Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\svhost.exe
|
MD5:
5b9ee071922cd3aba060a4979a403e0f
SHA1:
b209dcdfdd030ae1944507fcd9ef0eaeabe22f21
SHA256:
590ea5fa2db24715d72c276c59434b38d21678d6dcabb41f0e370f6dc56ab26b
SSDeep:
12288:CX9dpYgbwv2URHWix3FAJNzhmrrTetNfCfKziP/pl6zIoh/IVc66wQ/XyG4e:8ymwzMix3FALhYTetofKCl6c0vjXyfe
ImpHash:
1a395bd10b20c116b11c2db5ee44c225
|
Access, Create
|
Sample File
|
|
C:\BOOTSECT.BAK
|
MD5:
3c815f91bd819110e7c647fd417a6f4f
SHA1:
f0313d03be27b5e4b7900d375035f4f2fbc55630
SHA256:
b75a07b860e8fc03382e0b9ce322c298bbcde6b4fb1291ca190d191a67b2580e
SSDeep:
192:YZBQXj3/BnYnMZFoagonDZbDQcDAatInOkj+dSNKJL:SBQXjGM8aJnD1aR7ObJ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Boot\BCD.LOG1
|
MD5:
77268e715ca5c658471dbc3f68dd8361
SHA1:
6191ff77183936c4ab023fdfced65076abd7df66
SHA256:
f1f12bd24eba27f105cc2dd75b7768f2841c4c9876ec9a94673940d7bd28b5a3
SSDeep:
12:gzJb0qewpx6r55sXfK40b8nE7iM4Wm+D6cMGZapsOs61Ut:gzJ4qewpx6QXfK40oE7i5Wm+VMGcpsOy
ImpHash:
-
|
Access, Create, Delete, Write
|
Dropped File
|
|
C:\Boot\BOOTSTAT.DAT
|
MD5:
3916c2dc758af9a13f1892f20837e70a
SHA1:
8f65f8672076e3a02b8bbd84f4e97ac041a1ae2a
SHA256:
87f9bc17a4efd9a84e4155ba13d38a0b8da2850846adff8ead8a6c1c588f49da
SSDeep:
1536:RJZYqJToLZYcs7g3jgFfM483QAVNkEML8mZlR2AvJjq1vCx:RhJT8tsUjpQ+NkEs8mZv2Axjq+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Boot\READINSTRUCTION.html
|
MD5:
449ddc4a3baffa0105bc8d4b0b7b4641
SHA1:
a4ecb9a9ee2d4927e360ccd719109b6448e53900
SHA256:
0ea0e07448c814669f8a1ac26838cdc4a41c3a27ae096ea3dbd317961466f579
SSDeep:
768:Qme6adEDvURoOd5I2OJoEBYugeJzrXCv/e5yHW3ERIi2zCpZH:dssvURol2OSwYgJ/Cv/eSW3EGq1
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab
|
MD5:
10994c77228d96cf2583647add7a83bf
SHA1:
cd5d08132f5ee0e6268995f43b8d930cedc331ac
SHA256:
1654ca704e99a24d214ccec8def44739dae1006c03dfa346bf0065ef655029e9
SSDeep:
196608:8WVszSlDxdH5kHGTNp2k8gIlYhBWFnurNdTwHUPIn79vwOkdpKyBExBuYT6:Dr9dCHGT/2LgIWjWFnuMHUPsBkdpKyBL
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi
|
MD5:
728986305340b463a0cf270bd5fd335c
SHA1:
8d344583c148f02aeca3ac04561e68d0ac664e0b
SHA256:
14cc361c3a2091ad7b6b5a094d371eabe0a6c6af3215e0b4140e970c6d53fd07
SSDeep:
49152:xqhdg1gaVyLvtKn63CkmxzmrQ/n4VPwshQgccOdJgD0Lc61IJwVLT:xqhQ0TAn63Rw4V9OdJHY+LT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml
|
MD5:
3b99bcc4a0f6716b5e5f56c4f3418277
SHA1:
c9c327aa0cd6bcc26c92ab739a968432a221f7ab
SHA256:
e3ba8f9ab4a1ba24197d81b399bdd3d0a4221080375386e37e02bb97bae5effd
SSDeep:
192:FGnsGPa+fGzbGH+DFY2eDVMSIrberz0kMbX9ty9QUfLLK8gcJi:FGnsGPaRzbrDFY2eZIbe/0k4XCQUfLLS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
a90ed529b7aa45cafe262c7a2bcd5dd1
SHA1:
bd6066b59f66800d0bcc924b269ab01617d734e1
SHA256:
40f3b475e751aff3357eb8fb0aabef0161aceb382481a1710262a3b3bcdb4912
SSDeep:
192:BEMa2SYId9ZRH3XJ9wsR6Y/vHiNazngBaDHIT7Jr:BEMa8IrLXZclAzngckT7Z
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi
|
MD5:
c82257c3cee4501ba66534558e1ef177
SHA1:
37e049a1acf1cd3547e0ce5e6d01f21676c10b81
SHA256:
89a8e0f6dac05d042aa6999f61e4f10fb6c544f953b087db73dbb4837a311fe6
SSDeep:
49152:5bR4UfhJWYtHOLiVWL9DLLrsQjV4RA4oht9M0+ruDOTxrY:5FDfKYV7qfLrs8V45eMx+t
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml
|
MD5:
1c5c67944219292c07a49a56f9c65b1f
SHA1:
1af129c65c395586a28ffb0a1c4008130c8b85c6
SHA256:
a638f1cf76dbc9d506ffed9efc6b2c56dd339281be65d1ec4996a28a6da71d3d
SSDeep:
192:3AgJbCKCqDSzMjvad0yEaPtyTDbbmEmdaTq3TstGdh/0kmapk6BwJQ:37bCKP2zMj/aFyTDbFm82gtGbsVapfBD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab
|
MD5:
71f9973c74c2996b8ed97b5966958cee
SHA1:
b65909cd0e506d73fe6f1983fc5ddfc677fc0722
SHA256:
e8bcfe96b1c1b8fd8ddbc14fd1c3c995e985b69c5ab95da693e368583b60b2d0
SSDeep:
196608:qE88aWAPcRqqtzOcA+9qctwTdumrLjcjER3C2+Y0z18gzokZOH+DxkDDSfEquSU9:qeaEMc5fcukqym8ClZOGxkXSfEU0Xd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
a61b85dcff6a6cb2f75fbc5cf8eabd3a
SHA1:
c7b6c368ca545ea499c1cfa14bda3c6320133a6a
SHA256:
6e270157147bc5ba32824ccbc63e8df7498ed8ac5f8d743ae735c6f7834e1657
SSDeep:
192:FndtcDJN2Bku26g1ovV+Vq8gsZa3Q+kFOcwxUt2eYIBOA6DWToi3Jq:5cz2J2c+Vq83kgeHxUIeYIYAaYI
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab
|
MD5:
4beb3a73b4554b766872cb6829c1e639
SHA1:
7375969f180d5c25823cfd414b92017cc1b4728b
SHA256:
9daf5f4e1306ed87b94929fc471a0baf434fdc27a70dde95a014ad65e53a0762
SSDeep:
196608:KXqvUNfO4+Si/AtYwLrFqNka+kMTJgniXJR6LESrQK:jvUNf7+WPJa6TJRX6ISR
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi
|
MD5:
c390c6215581ce99c9e6f3362f2063ec
SHA1:
0403ce66e4e3954f732d3e43b5bcf5a6b91c13de
SHA256:
d39ec7b33abb83b7d246c601e0603b7a561ca339f7bc901ea11f8be666f94c31
SSDeep:
49152:998G/VWyqouPM9/2DxB+GmyhEyC/NpOZL9oCH0VA8tOtn:9988hQgORay2LOjfqFy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml
|
MD5:
af60ce5f0215b84463133cfca43c5980
SHA1:
06e7ca236c19f1c5d1a355f80d9b3dbb58597057
SHA256:
efa2114afa9a3c58ba133a137a59899fec67a4039c480cd308abd15d3e9648dd
SSDeep:
192:grIb1I3xxZyol8kuFJ+kAm9IHf0A9wP7yw7E95TJvqDQJQ:h4xxZxlUFgkAmodsyO05Fqc6
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
ad68665759571d145cefc583c12aad9f
SHA1:
ed4ec3a4059aa4e8d88b9d0861f458b43795e2df
SHA256:
cc5bc2bf41acd64388e20b1b30ad1bc61a9482eb139c17ff75d2a072ecec56e3
SSDeep:
192:3E++260Z927sdmJZ6VOcC93adqmhULygAYl7DppzKzJZ:3D60SskZmOcsZh7D3ezr
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab
|
MD5:
84675bdeb354e5c142a9907cec6ee54e
SHA1:
78b3c1a70fb00951d15335f532070c5dfc17efbe
SHA256:
8663b292005693e30a043bebae0fd4f0904df83346f63c70e9bb62453e3a88c5
SSDeep:
196608:fdIfzgIpA25fSRbF7UCFt7617Sha1U0iVRn2HkKSRc3TQaNKyITP2:qrZd5UCCv6MtWkY3kaUz6
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi
|
MD5:
a20e68491ffe8fc15d20f7cd304e105f
SHA1:
de5755fac3293325bc747ded2799c0d031ca1304
SHA256:
59350f1509a3b78c39fad1b315a03ac707949c821513c8da8c9c4bbcbb095db6
SSDeep:
49152:MU1NgrB1DiOoFauXPSULMNmo/pSHPnlvIqL7FclktdSwegTg2uIvfNRy7JZ0mxGt:/SPP4HP74AoRSHPnlvTBc+tdSeTgzMfZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml
|
MD5:
a27ba854f8535ab43090ed013ef41bc6
SHA1:
96889fa237a61da7151b49f0122fad1a087b0c19
SHA256:
a1cbbd8690a35019937a0d07b13280fe2007309df2c19d0a3a806972fd11a1f5
SSDeep:
192:wUbRB54BacmsrWPSj5ikWL+Eybz2LjDJgPsa5PefreCckP2Jd:5bRofmCP9mLnJFqf3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
6811684787c6faf1428ecbbbcc3f0094
SHA1:
a06de73d0c59f7e1bc591daf569afd3362471e63
SHA256:
a29746f15d0109b086fce714259063b43c10b3f074bf270814fa0b2619fc7211
SSDeep:
96:40kqkRAfcAbzM9UMd7//I2Txm4/e3/2xoJA9XDxtPLmB3boFfXxkqfvf3XNE/KD5:uyRAvbI2TgaTJtFa3i5zfvfWCFu8CJW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
810cd335913b091aa8dab0e35141c82d
SHA1:
e8aa664b973ed277de88167e6ecdff9e7b26fa84
SHA256:
49543b5d2cec723b91eeb48b45f77fd4e087a8d224763cf744adf406d0d54b27
SSDeep:
192:eGMy68EsD1fRKnWJK41UCo7g/eMWVUVD5VRCJO:efy68z1JK0KiZHWGB5vC8
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab
|
MD5:
34e031c5c65ce8ee712a3688133fc5d7
SHA1:
8d0f0604e88e19b0ad3eef96d7a1f5bd4dddbea8
SHA256:
5e0cb9935c3c1094cbc3e51a1cea275c2e612a11d73ef25ea9b97cb788dc3aac
SSDeep:
196608:5jHYWOowQVXBo0kO1in4RrNZ2s23qI8sxhQAoyEiztOWZwarzaWauzsXyMopHs1w:91waT71i6rN5YxnHlaixPZ7dsXFJfThy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi
|
MD5:
b4c98e0e78c7b2706b70be890e146c3e
SHA1:
6c7c9f4a0dc56986c8078cbfa224bd3043008a11
SHA256:
10766d54f2d5e6e3c55c060ea4a287225430e2e7f558971eccdbe8385fc41481
SSDeep:
49152:oXgU7Phm0A2aYYHr5Qcl/VnoQzu6My0oOLObudQ40s+4+z9ATn6TM:owUzhml9fLqcl/VnoGl8Obudz0NZATnx
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml
|
MD5:
27900d3b6c156bcb03eada161577b27d
SHA1:
cb42310e9f585e95c573a59bff47afd3d554f452
SHA256:
1581473516e2f3caf9328aeddfe8a2d45e6bb2feee636cf5386971763c2e9501
SSDeep:
192:1J0HWJ3TRqWmwx64LLDZSLOGjZ8Wji5zgq9ITxBsEYE0BEcJ8:1J3/Np3Z+3jZ8We5zg4ITckqEcO
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab
|
MD5:
be0fcc9bd86a9f8005193e242d94122d
SHA1:
b3f0a5ac0df00189a40aa9af7970a5bfafdf0042
SHA256:
c7fe963abd39a3e9c75ed542cf17788f6cd46b254fbb56bd10415dedb60d6e04
SSDeep:
196608:/ZnzmVyf2PmmqR/DyqO53XbUUzDUp5ut3gXFBOhL8gOd2HlYJRZx:/ZnSVvVqR/Dyv53rM7+SBE87d7JRZx
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi
|
MD5:
3d4aabc71520a707c188aa38fc09da25
SHA1:
e45d02837118b26c3ad9ec2a4b72653890973d52
SHA256:
be625ab33a21cd6edbc3b1cae854fe80f2f3f876261825091de6926456070c1c
SSDeep:
24576:QDsD+AyD+Sx890gptzzv1jmdE/4slADoerbFoIUnQrlFjA:QDKAKv1SmA1Hmd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml
|
MD5:
18f4a3eeeb40d8cb6294a9dfd4bb262e
SHA1:
502baa8bb8a7e5e4f88e6a7884ea3c029a280524
SHA256:
c19b2743d92f946d8f1b18c9ed83218fd5f8bb373b119ef4ec433184535b4dc3
SSDeep:
192:85szRDZi9vFs6zL6QS/FHW1eSMrg02JwBwqJT:isfiUAL6xeeSr9Ji9
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab
|
MD5:
fb4e4bcee2fa52200d1284cfaec9328f
SHA1:
d11d31b9678dfcf8ae5cfa2cf9cfcd47dbadfc67
SHA256:
a5d0284139c296410d958614cc4822d75132cfb53e0e2c8bc63c10507a78ee0b
SSDeep:
196608:wAjHRbZ/YO3L5cE51KZ2Kqjdxmi58vnaGPZJsdhxrkJpAMqWlhL+WQ7dDD4qkwIT:5HRbZkXqLmRnawkspMYL+WqL5U
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi
|
MD5:
f43ab04bf2fe1dd2851959774f6b2efe
SHA1:
2945aef42afabf60bd2e795a203c9cd46190ef69
SHA256:
45aa24a6f8e68100ed5835650a514d1fb1610c3f483bdbe5970b54649e45d2f1
SSDeep:
12288:6hipWhfmJHCnEcyx450+RBTYdHCy2rgqbVDFNTfOA5cXo/IQLr/YzW5csBpJ:1p2uhK5ySnB8dx2rUucUnnT5cI
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml
|
MD5:
ac2d5a68b78128fe6e1ca44ffb028407
SHA1:
87a11ac58ddb66042c380b3158da0c2a978f4ac6
SHA256:
ad8c7fe260cd244cd6aad149097a7a1b739f6df683ed60dcd0c6a6fdccde7ba5
SSDeep:
192:cr6K+G38znms7oNV29CtqOsH3AlF0YQwP5giM5oHGfJd:cr6K+G38zms7ieyUiM5qGfz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab
|
MD5:
02f74c162c43c5d1ddd1e438481286e0
SHA1:
cb7758402af57e4778588f726690d3836645f3af
SHA256:
560cbb12f11ebc6924eec756516d6346ba810549abd58ba9aff1f5ea62d5ea9e
SSDeep:
196608:m0yaMk/7nSN44sqMC96l9FprnvRaoJH0pV7RTVhMAEsdImqh/K:T444sq56RpFaod0pBosv
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi
|
MD5:
cef332c7de10ef55bfbeac63f7a7a7a0
SHA1:
00c888b7525bacb571f6353ba0b8f07a54a275f3
SHA256:
6752e6b09d571fe9c1a115716336111f83ca9843b4d60989005fb91ab7cee3a6
SSDeep:
24576:awPLZw7Uk4raLdSn/s80J1i6Nb8Md/7xURW/5EGiIy:awPLp080D7Nbdd/7GcyGiIy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml
|
MD5:
ae91284aff54af0b9835d8980b0a4c5b
SHA1:
9a3928a4e64a29721fcc7e3168406d99ec001203
SHA256:
2bf267205cd2a872b0a3cc7c9587f8f1afe9cfc84892af699b9b6f406b661ffb
SSDeep:
192:0M8hJroN+T/d5HIUUgxHkpncgV8Ij7ZbEAKH/XIzpUuauYU3Fx0JI:0M2TvHIUBkpncDk1Pg/XIzeVNqmS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi
|
MD5:
9c44eb495aff305559a3eba35f9f1891
SHA1:
998ceb89de30292553bb41bd48b25f33bbc7b3a1
SHA256:
70270e583d9811c3f480400d86be0953eb7a011acb66b2e3d0d81245c2309c38
SSDeep:
24576:ZQu+d88tDielKVuuZ1bLYEAjcoEWgM62ZK9sv:ZQ/eelONXLPA4Wg2K9i
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml
|
MD5:
4bfc9e36233f83897aa38774a6e123eb
SHA1:
f3dfaf2cecb85101e6efaea74e5b0f39b1c04a1d
SHA256:
042b8685d707efd92df1666c8e7ab39e382b2125a66949ff050eb4157793abfc
SSDeep:
192:lXfXtYXYEy2mIGA+22Ptdwsg+fpOVgQ+c2jOvlJh:xvoZy2h+2E6x+c2Svln
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
874bf17eff06e82c76c6bca1f0a920f9
SHA1:
9171cb2738aecfd05a7c6c6959be61276e289627
SHA256:
986e9c68abe98cec368bab1f2efee025435069557d640f55b18a9513fdfbdc91
SSDeep:
192:DR9Zvdlyq4aj960Bgo2GqC/4YzyZ/Vb+zIJMJF:DRzDAw60BN2sJa+zkMn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab
|
MD5:
ecbe421fb64329ae100fff9d42ca6be6
SHA1:
72d997ea86b8d7bc20a78104beac765ce73b1d61
SHA256:
fe0f400f8baf85573108d82ca72c75b22489d35b189ff4c628049bd759adb2f9
SSDeep:
49152:zxmf/5ErBJCq4PTvI1ajoF2cKPgSyI6wv6qze/l1r6VwYce0oMyFmHsuZnHX:zxmf/+rBJCq4PbeRKPVZq76VwYHZxcn3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi
|
MD5:
08ea534c256040169c58c4b3f42222a9
SHA1:
b1cc5d67bc843d6c77a808171ff284ad203f59ac
SHA256:
11c90314342f14164cf7f0f5804dc240b29d5c3dfa2652bc4aa017052a79e673
SSDeep:
24576:7+u5MrdCT0U57flKUU6Hz+ZVMHOuegeEMd7SOJK:yA4dCT02NrUmfotSV
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml
|
MD5:
b56fd090aac5dcf8781423400d733de1
SHA1:
a8fced2e353b72313ae1ca28e7796418fb3f6a05
SHA256:
a90aea358c8b992446b2b682df7bd96b125dd7a79fa8a7d2de20438d7bd82a0b
SSDeep:
192:oxdA4/BGwB716gF6PtwbeMOKP4PTuvrqqUpi5w0JP:WdA+B7rSKO3KWO5
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
cfde4b9895b45424f016d719d3202af0
SHA1:
16dc2b6d7c07d671dc4f954a6b57c0460fba8502
SHA256:
dcb5c3a60e0605032f8d439508c50bdddd21cd90e1355174e504eda0b2cb7c65
SSDeep:
192:KKK4GCAVsgc9vn8QbqtFyapw/ILtmyhOy/6bvMKGG5JM:Kv+AVsgc9/9YOUClGQ+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab
|
MD5:
25409fde9631c1ef1bea010849e98539
SHA1:
bde3d178b4a9d281f07feae97212ca24d7b6fd31
SHA256:
ea75d89ce5091c6a3a23a25178d34b143551e03d917368c18cb3cfb16487b7ad
SSDeep:
6144:Foul4ISQg1n7utt7XVtD2r4D7P+L6o2in+481NalYV5wo8+mZXfkan:FBQQcnKtZziEDil7nZcb8+AXfkan
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\$Recycle.Bin
|
-
|
Access
|
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000
|
-
|
Access
|
|
|
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
|
-
|
Access
|
|
|
C:\Boot
|
-
|
Access
|
|
|
C:\Boot\BCD
|
-
|
Access
|
|
|
C:\Boot\BCD.LOG
|
-
|
Access
|
|
|
C:\Boot\Fonts
|
-
|
Access
|
|
|
C:\Boot\Fonts\chs_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\cht_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\jpn_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\kor_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\Fonts\wgl4_boot.ttf
|
-
|
Access
|
|
|
C:\Boot\cs-CZ
|
-
|
Access
|
|
|
C:\Boot\cs-CZ\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\da-DK
|
-
|
Access
|
|
|
C:\Boot\da-DK\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\de-DE
|
-
|
Access
|
|
|
C:\Boot\de-DE\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\el-GR
|
-
|
Access
|
|
|
C:\Boot\el-GR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\en-US
|
-
|
Access
|
|
|
C:\Boot\en-US\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\en-US\memtest.exe.mui
|
-
|
Access
|
|
|
C:\Boot\es-ES
|
-
|
Access
|
|
|
C:\Boot\es-ES\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\fi-FI
|
-
|
Access
|
|
|
C:\Boot\fi-FI\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\fr-FR
|
-
|
Access
|
|
|
C:\Boot\fr-FR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\hu-HU
|
-
|
Access
|
|
|
C:\Boot\hu-HU\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\it-IT
|
-
|
Access
|
|
|
C:\Boot\it-IT\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\ja-JP
|
-
|
Access
|
|
|
C:\Boot\ja-JP\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\ko-KR
|
-
|
Access
|
|
|
C:\Boot\ko-KR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\memtest.exe
|
-
|
Access
|
|
|
C:\Boot\nb-NO
|
-
|
Access
|
|
|
C:\Boot\nb-NO\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\nl-NL
|
-
|
Access
|
|
|
C:\Boot\nl-NL\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\pl-PL
|
-
|
Access
|
|
|
C:\Boot\pl-PL\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\pt-BR
|
-
|
Access
|
|
|
C:\Boot\pt-BR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\pt-PT
|
-
|
Access
|
|
|
C:\Boot\pt-PT\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\ru-RU
|
-
|
Access
|
|
|
C:\Boot\ru-RU\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\sv-SE
|
-
|
Access
|
|
|
C:\Boot\sv-SE\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\tr-TR
|
-
|
Access
|
|
|
C:\Boot\tr-TR\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\zh-CN
|
-
|
Access
|
|
|
C:\Boot\zh-CN\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\zh-HK
|
-
|
Access
|
|
|
C:\Boot\zh-HK\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Boot\zh-TW
|
-
|
Access
|
|
|
C:\Boot\zh-TW\bootmgr.exe.mui
|
-
|
Access
|
|
|
C:\Config.Msi
|
-
|
Access
|
|
|
C:\Documents and Settings
|
-
|
Access
|
|
|
C:\MSOCache
|
-
|
Access
|
|
|
C:\MSOCache\All Users
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\READINSTRUCTION.html
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.networkmaze
|
-
|
Access, Create
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
|
C:\PerfLogs
|
-
|
Access
|
|
|
C:\PerfLogs\Admin
|
-
|
Access
|
|
|
C:\Program Files
|
-
|
Access
|
|
|
C:\Program Files\Common Files
|
-
|
Access
|
|
|
C:\Program Files\Common Files\DESIGNER
|
-
|
Access
|
|
|
C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\DW
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EURO
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Help
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\da-DK
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\de-DE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\el-GR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\es-ES
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\et-EE
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
|
-
|
Access
|
|
|
C:\Program Files\Common Files\Microsoft Shared\ink\he-IL
|
-
|
Access
|
|
|
For performance reasons, the remaining 377 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|