6UOk9fjygOZ:jPlPPPPiqMuENL9HE2FuTxHOZ
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Program Files\Microsoft Office\Office14\MEDIA\WIND.WAV.lockerxxs
|
MD5:
ba3d70fad182ab8dab8fea3674805f46
SHA1:
cd909e5b2b693c7a442191d0b48dd690c0652a7b
SHA256:
a10f1ed25812b266ec9861c45a48f8b3a1033223b0bc609a5f72cdf13816d1ac
SSDeep:
192:cmNH4T8gFmd2f5gSU5HQ6tryrjI4E7bRQmGR8Cyfj5N7np9L7NHw4kJTPPPPPPPf:cmNH4T8gMduW1AI4YtzGiFFNrTL8TPPn
ImpHash:
-
|
Access, Create, Delete
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\benefits-4[1].jpg
|
MD5:
4abfc394a6e78a5c778ec49ddb9c275c
SHA1:
ed1e6375ffba4af220bb2c33647109e26f5d8ff3
SHA256:
a513b0174ef7835d3d57b663d6bd0e4453e47d9e9050ac6cc71ed72bb5b4f467
SSDeep:
1536:GAvRPguufLOW9Bimq9KXGygPkmIEaQV++5eu0J7Z9DgoBrXTOcwv7Ev4FmJmj357:GyRq5uK2jPkmIEt0+wu0J7HMoRKfAwFb
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\browser[1].htm
|
MD5:
0a2e20b6903c78642221300ee04fc1f0
SHA1:
59cd4650046571b5d1c8ca05c0184123b0603989
SHA256:
5ddc9655a99391701cbed463ea8f7c49dc155cdad198da473c7351f26ac33426
SSDeep:
48:DU3S9wrkmxjYgXsYYfD5kTKKt1O/N9o7qX1Tasw56nEBRewvEvcYBiC05ELU3l/x:oiIZYgcYk5kTio7q6AECu9Y4EYDf
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\e4-190963-91cdfbc1[1].txt
|
MD5:
87b5ee4f17fc7385f6e2aa4b0574f0d7
SHA1:
be2591a03337fc268204b6d6899d7b3aa8cf6a2b
SHA256:
6e443d0916087b02b0d961afdbcd6bddbd0accd4d8629388763308b24ee0e9a7
SSDeep:
3072:ZrXS1RvTPdh1A/Yfhu6XyTPR3McOAFw/UyVZtlt/2V:ZrwvTPdh1AQfhu6XuhbcUyVZtlt/2V
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\eula_text[1].htm
|
MD5:
c521f6ecaf981e630d0af8d96dcebd2a
SHA1:
acb27b7036aa235c614b16c99c732d323fec5f89
SHA256:
867866b93df734d2b810318dcd7141c16ae229e195024c330e7b91397be0b0e2
SSDeep:
1536:W4wHJqtu0qLXekjXD0aabC3gYn7TIplu44ZhbGhtb/MUBwopKw6:LapBj27C7T4luBz/UNYb
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\f[1].txt
|
MD5:
c3b13f180e01a6e716c1d6fc05ae2b9b
SHA1:
a55c48102e269d64e2e0e1b49a030f6b1db95f15
SHA256:
d3c261c06a07734dc9b799c65ab98ba0ae277dcbd5fa476247e40101bfc16521
SSDeep:
384:Rtf2DooQe8D2HGYvHA3AC04mDQc5IfQg0Ta8k:/f22ZMHvHPCHmDpIfQg0u8k
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\google_plus_16dp[1].png
|
MD5:
e351b2336d76225a231da261e990317a
SHA1:
2d92efdd50b794fdd7d91b0c8215dc71f4d7b9a4
SHA256:
89a06afd54d6c7b930dad8e4153e3f0702c1dd70e9b3fd059bddc4b5d06effe2
SSDeep:
48:wOilGDlbBuYqCoDi0GhfJvJuW6PtRjgmTU1zwV:HDlVuYqjQfJvglSp1O
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\index[1].htm
|
MD5:
9cb2627a2515e0fdb06670904304f9cb
SHA1:
32e3d2b6ce0c83f943132fc803afbf3d09919307
SHA256:
865c56025911c584bc7eb53860d4b338ed8daf40689eb255eea7699fb978f168
SSDeep:
768:9KCtW0bdOJer8lzos9eCEiQwPEXDwbBrmpBzJn5PRm6BJ89rl9rGD8HgTFLHMULx:CKdOJer8lzoQeCB0DGrmpVJnnmh9Z9X2
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\print[1].txt
|
MD5:
b60deef087371cc3c73425bc6f0a1aba
SHA1:
72fa56f877612081231aad7ff04bb46242fb2c76
SHA256:
3aab45d79069bf6c7cb8dc2c695bfea882e8c71aa810a5e1c8cb8f8c38b049cb
SSDeep:
3:JUOwJa1cWAAo02XMBSUPgbEg9HCDKZmhVPOaS1HZJN2xmWpL1eI0Yn:JUO8a1cHAnvBBPkE4gPhtjS15Jk1UnYn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ABV8L7MY\tecjslog[1].png
|
MD5:
c79b7f9c734e6f025e4bdd6d92214e5a
SHA1:
1d2290771127cf1882a778df07edf20d5ce450f1
SHA256:
3ec9f6d8c55d627cc4f66559e0adbf17e0d1b3e328d79bfc594c41e71e1f53dc
SSDeep:
3:yionv//thPlE+kSI+DtmyiQFBHsSgG8rfM2XT5li0nn:6v/lhPfkCDtmyXxsV60n
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AA3DGHW[1].png
|
MD5:
2d364f714080611e9ec92ebbd9b4ca09
SHA1:
15d2ec13dd694102dfa523ead984b71a3f3964dc
SHA256:
8c0d4abf708c9536ee5a0faab86068c8d021cac1a15d3e3373ee15c02a261983
SSDeep:
6:6v/lhPWv1AjEPJTKGOB8so9effYVG+beemoJbturCQP2TfcmYDsTFn:6v/7fuJT9/hAYneOJborpP2SAJn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AA3e1pt[2].png
|
MD5:
769593790bf084cffd056f5cca051e2d
SHA1:
860643e68eed3a78f7ba5760b0b82fde37d51f62
SHA256:
ac9de9b7bce6c541f99dae06fca0dae41be8f670717680c28647ec8172f9ced5
SSDeep:
6:6v/lhPWv1A5LpR3zznPljgBZRn4WYLKOjNodY1MvQL3B/vYqqlwpmSuMEhmwJS:6v/7ZpFzznN8BvyxodY1MoL3Sqqlw8zY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AA42ckd[1].png
|
MD5:
dc07438f099450ef0beed08723a44643
SHA1:
9c0b66d7f82fa4a8e99b8f1aa334e72b9423bedb
SHA256:
cfb02d45d200e44642b95100d71dd11276d08b6cda0b9d21c76fc04ab1a175ef
SSDeep:
12:6v/7c0yMmtUWOMJ+DLAA/ib28QX9osMPNag2DwQKsmGnlgEGdl1WEKKwCwe:P0yZUJQ+DO299tMlDf5GMl1WEK8P
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AA61ILp[2].png
|
MD5:
ada7b75ef5afc1a9020407a976c63b6f
SHA1:
9e647bad0b58c74a98ea2e23da7d92316a349944
SHA256:
2b410df18857c8f109b4bb2e23e64e9cfab91960185cd80503380af4a67a5491
SSDeep:
12:6v/7fGO1S2SDRL3aiVyhp6zLvFzEDVGbjZhBxZ1AQP:ES2SDRL/VyzavF2VG71VP
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AA6SNZ6[1].png
|
MD5:
517c7b2f85dbb1afda5500ba461749a9
SHA1:
8c749caab058c73f2bd8f27ca94b234871541653
SHA256:
cb90230e5c0726bd2ed9b856f9573403df63ab32411bf5746c33bc486067493f
SSDeep:
12:6v/7fbIOEr4/nnsak0TnpWOAMBdCaioscwj2Uzs5M/oVudfJe5P2Uv66yW+s1p:+lTTf1VB0a2j2goU5JkV+6p
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AAbyinC[1].png
|
MD5:
84667ed5d530fb958b7684f3b114a4fb
SHA1:
b93b25e05161a024c040e4d52004a9474b7cd873
SHA256:
8020b11f70618073133f22ba105018b9239b96927df6fa212d8cb9dcb083a22c
SSDeep:
12:6v/73i2kSwhRQpmRiidCbDUOoTWDImJHQv/wp12gHRfhDbHbjbqGFmg0vFn:okSHmzAbD/oT+H2/I12wRfhvHbvRFmjd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AAicW5W[1].jpg
|
MD5:
72b6c82ea1b48535a2c48c4c637461af
SHA1:
79e89a02633d83057b7e8d3ee72fbc36f204f9e8
SHA256:
86e93aef33de97ab7de6b55a5efae98db49e19837dffd3643cc9ce5f2e9ad0e0
SSDeep:
192:KKhCuNj+CvwmmaFVsm2rdQCZxyRSFjT3TL0rXsDC4LDz1x4IxfoUFEoUhXNapYCi:KMbNFmKVsRiOxyRY8mXJxWoUXapYR
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AAj0doQ[1].jpg
|
MD5:
f30f1e6c4feb1bbd340c12912bf428b3
SHA1:
53c60c142ba87217ced0aeb3bef2841fd3dcb75e
SHA256:
7b9efeaa4f178317b953fbdfaddf5795a0740c5c27a068a3a50ac2e12e32abb7
SSDeep:
192:6KK1vgIrPoRUb5EffEpc9rsJtCNwyEZalo:6V1vgIrwub5EfsB2zEZalo
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AAkqhIf[1].png
|
MD5:
8893a338f953917ab1a11fc0bac722f6
SHA1:
52dbaf7c61522ac70a85b665fe051166d4380f14
SHA256:
2161a6ed535a568023803aab675c61a57c0e170d7e0dd28eab223ef97260d6e5
SSDeep:
12:6v/7+BMNcH6ZculXb1JkZpGIUZEZOcenH28COGhNFfuoumus/7PVPf:9BWwsckZJkXGwOLH28laQoAOf
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AAmUyV2[1].png
|
MD5:
db3cb94c708e6478f35c71c8607a1daf
SHA1:
1be3af365e192f001687e7e1642ae149ccc51f41
SHA256:
6c0964e5a231918ca47914258588e9630993e203d0986092bef5a713d5003b6b
SSDeep:
6:6v/lhPWv1A5LQLcgqI4bIr2JnwGTSzkI52e235c3HMjLE+JipdtlvbG:6v/7ZQGbI6nwR4ILQqIxkp1bG
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AAmo09p[1].jpg
|
MD5:
d8e2bc8b7491719e3735bc27e48c873a
SHA1:
9c2b1968624a3aec02ad6c7e5a07842de86274c1
SHA256:
49f8b3b8a3746034103d6cb9819b5d5b993e7b3a8407b0b56fd1db612b135542
SSDeep:
192:KKx2uo4AeJ5AuO1gtKk2xwd382UyQw7SKd4EV+qN9aar/wlEy5Q:KgAeJ5RO1gtKk2x4UqZGEFCEx
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\AAn7gKR[1].png
|
MD5:
4affb56089ee853f68f077a9886413eb
SHA1:
0a243d109ee531351c88878c6ae7cd499ece5e46
SHA256:
3749ca40cfddc0d74d1d43ad85a1fc3bde0f1f89dc48b613652451c3db7c104d
SSDeep:
6:6v/lhPWv1AKjF+zuxiQ5x3nAZLbwdWbS2U0aRgPGYXNiI:6v/7Duximx3AZLbw4XrPGYXsI
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\BB5zDwX[1].png
|
MD5:
68e6c5a3a8f8dc952f14b7be56db85f2
SHA1:
3b54829fc553a1c8292d25d31496edbd26c575d6
SHA256:
393452f4ee48920b2273a712e9087b2186280ad15c20286e1d1eb62c2c0ef293
SSDeep:
12:6v/7XYSqdXEYWp5WeX+ybt9tKgIQU3zhohV0lDwUbdqD6beKj/9eLZjgA7OJmmBT:6WuVp59uy3t5IQ+NoElDwUsD6bJsU
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\BBaK3Nm[1].png
|
MD5:
33667a720c10d706ba3f6ae867a5a604
SHA1:
ab22833367aa525aba95d045505c5f7018e28020
SHA256:
8471478e24e61a4a6aca68f91b159a1dcda759e98256c1e721b7abce206f7ef2
SSDeep:
12:6v/7XYWAicxRkZOVdj7ZjGew+RfTwu39/8OYH15fkpc:69dcDJjGe/hTwu39/83HCc
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IKQEEPZR\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm
|
MD5:
51509d96593b0cf3f6cd4951327430f7
SHA1:
38928ab00aabcec2376809a207794a0512ebe046
SHA256:
4ce169d621778bc1a1b21e1928cd60ddb61f8502c244e7705c359ed43f3429f5
SSDeep:
24:hMVzT6YTkrhC+2/VSKWFnguGuYpiIx+81/b4xhX9ImWQoNFIYpxGBOCH9uNg2nq:Q6YorhC+c0nguGuZAUFWFItOCdUQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Benioku.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Benioku.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Berime.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Berime.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\IrakHau.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\IrakHau.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leame.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leame.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeesMij.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeesMij.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leggimi.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Leggimi.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeiaMe.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LeiaMe.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Liesmich.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Liesmich.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Lisezmoi.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Lisezmoi.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Llegiu-me.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Llegiu-me.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LueMinut.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\LueMinut.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMe.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMe.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCS.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCS.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCT.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCT.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCZE.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCZE.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHRV.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHRV.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHUN.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHUN.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeJ.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeJ.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeK.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeK.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMePOL.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMePOL.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUM.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUM.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUS.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUS.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeSKY.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeSKY.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeUKR.htm
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeUKR.htm.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\HOW TO DECRYPT FILES.txt
|
-
|
Access
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\DefaultID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\AdobeID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT\DefaultID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\AdobeID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE\DefaultID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\AdobeID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN\DefaultID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\AdobeID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU\DefaultID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\Hanko.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\Hanko.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\Hanko.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\Hanko.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\Hanko.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Dynamic.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Dynamic.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Faces.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Faces.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Pointers.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Pointers.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\SignHere.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\SignHere.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Standard.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Standard.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\StandardBusiness.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\StandardBusiness.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\ENUtxt.pdf
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\ENUtxt.pdf.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_AE.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_AE.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_BH.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_BH.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_DZ.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_DZ.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_EG.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_EG.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_IN.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_IN.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_IQ.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_IQ.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_JO.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_JO.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_KW.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_KW.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_LB.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_LB.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_LY.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_LY.txt.lockerxxs
|
-
|
Access, Create
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_MA.txt
|
-
|
Access, Delete
|
|
|
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_MA.txt.lockerxxs
|
-
|
Access, Create
|
|
|
For performance reasons, the remaining 3810 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|