Filename
|
Hash
|
Operations
|
Source
|
\\?\C:\Program Files\..
|
-
|
Access
|
|
\\?\C:\MSOCache\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\..
|
-
|
Access
|
|
\\?\C:\MSOCache\All Users\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml
|
MD5:
daa90ac5b4dca519dc30468dbb6b812e
SHA1:
022b70656a3ab26592c1e329c528489dab2991af
SHA256:
186e512b3949176b8c3f5db502cd0accde0da8b1de8455f091628517d98d0cd6
SSDeep:
24:lrmbOBti5Lh/249yU1p2DBAcp1QjR0wEWT/eYIvuubbnIlxYXL6iMudnWya:lqbitiphe4QJmo1QFfG/LbexYXL6iMuC
ImpHash:
None
|
Access, Read
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.spyhunter
|
MD5:
daa90ac5b4dca519dc30468dbb6b812e
SHA1:
022b70656a3ab26592c1e329c528489dab2991af
SHA256:
186e512b3949176b8c3f5db502cd0accde0da8b1de8455f091628517d98d0cd6
SSDeep:
24:lrmbOBti5Lh/249yU1p2DBAcp1QjR0wEWT/eYIvuubbnIlxYXL6iMudnWya:lqbitiphe4QJmo1QFfG/LbexYXL6iMuC
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi
|
MD5:
addd60a2b59ade9eea6aad5e8d8e32e5
SHA1:
e783be7577afe9cefdd432faaca68d4b3033ef33
SHA256:
8051664c9bac495be6619b1a47da5707939476a1774e47112e8b36b20a66c4f1
SSDeep:
24576:iy7f83PV4gElx3P6WBWkmf3egDqo8o93lo6pjEkB:iCzgLf7qo46pjE8
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.spyhunter
|
MD5:
addd60a2b59ade9eea6aad5e8d8e32e5
SHA1:
e783be7577afe9cefdd432faaca68d4b3033ef33
SHA256:
8051664c9bac495be6619b1a47da5707939476a1774e47112e8b36b20a66c4f1
SSDeep:
24576:iy7f83PV4gElx3P6WBWkmf3egDqo8o93lo6pjEkB:iCzgLf7qo46pjE8
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml
|
MD5:
a9a606a60496bee5b7a764b6b504b74b
SHA1:
3001396f8fb670b8f4f54c343a5aefe5fc919f97
SHA256:
e56906741d9857aee9758ac407494ef0e0fa7582b1cf685c1c5a298411bf70ab
SSDeep:
24:IiWgbczJg+2V0rd0NNSXfEIi9AmyAoKj24XKLSR:IiW6cC+2VJNNaf36A9Y2uKLW
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.spyhunter
|
MD5:
a9a606a60496bee5b7a764b6b504b74b
SHA1:
3001396f8fb670b8f4f54c343a5aefe5fc919f97
SHA256:
e56906741d9857aee9758ac407494ef0e0fa7582b1cf685c1c5a298411bf70ab
SSDeep:
24:IiWgbczJg+2V0rd0NNSXfEIi9AmyAoKj24XKLSR:IiW6cC+2VJNNaf36A9Y2uKLW
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
b32754c2cfa725d462dd302a79d43521
SHA1:
c0b126058682def74fd4bf2f3fb527b259e42b78
SHA256:
b1a8c6baac4165d88665271aee34e7674350de9ac422e72e5f21950dc68901ad
SSDeep:
96:whTKOSTwEZUDQn9OJFeI1WX25EGF1xnUnftEET/zmWZYvBzOM5v:whOOSTwEZUU92Fh5E+1OnVBT/zpZYJtl
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
b32754c2cfa725d462dd302a79d43521
SHA1:
c0b126058682def74fd4bf2f3fb527b259e42b78
SHA256:
b1a8c6baac4165d88665271aee34e7674350de9ac422e72e5f21950dc68901ad
SSDeep:
96:whTKOSTwEZUDQn9OJFeI1WX25EGF1xnUnftEET/zmWZYvBzOM5v:whOOSTwEZUU92Fh5E+1OnVBT/zpZYJtl
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml
|
MD5:
1eb4bff8280345c7ee5c9bd3d23d1755
SHA1:
791c9fe20bfcab3b21a83d55fe8572cae39ad1ab
SHA256:
f5bad9ffdbc5e60fb15029a621453e7930ad9ea8fb36b84a9d8b52a1019ce7cf
SSDeep:
24:f3OBY7180vX4uF66rFhkcWCqcJHr+/JPwrhV6yI0IF0beDez9cx+5lnlLluerbVR:ff7DoGPa0eJPwrhVbOFQa2lnlLljrJR
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.spyhunter
|
MD5:
1eb4bff8280345c7ee5c9bd3d23d1755
SHA1:
791c9fe20bfcab3b21a83d55fe8572cae39ad1ab
SHA256:
f5bad9ffdbc5e60fb15029a621453e7930ad9ea8fb36b84a9d8b52a1019ce7cf
SSDeep:
24:f3OBY7180vX4uF66rFhkcWCqcJHr+/JPwrhV6yI0IF0beDez9cx+5lnlLluerbVR:ff7DoGPa0eJPwrhVbOFQa2lnlLljrJR
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab
|
MD5:
e74285eeb1cc93a28c4377c0180bff74
SHA1:
30eedd31a8b225a53637d2f889c219a42c2d75a7
SHA256:
13673693b386435725daf3d39f30e3922276339385550da5c771c88e1936c7a4
SSDeep:
196608:abCS6U3OGj+OBxERLwNP0EvnPzzbqJtq10AM34J+dVGOBJcxPHCXv:abP6iSASLwvXn4tIS37rzJgk
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.spyhunter
|
MD5:
e74285eeb1cc93a28c4377c0180bff74
SHA1:
30eedd31a8b225a53637d2f889c219a42c2d75a7
SHA256:
13673693b386435725daf3d39f30e3922276339385550da5c771c88e1936c7a4
SSDeep:
196608:abCS6U3OGj+OBxERLwNP0EvnPzzbqJtq10AM34J+dVGOBJcxPHCXv:abP6iSASLwvXn4tIS37rzJgk
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
3059d44b0200f010c6f43b6040f9917d
SHA1:
ffe62f236c015769cdbf93f164bdf08612cbaa24
SHA256:
124c1a34b6765d38e46dc9d56b74377bb1271ec9c3180fef63237d0ef6cba9c0
SSDeep:
48:/yfbeU3LUeRMRN5+CEdr7lT38Xd4m0DgDWJudkqV1:aaU7jqN5+CE3T8XdtIuiU
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
3059d44b0200f010c6f43b6040f9917d
SHA1:
ffe62f236c015769cdbf93f164bdf08612cbaa24
SHA256:
124c1a34b6765d38e46dc9d56b74377bb1271ec9c3180fef63237d0ef6cba9c0
SSDeep:
48:/yfbeU3LUeRMRN5+CEdr7lT38Xd4m0DgDWJudkqV1:aaU7jqN5+CE3T8XdtIuiU
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi
|
MD5:
13e938b128dee40affd1530b4f63915b
SHA1:
7041d0a11ccffa0630ef004bc68f02b804e51afa
SHA256:
7b918b1e51ce8038054fba7d9f57b364f694a37facbfc7d6dcad60e30cbf8646
SSDeep:
49152:CHYLL/WoGWeLjN5HRYnSt20yeJji34mElfaL:CqLVVHqA4S
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.spyhunter
|
MD5:
13e938b128dee40affd1530b4f63915b
SHA1:
7041d0a11ccffa0630ef004bc68f02b804e51afa
SHA256:
7b918b1e51ce8038054fba7d9f57b364f694a37facbfc7d6dcad60e30cbf8646
SSDeep:
49152:CHYLL/WoGWeLjN5HRYnSt20yeJji34mElfaL:CqLVVHqA4S
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml
|
MD5:
415fa1d5cc3fabdd29b980e4fbdab7e3
SHA1:
8fdd778eeea854d4796583734d2c954d5f6579c2
SHA256:
dbd3aa4c896d6ff2a53960b9813f42e3e22d531c97ec1bdf6edee45149728f6e
SSDeep:
24:MiOccKmJflSSijJRByEigF36xB20FdTVtonR/w1VnwtLlaAB2t+gL4hvGH9OryOU:nZPRQA6xlTboVw1h4Ll9AEZGdOr67IGv
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.spyhunter
|
MD5:
415fa1d5cc3fabdd29b980e4fbdab7e3
SHA1:
8fdd778eeea854d4796583734d2c954d5f6579c2
SHA256:
dbd3aa4c896d6ff2a53960b9813f42e3e22d531c97ec1bdf6edee45149728f6e
SSDeep:
24:MiOccKmJflSSijJRByEigF36xB20FdTVtonR/w1VnwtLlaAB2t+gL4hvGH9OryOU:nZPRQA6xlTboVw1h4Ll9AEZGdOr67IGv
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab
|
MD5:
90e699e6ba69740e54459a197a68daa1
SHA1:
a3a99b1d74f23b851e9c91ae76683db396df1509
SHA256:
3fa899291ef47badd50922495250616963730b73794565fae7e0d89fcf77086d
SSDeep:
196608:apua/qmm4dvbbCaLWiAsaF5jXk2dYYP+cNp:xvqRmaLWhj1XwYP+cNp
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.spyhunter
|
MD5:
90e699e6ba69740e54459a197a68daa1
SHA1:
a3a99b1d74f23b851e9c91ae76683db396df1509
SHA256:
3fa899291ef47badd50922495250616963730b73794565fae7e0d89fcf77086d
SSDeep:
196608:apua/qmm4dvbbCaLWiAsaF5jXk2dYYP+cNp:xvqRmaLWhj1XwYP+cNp
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
5e2796a5634eea9fda10ae34f1198a96
SHA1:
4e5fdd747f1d2f815b5a12126e117a7b893531b4
SHA256:
4460a3a075c35e1899174f2bce50277d31dee8620906bf3e73a62ff0cceca070
SSDeep:
48:Zw+IU7JC1Z4hFr712rvWO6NJVFDEnbglC6dHqT:i+17/hV712H67PEnbgVHqT
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
5e2796a5634eea9fda10ae34f1198a96
SHA1:
4e5fdd747f1d2f815b5a12126e117a7b893531b4
SHA256:
4460a3a075c35e1899174f2bce50277d31dee8620906bf3e73a62ff0cceca070
SSDeep:
48:Zw+IU7JC1Z4hFr712rvWO6NJVFDEnbglC6dHqT:i+17/hV712H67PEnbgVHqT
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml
|
MD5:
dcc19d96ce964ed329be3368450f50e4
SHA1:
753e4ade967f2d71842046760c8cb4f0d6728467
SHA256:
71200d1f93d9d0b397d81c9ea56c9d4bc4a66384d3d68eac26d72a5bbaa7eef8
SSDeep:
24:GYGG7cr2q22OW6NPa9cglpLWsM8Mx0+bnnWBRske:dcBOW6o9RWrtUake
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.spyhunter
|
MD5:
dcc19d96ce964ed329be3368450f50e4
SHA1:
753e4ade967f2d71842046760c8cb4f0d6728467
SHA256:
71200d1f93d9d0b397d81c9ea56c9d4bc4a66384d3d68eac26d72a5bbaa7eef8
SSDeep:
24:GYGG7cr2q22OW6NPa9cglpLWsM8Mx0+bnnWBRske:dcBOW6o9RWrtUake
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
55653079cf15d3c8fd4b1ed0ebc526e7
SHA1:
8b2385332eda7631a746ced7c1a3a72ae203cc95
SHA256:
da877d93a4ed0586e0df150df2cf4cd5ee4fe68356417e23ec3a93914fca5576
SSDeep:
24:PVjxypV6VYubj84CuRscM86FFp8WJzvF0E26/9gtmd0WYNXRIAuBFULoGLq3SIX0:x4pVEYuHC786h8kv/D/9gGIWzBFaRKY
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
55653079cf15d3c8fd4b1ed0ebc526e7
SHA1:
8b2385332eda7631a746ced7c1a3a72ae203cc95
SHA256:
da877d93a4ed0586e0df150df2cf4cd5ee4fe68356417e23ec3a93914fca5576
SSDeep:
24:PVjxypV6VYubj84CuRscM86FFp8WJzvF0E26/9gtmd0WYNXRIAuBFULoGLq3SIX0:x4pVEYuHC786h8kv/D/9gGIWzBFaRKY
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll
|
MD5:
1ca6207d2254d3c8ece434fd142782ba
SHA1:
3cb00d83c6aca08a98db33ef1811153c64faaf3d
SHA256:
e64ec46cb7b9faaeaa29c0a05fcf0de56aa4f142e4f60d496a7a3f7c7033f751
SSDeep:
12288:2hr4UCeeHTA80gIZ4BgmOEGVN9vtI0E5uO9FAOu8axPFmRyy6aEt:Ce2g5gmO791I0E5uO9FAN9mRyyzEt
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.spyhunter
|
MD5:
1ca6207d2254d3c8ece434fd142782ba
SHA1:
3cb00d83c6aca08a98db33ef1811153c64faaf3d
SHA256:
e64ec46cb7b9faaeaa29c0a05fcf0de56aa4f142e4f60d496a7a3f7c7033f751
SSDeep:
12288:2hr4UCeeHTA80gIZ4BgmOEGVN9vtI0E5uO9FAOu8axPFmRyy6aEt:Ce2g5gmO791I0E5uO9FAN9mRyyzEt
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab
|
MD5:
85850d9d04f705353006a58b4c106332
SHA1:
83196d5dc6453c86ef222c3ada29438cdb7ac436
SHA256:
d095a1ebc8ddae9832370b837241e356de6af92348e15c4d4293115d95b2d0fb
SSDeep:
196608:EmQPX5JnY8khJczLZKt2m/6rGzudE8DHGgr34qnaO6UHxO9nx:1Qf5H4JMLZKt27rGqhLroqnabUHx0
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.spyhunter
|
MD5:
85850d9d04f705353006a58b4c106332
SHA1:
83196d5dc6453c86ef222c3ada29438cdb7ac436
SHA256:
d095a1ebc8ddae9832370b837241e356de6af92348e15c4d4293115d95b2d0fb
SSDeep:
196608:EmQPX5JnY8khJczLZKt2m/6rGzudE8DHGgr34qnaO6UHxO9nx:1Qf5H4JMLZKt27rGqhLroqnabUHx0
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi
|
MD5:
e69edd5cf8a96bde4bcdcc3f0b033b9c
SHA1:
2b86475a0b0d64448046349e2208828859546069
SHA256:
215741e9c5c9cd09ee87a5d97ea5526fb1c417b1162c46a810413292a45da31c
SSDeep:
49152:qvlLsUloOZlxyt+BDljNNHk3qS920yrJoDNpqTIIIIIdhh5Ax8yB:qxsluyAwDhpqTIIIIIdq
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.spyhunter
|
MD5:
e69edd5cf8a96bde4bcdcc3f0b033b9c
SHA1:
2b86475a0b0d64448046349e2208828859546069
SHA256:
215741e9c5c9cd09ee87a5d97ea5526fb1c417b1162c46a810413292a45da31c
SSDeep:
49152:qvlLsUloOZlxyt+BDljNNHk3qS920yrJoDNpqTIIIIIdhh5Ax8yB:qxsluyAwDhpqTIIIIIdq
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml
|
MD5:
9348b1ce5161c4c37a043450c52ad7e1
SHA1:
34065c3c48195018ed05e97f0c83643b5aa55188
SHA256:
db26378258f5255fd4234e543ba136ba1503a1e146c870e7140a2b6b57642397
SSDeep:
96:jsLxg27P+XTz5uyXywdOUYqSJLAbrysbj//XYLMWGsAtvYBaadJAVWGNxAAF726e:jV2r8v5BiwdO7qSZjsbDPYgW04aa/AId
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.spyhunter
|
MD5:
9348b1ce5161c4c37a043450c52ad7e1
SHA1:
34065c3c48195018ed05e97f0c83643b5aa55188
SHA256:
db26378258f5255fd4234e543ba136ba1503a1e146c870e7140a2b6b57642397
SSDeep:
96:jsLxg27P+XTz5uyXywdOUYqSJLAbrysbj//XYLMWGsAtvYBaadJAVWGNxAAF726e:jV2r8v5BiwdO7qSZjsbDPYgW04aa/AId
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi
|
MD5:
fcfb4cdcc7b9d9f3c8101cfb6d45d4b3
SHA1:
47ddc1093f333dbd5092a9c677c5c226af924e11
SHA256:
11fd06fc212698f387ceb821a16700a2f71477c36390926ec6d817fe6cf63254
SSDeep:
24576:f7f83PV4gEux3P6WBWkmf3egDqo8o93lA6p7wbt:+zgLf7qoQ6p7wp
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.spyhunter
|
MD5:
fcfb4cdcc7b9d9f3c8101cfb6d45d4b3
SHA1:
47ddc1093f333dbd5092a9c677c5c226af924e11
SHA256:
11fd06fc212698f387ceb821a16700a2f71477c36390926ec6d817fe6cf63254
SSDeep:
24576:f7f83PV4gEux3P6WBWkmf3egDqo8o93lA6p7wbt:+zgLf7qoQ6p7wp
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml
|
MD5:
9ea051c61b865a8806c9a8b3f5331193
SHA1:
baf5cd0d3efa61cb4efcbe6cc6a16bf56b7a2d7b
SHA256:
3f03bf2a44331f90f33ef961f8583da6d7413647e99b8b6ca6ec3d491e21ff42
SSDeep:
24:f5Yyt7nY64SGf4cI7BN3Uu32urWez87bdqhcB:qo9ls4cI4uGifzQwhQ
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.spyhunter
|
MD5:
9ea051c61b865a8806c9a8b3f5331193
SHA1:
baf5cd0d3efa61cb4efcbe6cc6a16bf56b7a2d7b
SHA256:
3f03bf2a44331f90f33ef961f8583da6d7413647e99b8b6ca6ec3d491e21ff42
SSDeep:
24:f5Yyt7nY64SGf4cI7BN3Uu32urWez87bdqhcB:qo9ls4cI4uGifzQwhQ
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll
|
MD5:
83dd85fb5873148dadd2e1c71b80ea84
SHA1:
37f3c3463f949032eb73fb4db9bf6d87cd9f31b5
SHA256:
52d977fc500c3b15b8cec1fd75457ff1f5ee7dc9741344e7055a161804da49be
SSDeep:
3072:bgtI2nuI1XBW4dl4Y4/4Z4UZ4Y14z4m4sr4iC4w4+J4P4U414/jb364g4t4U4+4o:whnuI1JjxQpscjb3X48
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.spyhunter
|
MD5:
83dd85fb5873148dadd2e1c71b80ea84
SHA1:
37f3c3463f949032eb73fb4db9bf6d87cd9f31b5
SHA256:
52d977fc500c3b15b8cec1fd75457ff1f5ee7dc9741344e7055a161804da49be
SSDeep:
3072:bgtI2nuI1XBW4dl4Y4/4Z4UZ4Y14z4m4sr4iC4w4+J4P4U414/jb364g4t4U4+4o:whnuI1JjxQpscjb3X48
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm
|
MD5:
4bc1ab158f4d95eafb5d22f40465c666
SHA1:
12923100acd1c3bfbaf7f9cd425cccc111258125
SHA256:
bf2f2b0aa27db5c38f27e2980eb04fad26337bc4af0cfdd00714eb973c5c0da4
SSDeep:
768:HHtuK7Xpgs4NTf8g2Ox8KuN5Upw/4oSaa7:P7Zg5N78lKYUtoSaU
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.spyhunter
|
MD5:
4bc1ab158f4d95eafb5d22f40465c666
SHA1:
12923100acd1c3bfbaf7f9cd425cccc111258125
SHA256:
bf2f2b0aa27db5c38f27e2980eb04fad26337bc4af0cfdd00714eb973c5c0da4
SSDeep:
768:HHtuK7Xpgs4NTf8g2Ox8KuN5Upw/4oSaa7:P7Zg5N78lKYUtoSaU
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm
|
MD5:
f24fae374bef8f3e34d44166fca649ea
SHA1:
3fc0df3ef4ff65e4d3d5862123b1157d02d76bd6
SHA256:
93ed4e5bd82de7e0d4dfb729fcef28eea84814b2c8f01f6c79187eeae1c60359
SSDeep:
1536:lPlD/HA2amS/mOQlIOz7nIV5aD7U4RgK8y:lPpHS/mOrOz745s7UygK5
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.spyhunter
|
MD5:
f24fae374bef8f3e34d44166fca649ea
SHA1:
3fc0df3ef4ff65e4d3d5862123b1157d02d76bd6
SHA256:
93ed4e5bd82de7e0d4dfb729fcef28eea84814b2c8f01f6c79187eeae1c60359
SSDeep:
1536:lPlD/HA2amS/mOQlIOz7nIV5aD7U4RgK8y:lPpHS/mOrOz745s7UygK5
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
d33e3dfcff5edab9a93211ac621b9220
SHA1:
55eca9077f39a1071f2dd1424ad13b34ecad130e
SHA256:
8ccc9682bcbf96259db211db196d7e2f2a50e01f3acb49cac9e570405d95484a
SSDeep:
192:4B5GZMkswxRTk2Eh+NbpdOikCKh/cAfvK5lyvjCFXsD+ycfat:4B2MRwxRTk2tJrOikJJfi5rA+5fat
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
d33e3dfcff5edab9a93211ac621b9220
SHA1:
55eca9077f39a1071f2dd1424ad13b34ecad130e
SHA256:
8ccc9682bcbf96259db211db196d7e2f2a50e01f3acb49cac9e570405d95484a
SSDeep:
192:4B5GZMkswxRTk2Eh+NbpdOikCKh/cAfvK5lyvjCFXsD+ycfat:4B2MRwxRTk2tJrOikJJfi5rA+5fat
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST
|
MD5:
0b40dc281a99ea7f3a6f6e149ca8341d
SHA1:
9a9da231776770dcd51d4910cef3bbe75a70fb52
SHA256:
9105448fec90daa9e47cdb89448867d8e6d9ed6aec224731c75418806b1b75a6
SSDeep:
96:9+9qGVayy3ULUfYVuwx6N3uFvEdkPGb7TbcT:g9qGEyyk4wVtqfyub73O
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.spyhunter
|
MD5:
0b40dc281a99ea7f3a6f6e149ca8341d
SHA1:
9a9da231776770dcd51d4910cef3bbe75a70fb52
SHA256:
9105448fec90daa9e47cdb89448867d8e6d9ed6aec224731c75418806b1b75a6
SSDeep:
96:9+9qGVayy3ULUfYVuwx6N3uFvEdkPGb7TbcT:g9qGEyyk4wVtqfyub73O
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab
|
MD5:
8c48676e43667dab53a945b526490140
SHA1:
de4906bee39105a4f3a8305f86895c127cf7c2bf
SHA256:
4cedb8dae2c0bb02026b408d9a05e68db2a90babf42531c0266984a5c52a5cec
SSDeep:
196608:1ryUwmW8LerWo1/kU86BDeDSbD76Vmyb2Pehiy59BFiO1TDkVB:1ryUwmWEed/P86B6DSbDUmPkBgiD8B
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.spyhunter
|
MD5:
8c48676e43667dab53a945b526490140
SHA1:
de4906bee39105a4f3a8305f86895c127cf7c2bf
SHA256:
4cedb8dae2c0bb02026b408d9a05e68db2a90babf42531c0266984a5c52a5cec
SSDeep:
196608:1ryUwmW8LerWo1/kU86BDeDSbD76Vmyb2Pehiy59BFiO1TDkVB:1ryUwmWEed/P86B6DSbDUmPkBgiD8B
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml
|
MD5:
3aecc20c4fd133bdc13a222e31cd845e
SHA1:
1e9ff009804966067026146e090e77ace29d4abc
SHA256:
c4f3dbb15aed939f2d87c53ba3bfa859f9e5368eca57986c9885a5144433d8a2
SSDeep:
12288:bI2wfCAijFvYFpjKW4MgJZZ/CAi02uCAi0IoiyEfCAijFvYFpjKW4MgJg:bIB
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.spyhunter
|
MD5:
3aecc20c4fd133bdc13a222e31cd845e
SHA1:
1e9ff009804966067026146e090e77ace29d4abc
SHA256:
c4f3dbb15aed939f2d87c53ba3bfa859f9e5368eca57986c9885a5144433d8a2
SSDeep:
12288:bI2wfCAijFvYFpjKW4MgJZZ/CAi02uCAi0IoiyEfCAijFvYFpjKW4MgJg:bIB
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi
|
MD5:
a9383a9b4c1ed29852038413a178b4ec
SHA1:
e69bedc01d190fd3ccd9697d97ce968cc1f89e7b
SHA256:
220f9590b30829f02b56edda05150c36eaa9b51363eca1a585b66939aea2952d
SSDeep:
24576:i7f83PV4gEux3P6WBWkmf3egDqo8o93lA6pMoKD:BzgLf7qoQ6pMoY
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.spyhunter
|
MD5:
a9383a9b4c1ed29852038413a178b4ec
SHA1:
e69bedc01d190fd3ccd9697d97ce968cc1f89e7b
SHA256:
220f9590b30829f02b56edda05150c36eaa9b51363eca1a585b66939aea2952d
SSDeep:
24576:i7f83PV4gEux3P6WBWkmf3egDqo8o93lA6pMoKD:BzgLf7qoQ6pMoY
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml
|
MD5:
3122026675f646641245aa126e171fab
SHA1:
ef0318f473ad509a3c38e8838af6ea4db06ad236
SHA256:
b16f4a57863a4e7ee488dd35132822a09201a3c47dc6ea974e717710f607e714
SSDeep:
24:haxQ92rhvPTxXei1SNSVWoK3ygxc/PEEt0KWMVaFjrt:haFhvbxzRWoMyzF0VDt
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.spyhunter
|
MD5:
3122026675f646641245aa126e171fab
SHA1:
ef0318f473ad509a3c38e8838af6ea4db06ad236
SHA256:
b16f4a57863a4e7ee488dd35132822a09201a3c47dc6ea974e717710f607e714
SSDeep:
24:haxQ92rhvPTxXei1SNSVWoK3ygxc/PEEt0KWMVaFjrt:haFhvbxzRWoMyzF0VDt
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
cc67ffd73567ef67cb34f943da09da56
SHA1:
731f17f574b869dce89fa09a312b2aedbda0fb31
SHA256:
fe7cf3dcc43fd6d5bec1357dbc663098d783ec491f953e812ad69599f3b9749e
SSDeep:
48:nTtxdrGtnVCdl5BHK1KfV7lTgQqQS030YnYBL83IIpooJshH0rEOx:nT7xbqkplgQS0kPSIIpJx
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
cc67ffd73567ef67cb34f943da09da56
SHA1:
731f17f574b869dce89fa09a312b2aedbda0fb31
SHA256:
fe7cf3dcc43fd6d5bec1357dbc663098d783ec491f953e812ad69599f3b9749e
SSDeep:
48:nTtxdrGtnVCdl5BHK1KfV7lTgQqQS030YnYBL83IIpooJshH0rEOx:nT7xbqkplgQS0kPSIIpJx
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe
|
MD5:
7737ffd2c5bce3d3043defabcb0c84e3
SHA1:
3419f5deff99d103a54b4575496eb713f4b4a031
SHA256:
57b1a50200e1dac5177617caff9b75087dc2edd829b0e9cf7c3a5ceed54aa6da
SSDeep:
24576:BP0Dfh6HHfKnE+RUi/LHgZJJkbipjZSMv:ufW+RUi/LHkJkOZH
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.spyhunter
|
MD5:
7737ffd2c5bce3d3043defabcb0c84e3
SHA1:
3419f5deff99d103a54b4575496eb713f4b4a031
SHA256:
57b1a50200e1dac5177617caff9b75087dc2edd829b0e9cf7c3a5ceed54aa6da
SSDeep:
24576:BP0Dfh6HHfKnE+RUi/LHgZJJkbipjZSMv:ufW+RUi/LHkJkOZH
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
dd82dc64a354ea9f696bdd42476feafb
SHA1:
99f918e7a77af86e8912f2c834205591dfc56434
SHA256:
260aeb1c7394f13b6dc33e71f36a7e349742212c658f41c8ff2e8b0591dc5380
SSDeep:
768:XtQ6qCMyivakvBOWjo1qrBFYBaQpBJh0pNL0:XtQ6q3akvBOWjo1OPYBaQpBJh0pNL0
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
dd82dc64a354ea9f696bdd42476feafb
SHA1:
99f918e7a77af86e8912f2c834205591dfc56434
SHA256:
260aeb1c7394f13b6dc33e71f36a7e349742212c658f41c8ff2e8b0591dc5380
SSDeep:
768:XtQ6qCMyivakvBOWjo1qrBFYBaQpBJh0pNL0:XtQ6q3akvBOWjo1OPYBaQpBJh0pNL0
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe
|
MD5:
4e8a548549cbd3793c066ad4ff65853f
SHA1:
0f50c91bf122e4750c38b39f4ac15ea63e2d2d47
SHA256:
a020139e5e0d756c0ac380333a29e6355a8b841af9f28033bb122e89ba41da98
SSDeep:
12288:IeryDBDN0vbfvfhhSVvnB1diKLHH7rKf8YmylcH+zFUib8I7XHgZwKhJAeCGRcAA:S0Dfh6HHfKnE+RUi/LHgZJJkbipjZSMG
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.spyhunter
|
MD5:
4e8a548549cbd3793c066ad4ff65853f
SHA1:
0f50c91bf122e4750c38b39f4ac15ea63e2d2d47
SHA256:
a020139e5e0d756c0ac380333a29e6355a8b841af9f28033bb122e89ba41da98
SSDeep:
12288:IeryDBDN0vbfvfhhSVvnB1diKLHH7rKf8YmylcH+zFUib8I7XHgZwKhJAeCGRcAA:S0Dfh6HHfKnE+RUi/LHgZJJkbipjZSMG
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
ff774d7267b5ff435eb769eb999d9e67
SHA1:
e061aa8565e052cacdcd4aa7e4ddfc318bc00a17
SHA256:
cc2730724e8b7597f575d9697a06bd7f6989969f50937c48fdaddd4709f08f50
SSDeep:
384:py6m7ys8EABss7P2hHsnjkRCYJYl3qeBFYBxzhqmAh0pNLX:prmus8bdP2hMjnYXeBFYBZhqFh0pNLX
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.spyhunter
|
MD5:
ff774d7267b5ff435eb769eb999d9e67
SHA1:
e061aa8565e052cacdcd4aa7e4ddfc318bc00a17
SHA256:
cc2730724e8b7597f575d9697a06bd7f6989969f50937c48fdaddd4709f08f50
SSDeep:
384:py6m7ys8EABss7P2hHsnjkRCYJYl3qeBFYBxzhqmAh0pNLX:prmus8bdP2hMjnYXeBFYBZhqFh0pNLX
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml
|
MD5:
ae886b981b93d53ef7fcc108b0ad694d
SHA1:
bc03ede73f16f989a61fc1ae85bbfefa58bfcece
SHA256:
e7278260ed18793c3b3ab76b4b1821ff5deb18ad7369faf5ceb7fd8c203c2676
SSDeep:
192:bJMHZDe3cz6gNDULDhmxZFnYrZT0OwFXkhrJxgOT1JhJVnB0iNN:biZ56gNDcDhmx3nY9wOwFU9J+m1JYq
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.spyhunter
|
MD5:
ae886b981b93d53ef7fcc108b0ad694d
SHA1:
bc03ede73f16f989a61fc1ae85bbfefa58bfcece
SHA256:
e7278260ed18793c3b3ab76b4b1821ff5deb18ad7369faf5ceb7fd8c203c2676
SSDeep:
192:bJMHZDe3cz6gNDULDhmxZFnYrZT0OwFXkhrJxgOT1JhJVnB0iNN:biZ56gNDcDhmx3nY9wOwFU9J+m1JYq
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\pagefile.sys
|
-
|
Access
|
|
\\?\C:\PerfLogs\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\PerfLogs\Admin\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AdobeXMP.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AdobeXMP.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AGM.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AGM.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AGMGPUOptIn.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AGMGPUOptIn.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\ahclient.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\ahclient.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\BIBUtils.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\BIBUtils.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\icudt40.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\icudt40.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\icudt40_full.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\icudt40_full.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\icuuc40.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\icuuc40.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR\DefaultID.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Javascripts\JSByteCodeWin.bin
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Javascripts\JSByteCodeWin.bin.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\JP2KLib.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\JP2KLib.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\eula.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\eula.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\eula.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\eula.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\eula.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\eula.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\eula.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\eula.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\eula.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\eula.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\eula.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\eula.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\eula.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\eula.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\license.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR\license.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ\WebLink.CZE
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ\WebLink.CZE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Search.EUQ
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Search.EUQ.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\SendMail.EUQ
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\SendMail.EUQ.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\DEXShare.asfx
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\DEXShare.asfx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\Services.asfx
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\Services.asfx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Spelling.EUQ
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Spelling.EUQ.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\updater.EUQ
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\updater.EUQ.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\WebLink.EUQ
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\WebLink.EUQ.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Spelling.SUO
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Spelling.SUO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\updater.SUO
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\updater.SUO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Weblink.SUO
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Weblink.SUO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Spelling.FRA
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Spelling.FRA.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\updater.FRA
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\updater.FRA.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Weblink.FRA
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Weblink.FRA.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\updater.JPN
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\updater.JPN.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\Weblink.JPN
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\Weblink.JPN.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Search.NLD
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Search.NLD.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\SendMail.NLD
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\SendMail.NLD.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services\DEXShare.asfx
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services\DEXShare.asfx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services\Services.asfx
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services\Services.asfx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Spelling.NLD
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Spelling.NLD.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\updater.NLD
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\updater.NLD.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Weblink.NLD
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Weblink.NLD.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO\Weblink.RUM
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO\Weblink.RUM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\Spelling.SKY
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\Spelling.SKY.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\updater.SKY
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\updater.SKY.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\WebLink.SKY
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\WebLink.SKY.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\updater.SVE
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\updater.SVE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\Weblink.SVE
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\Weblink.SVE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Updater.TUR
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Updater.TUR.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Weblink.TUR
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Weblink.TUR.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA\Weblink.UKR
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA\Weblink.UKR.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Search.CHS
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Search.CHS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\SendMail.CHS
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\SendMail.CHS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services\DEXShare.asfx
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services\DEXShare.asfx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services\Services.asfx
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services\Services.asfx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Spelling.CHS
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Spelling.CHS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\updater.CHS
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\updater.CHS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Weblink.CHS
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Weblink.CHS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\3difr.x3d
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\3difr.x3d.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX8.x3d
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX8.x3d.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX9.x3d
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX9.x3d.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvSOFT.x3d
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvSOFT.x3d.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroSign.prc
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroSign.prc.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\SignHere.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Standard.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\Standard.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\SignHere.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\SignHere.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Dynamic.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Dynamic.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Faces.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Faces.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Pointers.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Pointers.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\SignHere.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\SignHere.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Standard.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\Standard.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\Dynamic.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\Dynamic.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\SignHere.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\SignHere.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Pointers.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Pointers.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\SignHere.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\SignHere.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Standard.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\Standard.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Dynamic.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Dynamic.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Faces.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Faces.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Pointers.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Pointers.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\SignHere.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\SignHere.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Standard.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\Standard.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\StandardBusiness.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR\StandardBusiness.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annots.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annots.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Checkers.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Checkers.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\DigSig.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\DigSig.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\DVA.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\DVA.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\eBook.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\eBook.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\EScript.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\EScript.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\IA32.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\IA32.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\MakeAccessible.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\MakeAccessible.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\Mcimpp.SUO
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\Mcimpp.SUO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.SVE
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.SVE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\reflow.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\reflow.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\SaveAsRTF.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\SaveAsRTF.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Search.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Search.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\SendMail.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\SendMail.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Spelling.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Spelling.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Updater.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Updater.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\weblink.api
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\weblink.api.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\rt3d.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\rt3d.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\RTC.der
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\RTC.der.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\ScCore.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\ScCore.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\DEXShare.spi
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\DEXShare.spi.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\SPPlugins\ADMPlugin.apl
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\SPPlugins\ADMPlugin.apl.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\wow_helper.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Reader\wow_helper.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeJ.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeJ.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeK.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeK.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMePOL.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMePOL.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUM.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUM.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUS.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUS.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeSKY.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeSKY.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeUKR.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeUKR.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeHeitiStd-Regular.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeHeitiStd-Regular.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeMingStd-Light.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeMingStd-Light.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeMyungjoStd-Medium.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeMyungjoStd-Medium.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeSongStd-Light.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeSongStd-Light.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\KozGoPr6N-Medium.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\KozGoPr6N-Medium.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\KozMinPr6N-Regular.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\KozMinPr6N-Regular.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\ENUtxt.pdf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\ENUtxt.pdf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MinionPro-Regular.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MinionPro-Regular.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-Bold.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-Bold.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-BoldIt.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-BoldIt.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-It.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-It.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-Regular.otf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\MyriadPro-Regular.otf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM\SY______.PFM
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM\SY______.PFM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM\zx______.pfm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM\zx______.pfm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM\zy______.pfm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM\zy______.pfm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\SY______.PFB
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\SY______.PFB.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\ZX______.PFB
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\ZX______.PFB.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\ZY______.PFB
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\ZY______.PFB.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.cs.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.cs.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_ES_PREEURO.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_ES_PREEURO.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_GT.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.es_GT.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.zh_TW.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.zh_TW.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.zh_TW_STROKE.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.zh_TW_STROKE.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\ctl_gb18030.cnv
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\ctl_gb18030.cnv.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\JISX0213.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\JISX0213.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1256.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1256.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP874.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP874.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP932.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP932.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP936.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP936.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP949.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP949.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP950.TXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP950.TXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Viktigt.htm
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Adobe\Reader 10.0\Viktigt.htm.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeExtractFiles.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeExtractFiles.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\PipelineSegments.store
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\PipelineSegments.store.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPWEC.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPWEC.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\System\Ole DB\xmlrw.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\System\Ole DB\xmlrw.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Common Files\System\Ole DB\xmlrwbin.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Common Files\System\Ole DB\xmlrwbin.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\desktop.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\desktop.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\eventlog_provider.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\eventlog_provider.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\chrome.7z
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\chrome.7z.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\setup.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer\setup.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\resources.pak
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\resources.pak.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\snapshot_blob.bin
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\snapshot_blob.bin.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\smalllogo.png
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\smalllogo.png.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\smalllogocanary.png
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements\smalllogocanary.png.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64\widevinecdmadapter.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64\widevinecdmadapter.dll.sig
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64\widevinecdmadapter.dll.sig.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64\widevinecdmadapter.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\manifest.json
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\manifest.json.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\chrome.VisualElementsManifest.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\chrome.VisualElementsManifest.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics\20170605115313.pma
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics\20170605115313.pma.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\unpack200.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\unpack200.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\verify.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\verify.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\w2k_lsa_auth.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\w2k_lsa_auth.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\WindowsAccessBridge-32.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\WindowsAccessBridge-32.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\wsdetect.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\wsdetect.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\zip.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\bin\zip.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\COPYRIGHT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\COPYRIGHT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\flavormap.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\flavormap.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fontconfig.bfc
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fontconfig.bfc.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fontconfig.properties.src
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fontconfig.properties.src.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightDemiItalic.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightDemiItalic.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightItalic.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightItalic.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightRegular.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaBrightRegular.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaSansRegular.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaSansRegular.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\i386\jvm.cfg
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\i386\jvm.cfg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\cursors.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\cursors.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\invalid32x32.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\invalid32x32.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_LinkNoDrop32x32.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_LinkNoDrop32x32.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_MoveDrop32x32.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_MoveDrop32x32.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_MoveNoDrop32x32.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\images\cursors\win32_MoveNoDrop32x32.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\javafx.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\javafx.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\javaws.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\javaws.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jce.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jce.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfr.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfr.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfr\default.jfc
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfr\default.jfc.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfr\profile.jfc
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfr\profile.jfc.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfxrt.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jfxrt.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jsse.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jsse.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jvm.hprof.txt
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\jvm.hprof.txt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\logging.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\logging.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management-agent.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management-agent.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\jmxremote.access
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\jmxremote.access.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\jmxremote.password.template
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\jmxremote.password.template.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\management.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\management.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\snmp.acl.template
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\management\snmp.acl.template.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\meta-index
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\meta-index.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\net.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\net.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\plugin.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\plugin.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\psfont.properties.ja
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\psfont.properties.ja.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\psfontj2d.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\psfontj2d.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\resources.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\resources.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\rt.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\rt.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\blacklist
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\blacklist.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\cacerts
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\cacerts.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\java.policy
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\java.policy.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\java.security
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\java.security.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\javafx.policy
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\javafx.policy.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\javaws.policy
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\javaws.policy.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\local_policy.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\local_policy.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\trusted.libraries
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\trusted.libraries.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\US_export_policy.jar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\security\US_export_policy.jar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\sound.properties
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\sound.properties.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\tzmappings
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\tzmappings.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Abidjan
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Abidjan.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Accra
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Accra.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Addis_Ababa
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Addis_Ababa.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Algiers
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Algiers.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Asmara
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Asmara.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bamako
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bamako.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bangui
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bangui.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Banjul
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Banjul.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bissau
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bissau.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Blantyre
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Blantyre.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Brazzaville
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Brazzaville.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bujumbura
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Bujumbura.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Cairo
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Cairo.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Casablanca
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Casablanca.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Ceuta
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Ceuta.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Conakry
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Conakry.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Dakar
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Dakar.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Dar_es_Salaam
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Dar_es_Salaam.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Djibouti
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Djibouti.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Douala
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Douala.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\El_Aaiun
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\El_Aaiun.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Freetown
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Freetown.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Gaborone
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Gaborone.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Harare
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Harare.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Johannesburg
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Johannesburg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Juba
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Juba.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Kampala
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Kampala.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Khartoum
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Khartoum.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Kigali
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Kigali.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Kinshasa
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Kinshasa.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lagos
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lagos.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Libreville
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Libreville.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lome
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lome.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Luanda
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Luanda.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lubumbashi
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lubumbashi.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lusaka
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Lusaka.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Malabo
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Malabo.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Maputo
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Maputo.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Maseru
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Maseru.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Mbabane
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Mbabane.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Mogadishu
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Mogadishu.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Monrovia
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Monrovia.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Nairobi
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Nairobi.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Ndjamena
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Ndjamena.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Niamey
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Niamey.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Nouakchott
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Nouakchott.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Ouagadougou
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Ouagadougou.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Porto-Novo
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Porto-Novo.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Sao_Tome
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Sao_Tome.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Tripoli
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Tripoli.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Tunis
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Tunis.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Windhoek
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Africa\Windhoek.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Araguaina
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Araguaina.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Detroit
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Detroit.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Merida
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Merida.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Metlakatla
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Metlakatla.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Mexico_City
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Mexico_City.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Nome
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Nome.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Noronha
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Noronha.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Thule
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Thule.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Thunder_Bay
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Thunder_Bay.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Tijuana
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Tijuana.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Toronto
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Toronto.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Tortola
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Tortola.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Vancouver
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Vancouver.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Whitehorse
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Whitehorse.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Winnipeg
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Winnipeg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Yakutat
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Yakutat.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Yellowknife
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\America\Yellowknife.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Ust-Nera
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Ust-Nera.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Vientiane
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Vientiane.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Vladivostok
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Vladivostok.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Yakutsk
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Yakutsk.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Yekaterinburg
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Yekaterinburg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Yerevan
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Asia\Yerevan.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\EST5EDT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\EST5EDT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-11
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-11.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-12
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-12.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-13
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-13.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-14
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-14.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-2
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-2.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-3
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-3.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-4
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-4.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-5
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-5.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-6
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-6.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-7
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-7.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-8
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-8.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-9
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\GMT-9.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\UCT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\UCT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\UTC
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Etc\UTC.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Volgograd
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Volgograd.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Warsaw
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Warsaw.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Zaporozhye
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Zaporozhye.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Zurich
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\Europe\Zurich.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\GMT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\GMT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\HST
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\HST.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\MET
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\MET.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\MST
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\MST.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\MST7MDT
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Java\jre7\lib\zi\MST7MDT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Microsoft Office\Office14\VVIEWDWG.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Microsoft Office\Office14\VVIEWDWG.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Microsoft Office\Office14\VVIEWER.DLL
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Microsoft Office\Office14\VVIEWER.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Tools.Applications.Project.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Tools.Applications.Project.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Mozilla Firefox\xul.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Mozilla Firefox\xul.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files (x86)\Windows Sidebar\settings.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files (x86)\Windows Sidebar\settings.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\.
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\DESIGNER\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL
|
MD5:
cae061d67d277059a06a261da5d18f50
SHA1:
3c85864b49d86dba60cac337b013930bb0516391
SHA256:
f6e065f995832987c99dff6e4bb510b4631e9fa980ad0bcf1680817e9a0e9e48
SSDeep:
3072:DR6fB3gS4naNpvwXCj/P0WbRx0Nlk/TvQF2Z1s:D4fB/4n4wgsWbolCFs
ImpHash:
None
|
Access
|
Modified File
|
\\?\C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.spyhunter
|
MD5:
cae061d67d277059a06a261da5d18f50
SHA1:
3c85864b49d86dba60cac337b013930bb0516391
SHA256:
f6e065f995832987c99dff6e4bb510b4631e9fa980ad0bcf1680817e9a0e9e48
SSDeep:
3072:DR6fB3gS4naNpvwXCj/P0WbRx0Nlk/TvQF2Z1s:D4fB/4n4wgsWbolCFs
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
|
MD5:
d9edd86b585dab8a64a73adb3781852e
SHA1:
9303cc205abab41b8f1631b8ead440f4cbc9df65
SHA256:
5aad30e846ffd242ebc45c5b38a2cc7d1ea5e397df12247646eda0aa95b3e762
SSDeep:
12288:lwQqvEQlFR6XJazB1siN9I7XHgZwKhJAeCGuGi:n8zB1sioLHgZJJknGi
ImpHash:
None
|
Access, Read
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.spyhunter
|
MD5:
d9edd86b585dab8a64a73adb3781852e
SHA1:
9303cc205abab41b8f1631b8ead440f4cbc9df65
SHA256:
5aad30e846ffd242ebc45c5b38a2cc7d1ea5e397df12247646eda0aa95b3e762
SSDeep:
12288:lwQqvEQlFR6XJazB1siN9I7XHgZwKhJAeCGuGi:n8zB1sioLHgZJJknGi
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest
|
MD5:
69282653e7c8d50394cb95c13a96b96a
SHA1:
302087af1f3a1f19ed4e4dd7de6016df55180257
SHA256:
c28271c2f8b0842c92667d15e837222f5c347f8d45171df8580f71754f502752
SSDeep:
12:IQZvEnO8pS2NXN+uOzOvxZoquJ6sCVGycYCPkUgL4IegRZjnIN3o:tvW/NuzOv4VHVyCQ75RZEO
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.spyhunter
|
MD5:
69282653e7c8d50394cb95c13a96b96a
SHA1:
302087af1f3a1f19ed4e4dd7de6016df55180257
SHA256:
c28271c2f8b0842c92667d15e837222f5c347f8d45171df8580f71754f502752
SSDeep:
12:IQZvEnO8pS2NXN+uOzOvxZoquJ6sCVGycYCPkUgL4IegRZjnIN3o:tvW/NuzOv4VHVyCQ75RZEO
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP
|
MD5:
5d8fd4b0fb93d22e60986734141b0fe4
SHA1:
bd3314adb230b9545d471ef9ebeda6ec0f798993
SHA256:
e6e682acf585e393b1acda74c7675fcbda7e52e4c3301073772ad994eb5bc2f7
SSDeep:
3072:fcSeaBNcEANAsHeEiZs81WdXyrSxGjcwmA:k/aBN2BeEiZs81O4SxGjcwmA
ImpHash:
None
|
Access, Read
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.spyhunter
|
MD5:
5d8fd4b0fb93d22e60986734141b0fe4
SHA1:
bd3314adb230b9545d471ef9ebeda6ec0f798993
SHA256:
e6e682acf585e393b1acda74c7675fcbda7e52e4c3301073772ad994eb5bc2f7
SSDeep:
3072:fcSeaBNcEANAsHeEiZs81WdXyrSxGjcwmA:k/aBN2BeEiZs81O4SxGjcwmA
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF
|
MD5:
66dd56b609f5bf28a07fd652469352ed
SHA1:
11fdf9a300183ae6cbac9e3221626aa9da9ec8ee
SHA256:
4b279f3effafbafb40b84e0d0a3b373eb35422a928ec107c44024da59b000f94
SSDeep:
192:e2j8NqGwYIPE/ZArBq6ZohKHigBveklR81ZxVA1f:dAwSCcArBq6Z4PgB2klRC3VSf
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.spyhunter
|
MD5:
66dd56b609f5bf28a07fd652469352ed
SHA1:
11fdf9a300183ae6cbac9e3221626aa9da9ec8ee
SHA256:
4b279f3effafbafb40b84e0d0a3b373eb35422a928ec107c44024da59b000f94
SSDeep:
192:e2j8NqGwYIPE/ZArBq6ZohKHigBveklR81ZxVA1f:dAwSCcArBq6Z4PgB2klRC3VSf
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll
|
MD5:
673e1797377a835a55799ad3fc13b63e
SHA1:
9dfb9509187d8a156751814ddfcf812b8b6a7308
SHA256:
db4703adca132a85b56f15d24bd5b657be5b0fd2d13ac226756a41a43d871c53
SSDeep:
768:S1FJeaSrxzMMB59KTYx/ZicMCnla39Wxe4KseOleZsTX0ZMi2jXHUI:UeaSltB5A+/s0pxeSeOEsb0q9rHUI
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.spyhunter
|
MD5:
673e1797377a835a55799ad3fc13b63e
SHA1:
9dfb9509187d8a156751814ddfcf812b8b6a7308
SHA256:
db4703adca132a85b56f15d24bd5b657be5b0fd2d13ac226756a41a43d871c53
SSDeep:
768:S1FJeaSrxzMMB59KTYx/ZicMCnla39Wxe4KseOleZsTX0ZMi2jXHUI:UeaSltB5A+/s0pxeSeOEsb0q9rHUI
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll
|
MD5:
cd20402c9feb5b88565743b6e62681b0
SHA1:
a6bb0d4d02dc36dc31e904a4614cf0c22271b84e
SHA256:
e875e1351bcb4e411dfd29b5e31f6a825a3b0b07f47b69fde6e1f8a5ec350412
SSDeep:
24576:OcLfJsMyDHcB3pB/QMZAEI04u8OTVzJLHgZJJkpa:zmnDHct3oM6R04u3ThJLHkJkM
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.spyhunter
|
MD5:
cd20402c9feb5b88565743b6e62681b0
SHA1:
a6bb0d4d02dc36dc31e904a4614cf0c22271b84e
SHA256:
e875e1351bcb4e411dfd29b5e31f6a825a3b0b07f47b69fde6e1f8a5ec350412
SSDeep:
24576:OcLfJsMyDHcB3pB/QMZAEI04u8OTVzJLHgZJJkpa:zmnDHct3oM6R04u3ThJLHkJkM
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll
|
MD5:
58695e7df1ae82b49104cb02255f9b02
SHA1:
db565c8a6f2028d50493cc3d917ce65d99d02be4
SHA256:
b3d5293c58dde4adb43a8193354144d18adbe7291623e94f1dd27933b8cdb3ac
SSDeep:
24576:R4oe66XXvijTIJuP0SbZLJ75COd958Gyd0VQGTVy7HCoLHgZJJk56:Cn6zoubZLJ70Ol8/0VDTs7ioLHkJkE
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.spyhunter
|
MD5:
58695e7df1ae82b49104cb02255f9b02
SHA1:
db565c8a6f2028d50493cc3d917ce65d99d02be4
SHA256:
b3d5293c58dde4adb43a8193354144d18adbe7291623e94f1dd27933b8cdb3ac
SSDeep:
24576:R4oe66XXvijTIJuP0SbZLJ75COd958Gyd0VQGTVy7HCoLHgZJJk56:Cn6zoubZLJ70Ol8/0VDTs7ioLHkJkE
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL
|
MD5:
93f1279dc0b7c63c0a47aef4f0b0caba
SHA1:
c717b2c7119b6030997f031dde93ff62e35cc967
SHA256:
a0760e26ea6708f9f30eb45e9ec13ea3161b342c8ce347f7e37d6f63c2047cfa
SSDeep:
49152:VS7k7VYU1UU+LKil82uIYHwHKofVc5ecDmQ9w8ho7OKmerZAT45L6Mf:qkFUU+7DSuQ9xh5erZAT45xf
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.spyhunter
|
MD5:
93f1279dc0b7c63c0a47aef4f0b0caba
SHA1:
c717b2c7119b6030997f031dde93ff62e35cc967
SHA256:
a0760e26ea6708f9f30eb45e9ec13ea3161b342c8ce347f7e37d6f63c2047cfa
SSDeep:
49152:VS7k7VYU1UU+LKil82uIYHwHKofVc5ecDmQ9w8ho7OKmerZAT45L6Mf:qkFUU+7DSuQ9xh5erZAT45xf
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL
|
MD5:
d1a2a9e90c314ed0c17046ee7c871435
SHA1:
d424810632b60c3a662b4670f48b3d749d67c254
SHA256:
a33600f555b098cc5feef36feb159d4df103ad72f77f316ec3dd915af817fd72
SSDeep:
6144:vdC7fKAAWm84YyChs53LlWyKgq9Ie2Am4a2OI5p3s2Lfve:4xm848i57JWIe7mf2Tve
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.spyhunter
|
MD5:
d1a2a9e90c314ed0c17046ee7c871435
SHA1:
d424810632b60c3a662b4670f48b3d749d67c254
SHA256:
a33600f555b098cc5feef36feb159d4df103ad72f77f316ec3dd915af817fd72
SSDeep:
6144:vdC7fKAAWm84YyChs53LlWyKgq9Ie2Am4a2OI5p3s2Lfve:4xm848i57JWIe7mf2Tve
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL
|
MD5:
d6aa7ffe226102af8d84b80147d77077
SHA1:
d29c5d078f03e108171eaf99b45e98f9b134be4a
SHA256:
4fa083a089297af3fe21467544587d4c2647d7b72822e9ec6d483bc675d68b7f
SSDeep:
3072:aONlGkviXjj80ggbjD1UECecjgQd9+95X:TNENKgtJ
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.spyhunter
|
MD5:
d6aa7ffe226102af8d84b80147d77077
SHA1:
d29c5d078f03e108171eaf99b45e98f9b134be4a
SHA256:
4fa083a089297af3fe21467544587d4c2647d7b72822e9ec6d483bc675d68b7f
SSDeep:
3072:aONlGkviXjj80ggbjD1UECecjgQd9+95X:TNENKgtJ
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL
|
MD5:
9c7466c592a928e08414845e987b5e12
SHA1:
90743edf7c3b3c251a459f1a72128f62c1549959
SHA256:
f80086e3aefd8b98e9dcc91efbdfb3e2deb8f2c6e2faa91e8935b5d1f711c31b
SSDeep:
768:LEFp3KHi3JwSaEMlO1s+52J7XJ956lvBok2Ei0MMi2jXHUTw:LEHiiV+MBooL9rHUTw
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.spyhunter
|
MD5:
9c7466c592a928e08414845e987b5e12
SHA1:
90743edf7c3b3c251a459f1a72128f62c1549959
SHA256:
f80086e3aefd8b98e9dcc91efbdfb3e2deb8f2c6e2faa91e8935b5d1f711c31b
SSDeep:
768:LEFp3KHi3JwSaEMlO1s+52J7XJ956lvBok2Ei0MMi2jXHUTw:LEHiiV+MBooL9rHUTw
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL
|
MD5:
fea6ebf4749be89f93db9691b0963941
SHA1:
eec50f430c3106c1ba420a84f99551e96afbbfc8
SHA256:
6e676a46e7ad4b587b75b1b0123e040784a98b1e50fac8b70770156886862e94
SSDeep:
192:2A8HYSuL9wj5wcX/byDc61fgb+UX3R3D9y+24sJdcr4nVbG7TpyI01TrGwmFfK/Z:ho/g51fUX3R38+xszc28UZZ
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.spyhunter
|
MD5:
fea6ebf4749be89f93db9691b0963941
SHA1:
eec50f430c3106c1ba420a84f99551e96afbbfc8
SHA256:
6e676a46e7ad4b587b75b1b0123e040784a98b1e50fac8b70770156886862e94
SSDeep:
192:2A8HYSuL9wj5wcX/byDc61fgb+UX3R3D9y+24sJdcr4nVbG7TpyI01TrGwmFfK/Z:ho/g51fUX3R38+xszc28UZZ
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll
|
MD5:
e27ed98cda8d3cfcc36080397c462b4b
SHA1:
a2a24791df681d9a17a073b179a6bbe11b726134
SHA256:
30ac6a34cdf71092ed700a4df5571a523777fe5e84fcf6be6baaadb735cc163d
SSDeep:
24576:5SAAOZWsa2EkCYgpzO2Ux+p1bj7TVvq+LLHgZJJkQBE:MAAIFaz5pzO2I+vbj7Tdq+LLHkJkQm
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll.spyhunter
|
MD5:
e27ed98cda8d3cfcc36080397c462b4b
SHA1:
a2a24791df681d9a17a073b179a6bbe11b726134
SHA256:
30ac6a34cdf71092ed700a4df5571a523777fe5e84fcf6be6baaadb735cc163d
SSDeep:
24576:5SAAOZWsa2EkCYgpzO2Ux+p1bj7TVvq+LLHgZJJkQBE:MAAIFaz5pzO2I+vbj7Tdq+LLHkJkQm
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL
|
MD5:
a04cd75786ed54705827e7a487d5d2a2
SHA1:
36cd45d007337fcd7e86229bda81b20475bb7823
SHA256:
9df9702ec8acec824968d34854292ade9f4071adf38c3e9075f32056955cfa8e
SSDeep:
768:hFE8/BmxjfYb1uXAqrt596laA/+6lp2mz2lCYu11qgckCtdpOGu0GP+Q0Mi2jXHG:hFE8J0XzrfARmPlo7RwdpOGMWk9rHU5
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.spyhunter
|
MD5:
a04cd75786ed54705827e7a487d5d2a2
SHA1:
36cd45d007337fcd7e86229bda81b20475bb7823
SHA256:
9df9702ec8acec824968d34854292ade9f4071adf38c3e9075f32056955cfa8e
SSDeep:
768:hFE8/BmxjfYb1uXAqrt596laA/+6lp2mz2lCYu11qgckCtdpOGu0GP+Q0Mi2jXHG:hFE8J0XzrfARmPlo7RwdpOGMWk9rHU5
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
|
MD5:
31cdbcca6325c7ec1cb811530977602a
SHA1:
4bfc13a7177a22299255fb86241b678d1b1c7b54
SHA256:
468118a7894acf01638f8f32ee1e35aded30de0d9058e8463f81d694dcd5f2ad
SSDeep:
1536:arQd8uQXxro+pXLAZZxLIty5weZop1+zNP4ZVGKJ32zH9rHU7:arQdhGo+p6LItKdWOzNP4ZVGKJGzH9o7
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.spyhunter
|
MD5:
31cdbcca6325c7ec1cb811530977602a
SHA1:
4bfc13a7177a22299255fb86241b678d1b1c7b54
SHA256:
468118a7894acf01638f8f32ee1e35aded30de0d9058e8463f81d694dcd5f2ad
SSDeep:
1536:arQd8uQXxro+pXLAZZxLIty5weZop1+zNP4ZVGKJ32zH9rHU7:arQdhGo+p6LItKdWOzNP4ZVGKJGzH9o7
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL
|
MD5:
94bdfcd64eff9906c21cdf2e4256a834
SHA1:
f09911330c7e5b9cf5f00e2454cd426736658144
SHA256:
e96fe9ad47050a45513d86095a273eb7cfc95dfc3d0b920b0a48da8767e79132
SSDeep:
24576:d9HgzU86R0DZ3/qGa63kCymUAwi2xHoX1JAAz1TH:dJgzU86R0DZCGa63kClwi2xHoX/As
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL.spyhunter
|
MD5:
94bdfcd64eff9906c21cdf2e4256a834
SHA1:
f09911330c7e5b9cf5f00e2454cd426736658144
SHA256:
e96fe9ad47050a45513d86095a273eb7cfc95dfc3d0b920b0a48da8767e79132
SSDeep:
24576:d9HgzU86R0DZ3/qGa63kCymUAwi2xHoX1JAAz1TH:dJgzU86R0DZCGa63kClwi2xHoX/As
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL
|
MD5:
7f74d3ad6e11538e15c895f710d1925e
SHA1:
6bdfe933f18bf63031033d5da6f101c6460174e1
SHA256:
a293bab355af1fd627a42d837e8a2f551b690ea937d6ae06872f4bebb25b10e7
SSDeep:
6144:SrVb8WkEIdMa2xm/W2yFdjV+/GF7ganDu79Bf6y2lveBrlv5dRgGZnBEOQCnOLg9:yzm/Zy4/GROjfBuCX+cKZqCk
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.spyhunter
|
MD5:
7f74d3ad6e11538e15c895f710d1925e
SHA1:
6bdfe933f18bf63031033d5da6f101c6460174e1
SHA256:
a293bab355af1fd627a42d837e8a2f551b690ea937d6ae06872f4bebb25b10e7
SSDeep:
6144:SrVb8WkEIdMa2xm/W2yFdjV+/GF7ganDu79Bf6y2lveBrlv5dRgGZnBEOQCnOLg9:yzm/Zy4/GROjfBuCX+cKZqCk
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB
|
MD5:
2d1bed9be8c3ecfe5e21f43edf244b58
SHA1:
87ada0995c394043f811dbaca2f84ab0b9b2ebb9
SHA256:
802c79d84b53da081f5d077501f0f334637313a31591429b4d2cf5cfcb472572
SSDeep:
192:JZrnC4F8iJL5p3oQN/45tli9BcW+7maVxk8+Ssj:u8JNp35V4jg9SW6jsj
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.spyhunter
|
MD5:
2d1bed9be8c3ecfe5e21f43edf244b58
SHA1:
87ada0995c394043f811dbaca2f84ab0b9b2ebb9
SHA256:
802c79d84b53da081f5d077501f0f334637313a31591429b4d2cf5cfcb472572
SSDeep:
192:JZrnC4F8iJL5p3oQN/45tli9BcW+7maVxk8+Ssj:u8JNp35V4jg9SW6jsj
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL
|
MD5:
569213612285afffb31a7f1ff23d5b3e
SHA1:
56ac88f6924ceadb31fb026f66fdfb426d73a64f
SHA256:
701affc5534d7ba61676fb60a54af9ce149d91603530d3101e3d07deb6f67a81
SSDeep:
768:iTgY6IVGWPnaERq1yerZZOz0AKPuMi2jXHU3t:iTnTJaERnerZZOzXKPZ9rHU9
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.spyhunter
|
MD5:
569213612285afffb31a7f1ff23d5b3e
SHA1:
56ac88f6924ceadb31fb026f66fdfb426d73a64f
SHA256:
701affc5534d7ba61676fb60a54af9ce149d91603530d3101e3d07deb6f67a81
SSDeep:
768:iTgY6IVGWPnaERq1yerZZOz0AKPuMi2jXHU3t:iTnTJaERnerZZOzXKPZ9rHU9
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe
|
MD5:
eb764ffdbe6042b5c77b66b8e3643f59
SHA1:
c830ab440de2b6087302236ed99d91084d05ff28
SHA256:
a4cbe1872509d40a3902d9dd0f12141f2d04f44be1fa16ec715d14c882a5bfd4
SSDeep:
6144:cW8QUO65ofgD2z8Fz5V6pVJ+DgZvjX4L6Ue:mQUO1oO8FzTUpjIXe
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.spyhunter
|
MD5:
eb764ffdbe6042b5c77b66b8e3643f59
SHA1:
c830ab440de2b6087302236ed99d91084d05ff28
SHA256:
a4cbe1872509d40a3902d9dd0f12141f2d04f44be1fa16ec715d14c882a5bfd4
SSDeep:
6144:cW8QUO65ofgD2z8Fz5V6pVJ+DgZvjX4L6Ue:mQUO1oO8FzTUpjIXe
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL
|
MD5:
84dcf849b873f89a34f501d27a67eb9f
SHA1:
cb1b987bca23887777803632e67d6ba37178978f
SHA256:
83ccb60e9e7753aed3ffd079406cf1c1eb75f384e11d03e3461f772c3c31b2a0
SSDeep:
768:3Btbts3sE6z/QBFG/+wXfCyZVuDuO1mU/uMi2jXHUvm:3ryPSIe/+cquOkU/Z9rHUu
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.spyhunter
|
MD5:
84dcf849b873f89a34f501d27a67eb9f
SHA1:
cb1b987bca23887777803632e67d6ba37178978f
SHA256:
83ccb60e9e7753aed3ffd079406cf1c1eb75f384e11d03e3461f772c3c31b2a0
SSDeep:
768:3Btbts3sE6z/QBFG/+wXfCyZVuDuO1mU/uMi2jXHUvm:3ryPSIe/+cquOkU/Z9rHUu
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML
|
MD5:
41782ed07e568b5637a86a5949ebc2a3
SHA1:
1580fb7507179cb4bf0debeea1326b88b966925d
SHA256:
c98d656ba6b99c002911bbb48ab516a8427d05d1c5da81a42d775a818b20c787
SSDeep:
24:j8dr3rllFj3ySgmw7T8DT4Qw8kC9pUSQBV90qJ4/VFFmWpvj9uYZAS:j8dL5lFjifTTiTzz99pgA9j8MAS
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.spyhunter
|
MD5:
41782ed07e568b5637a86a5949ebc2a3
SHA1:
1580fb7507179cb4bf0debeea1326b88b966925d
SHA256:
c98d656ba6b99c002911bbb48ab516a8427d05d1c5da81a42d775a818b20c787
SSDeep:
24:j8dr3rllFj3ySgmw7T8DT4Qw8kC9pUSQBV90qJ4/VFFmWpvj9uYZAS:j8dL5lFjifTTiTzz99pgA9j8MAS
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML
|
MD5:
f0515d925ba1568a8f95005b210b8158
SHA1:
ef78099497e1fd039d4138aee8cb1866801ee2d5
SHA256:
a0364a74a59396a2ef3a1e5aa3bb0d0f5281b41a6b9acd3d27390b03ea4674b5
SSDeep:
48:AGj+il+f47yobz7qBS3iphFQhETS5JPOqImrYrOs0B909g90W:3+m+W7qBSyp0KTS5JPOqInrOs49v90W
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.spyhunter
|
MD5:
f0515d925ba1568a8f95005b210b8158
SHA1:
ef78099497e1fd039d4138aee8cb1866801ee2d5
SHA256:
a0364a74a59396a2ef3a1e5aa3bb0d0f5281b41a6b9acd3d27390b03ea4674b5
SSDeep:
48:AGj+il+f47yobz7qBS3iphFQhETS5JPOqImrYrOs0B909g90W:3+m+W7qBSyp0KTS5JPOqInrOs49v90W
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML
|
MD5:
29d9370872b49348a7d2e35e7634c420
SHA1:
1cebf39f3ff9e2f1899c3038f639a05b754af215
SHA256:
174a351689bc688fd7e04f72323cb9ab7c9fdaf3af8f9901d3f745c45dd17c33
SSDeep:
48:WY59Gjtgcl2Tsjzo05VwzrF88g3djoy0roxq8+:WY5A5gKbjzocwzhNg3Zoydxq8+
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.spyhunter
|
MD5:
29d9370872b49348a7d2e35e7634c420
SHA1:
1cebf39f3ff9e2f1899c3038f639a05b754af215
SHA256:
174a351689bc688fd7e04f72323cb9ab7c9fdaf3af8f9901d3f745c45dd17c33
SSDeep:
48:WY59Gjtgcl2Tsjzo05VwzrF88g3djoy0roxq8+:WY5A5gKbjzocwzhNg3Zoydxq8+
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL
|
MD5:
8d37b824296a8813ace63b517f3ec1ff
SHA1:
a2beb7c63b2250e7253e814a65a13a96c99a67c8
SHA256:
e10f95b9c3ed79fb736189b2a167b278b089282311c7ea2f81f901ecb6b6c371
SSDeep:
98304:20SHNoI+ml3KSSGA+ZMbSIASylJ1CFBmWRnCmDUe/0:20SHNoImFBmWRCIUes
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.spyhunter
|
MD5:
8d37b824296a8813ace63b517f3ec1ff
SHA1:
a2beb7c63b2250e7253e814a65a13a96c99a67c8
SHA256:
e10f95b9c3ed79fb736189b2a167b278b089282311c7ea2f81f901ecb6b6c371
SSDeep:
98304:20SHNoI+ml3KSSGA+ZMbSIASylJ1CFBmWRnCmDUe/0:20SHNoImFBmWRCIUes
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll
|
MD5:
0fdc6d026bf4ae129111626d83a47a39
SHA1:
a72cad717ccbca4f36bba81c793c3cbf0970d5c5
SHA256:
7eaef75f0bfafc881550e442ccd849666c87f9fc55560961d46d5c6592ada8df
SSDeep:
768:dk2mK+2bfv/7MPvBv8oHbGigJRpdypF74lc027LB8rnrbNQATkBMi2jXHU8/:dWCr/uvioqigJRpdiilcpBQrbW0v9rHp
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll.spyhunter
|
MD5:
0fdc6d026bf4ae129111626d83a47a39
SHA1:
a72cad717ccbca4f36bba81c793c3cbf0970d5c5
SHA256:
7eaef75f0bfafc881550e442ccd849666c87f9fc55560961d46d5c6592ada8df
SSDeep:
768:dk2mK+2bfv/7MPvBv8oHbGigJRpdypF74lc027LB8rnrbNQATkBMi2jXHU8/:dWCr/uvioqigJRpdiilcpBQrbW0v9rHp
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML
|
MD5:
b86aa9d8d41fcbc7709592ee4b64f243
SHA1:
1c4cde7cfa2a5b6e78f5409408fad9d2c8a3c8bd
SHA256:
4d92d53819019010ae01cc6b25f8365ead392c4d1d149254b1b3f92f4e447cbd
SSDeep:
48:ex2kqcnjnvNezv/MntvzSMhmg8Cw1/Tx6zRCezP+Qzv1HF:eUynj0zst2U8R/ER7PH1HF
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.spyhunter
|
MD5:
b86aa9d8d41fcbc7709592ee4b64f243
SHA1:
1c4cde7cfa2a5b6e78f5409408fad9d2c8a3c8bd
SHA256:
4d92d53819019010ae01cc6b25f8365ead392c4d1d149254b1b3f92f4e447cbd
SSDeep:
48:ex2kqcnjnvNezv/MntvzSMhmg8Cw1/Tx6zRCezP+Qzv1HF:eUynj0zst2U8R/ER7PH1HF
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML
|
MD5:
39c2b683b5a5ce777f6c86ba9c838a44
SHA1:
3fd7f224a769878452beff7f9ea71a5c1028144b
SHA256:
38e98aafae489ae7ccc5242193a002093665377d65ec6beacc795e7499b515c8
SSDeep:
24:CkJ7ILwcqtUUMHINxxRtOBWeD5hTU3/WfTiFKC4WmY6COOaizYw1oPGAd4Ip/rOz:VJ7utqVHXtODhTUPWe0zhCnvzYwSZdhW
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.spyhunter
|
MD5:
39c2b683b5a5ce777f6c86ba9c838a44
SHA1:
3fd7f224a769878452beff7f9ea71a5c1028144b
SHA256:
38e98aafae489ae7ccc5242193a002093665377d65ec6beacc795e7499b515c8
SSDeep:
24:CkJ7ILwcqtUUMHINxxRtOBWeD5hTU3/WfTiFKC4WmY6COOaizYw1oPGAd4Ip/rOz:VJ7utqVHXtODhTUPWe0zhCnvzYwSZdhW
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML
|
MD5:
a39e2750234ae8a01033437703fe4e37
SHA1:
39d9c80cea96bc0dcd054677f687f3a1593b0059
SHA256:
1eb2f2402b64830b84ab15897cbc7d6c52219a1e873c0035b59152da78d10ef8
SSDeep:
24:/QujX8z1pW1YpQ5bnUv4WEv99e9oUzgpwf1t:ljM5pW1Ya57Uv4WEl92o5Yn
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.spyhunter
|
MD5:
a39e2750234ae8a01033437703fe4e37
SHA1:
39d9c80cea96bc0dcd054677f687f3a1593b0059
SHA256:
1eb2f2402b64830b84ab15897cbc7d6c52219a1e873c0035b59152da78d10ef8
SSDeep:
24:/QujX8z1pW1YpQ5bnUv4WEv99e9oUzgpwf1t:ljM5pW1Ya57Uv4WEl92o5Yn
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML
|
MD5:
a3e5d638357bc2461ef06f1570b78c6a
SHA1:
2e2eefb54d28cc5f98742f4523aaa97a1f5c2293
SHA256:
d30fc3c13276e281a50a2e9cb166a0813f5701f080ebf8eee61df70a49828626
SSDeep:
96:/LDn+Y5bxbanluGO2mABZCDcMXhuqO/z2OL5rrbB0zpaI7wD3dikXvFE/2rvVoB:/LDn+QaluXIZCIMoqOyY1Cz0I7wD38ki
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.spyhunter
|
MD5:
a3e5d638357bc2461ef06f1570b78c6a
SHA1:
2e2eefb54d28cc5f98742f4523aaa97a1f5c2293
SHA256:
d30fc3c13276e281a50a2e9cb166a0813f5701f080ebf8eee61df70a49828626
SSDeep:
96:/LDn+Y5bxbanluGO2mABZCDcMXhuqO/z2OL5rrbB0zpaI7wD3dikXvFE/2rvVoB:/LDn+QaluXIZCIMoqOyY1Cz0I7wD38ki
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML
|
MD5:
2a4b5c78b7063d6f0f3f135723f4659d
SHA1:
3dd0406b21beb9fef7bb21ceec8b4cd34177a611
SHA256:
11ec5bbcda7394beb675a1c41ccb17a1c36d46d0f1f227c856b3f9848a6bd37c
SSDeep:
192:+hPBcMoE50DATtzW9SYssr1rXqmVDuvSfBZ65R072qw4I:+tB7FoATtzW9f9hrPh/ZZ65RYCd
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.spyhunter
|
MD5:
2a4b5c78b7063d6f0f3f135723f4659d
SHA1:
3dd0406b21beb9fef7bb21ceec8b4cd34177a611
SHA256:
11ec5bbcda7394beb675a1c41ccb17a1c36d46d0f1f227c856b3f9848a6bd37c
SSDeep:
192:+hPBcMoE50DATtzW9SYssr1rXqmVDuvSfBZ65R072qw4I:+tB7FoATtzW9f9hrPh/ZZ65RYCd
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF
|
MD5:
2eaf52fca78c13eb9f3ef1929d0213ca
SHA1:
764e02d01d40ba9cea6c857cb56010ddecf16894
SHA256:
8eb5392839e80d7c7d48335ce56b32c73ebb1a67b8ad213391006e4c8c06d540
SSDeep:
768:JTOLpLD6v19pEfzF2Fl3A3K5ZVMpjmgWnD:9kpI19pE4Fl3A3yVMpjO
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.spyhunter
|
MD5:
2eaf52fca78c13eb9f3ef1929d0213ca
SHA1:
764e02d01d40ba9cea6c857cb56010ddecf16894
SHA256:
8eb5392839e80d7c7d48335ce56b32c73ebb1a67b8ad213391006e4c8c06d540
SSDeep:
768:JTOLpLD6v19pEfzF2Fl3A3K5ZVMpjmgWnD:9kpI19pE4Fl3A3yVMpjO
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\PROOF\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX
|
MD5:
c3df04bc9e7f2c93658cec909b552f9d
SHA1:
e8a425a7eea294ad55d98c929aa206fb520915a6
SHA256:
24a4ae274334a2a4d9da161cac036c61b095ead498f3b8b568e024e47266080e
SSDeep:
12288:Jq/NGnyUWrEx+kjZhWZI1YVcSeoQEtlUw/cP:JXyUWr4+MWZI1YV0alUn
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX.spyhunter
|
MD5:
c3df04bc9e7f2c93658cec909b552f9d
SHA1:
e8a425a7eea294ad55d98c929aa206fb520915a6
SHA256:
24a4ae274334a2a4d9da161cac036c61b095ead498f3b8b568e024e47266080e
SSDeep:
12288:Jq/NGnyUWrEx+kjZhWZI1YVcSeoQEtlUw/cP:JXyUWr4+MWZI1YV0alUn
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX
|
MD5:
7155f77c171cdc8c8e9cc3584018bd53
SHA1:
aa100169b9b5af796ab6bda0bce42bf5e8ccdac2
SHA256:
7098dafff64cd9b168a4f5698e7c1f9b2e4e9f2c4f99708b81e559ccaf9a0a90
SSDeep:
12288:XuQP706G5DJXQsPyh20oxMbrkmg6RgaWLNKvYDC3:XuQPw+gyhUm3t6a8NIYC3
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX.spyhunter
|
MD5:
7155f77c171cdc8c8e9cc3584018bd53
SHA1:
aa100169b9b5af796ab6bda0bce42bf5e8ccdac2
SHA256:
7098dafff64cd9b168a4f5698e7c1f9b2e4e9f2c4f99708b81e559ccaf9a0a90
SSDeep:
12288:XuQP706G5DJXQsPyh20oxMbrkmg6RgaWLNKvYDC3:XuQPw+gyhUm3t6a8NIYC3
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX
|
MD5:
41173fe4ec10e7e602c958455c393a53
SHA1:
0afab73215e1d36fdecb6f12f603957b15ef5c44
SHA256:
0a36140379afee8bd26e2847e56d68667842f300d98156c220226d312e46e074
SSDeep:
6144:AftlAPRQq4rzmamFNEAB1zKIW32+B0SlsL6ZIFiVvB4Ngsen/NB6paeSK8yjT069:AzA4rqaoWu11wR8su+fzFeB8iT0tu
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX.spyhunter
|
MD5:
41173fe4ec10e7e602c958455c393a53
SHA1:
0afab73215e1d36fdecb6f12f603957b15ef5c44
SHA256:
0a36140379afee8bd26e2847e56d68667842f300d98156c220226d312e46e074
SSDeep:
6144:AftlAPRQq4rzmamFNEAB1zKIW32+B0SlsL6ZIFiVvB4Ngsen/NB6paeSK8yjT069:AzA4rqaoWu11wR8su+fzFeB8iT0tu
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL
|
MD5:
d4ad6b68d281a12c4b48c3075cbb450c
SHA1:
723bc955ed43fd62fb99fd51b928ceb0d4d3e546
SHA256:
eb3fb7f4b39abe6d150233a545ee39a8a9b8a8d49fa2f3c56b143c6f73e0cc75
SSDeep:
3072:h8jbDq4oY648x1gjpVFeVHfxnODKf41xLdFuOUTpwYAMZa9otb:hqnu41GxnO5QpwTm
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL.spyhunter
|
MD5:
d4ad6b68d281a12c4b48c3075cbb450c
SHA1:
723bc955ed43fd62fb99fd51b928ceb0d4d3e546
SHA256:
eb3fb7f4b39abe6d150233a545ee39a8a9b8a8d49fa2f3c56b143c6f73e0cc75
SSDeep:
3072:h8jbDq4oY648x1gjpVFeVHfxnODKf41xLdFuOUTpwYAMZa9otb:hqnu41GxnO5QpwTm
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL
|
MD5:
634c1a4ac46456ac6585e0d02e2fd407
SHA1:
425db044a89b4ffd0a82bc5ff533f5e881bce987
SHA256:
313f2bc816a9f66da292206875845f695a240c57e8d16352fc513ae8fb79690a
SSDeep:
3072:cMdCVe22JWK96mx+yLbhGOe7ByRwnO9VZyeyUt19oC:/dCVehZJXhwnOMeLV
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL.spyhunter
|
MD5:
634c1a4ac46456ac6585e0d02e2fd407
SHA1:
425db044a89b4ffd0a82bc5ff533f5e881bce987
SHA256:
313f2bc816a9f66da292206875845f695a240c57e8d16352fc513ae8fb79690a
SSDeep:
3072:cMdCVe22JWK96mx+yLbhGOe7ByRwnO9VZyeyUt19oC:/dCVehZJXhwnOMeLV
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL
|
MD5:
53d4a10925a551f9ef4f01991a3020a6
SHA1:
febae99dbd47d52d46ec37282519458bb64ffc64
SHA256:
3c3e27d72c32c4007cdffb19efb9f5728d2675ad869dca3dae3d95779c65cef0
SSDeep:
6144:ORnzOe6atbvRMZYWjjqVk0oRfcOs1zIp7/:qp6IvRoYiq+sc1/
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL.spyhunter
|
MD5:
53d4a10925a551f9ef4f01991a3020a6
SHA1:
febae99dbd47d52d46ec37282519458bb64ffc64
SHA256:
3c3e27d72c32c4007cdffb19efb9f5728d2675ad869dca3dae3d95779c65cef0
SSDeep:
6144:ORnzOe6atbvRMZYWjjqVk0oRfcOs1zIp7/:qp6IvRoYiq+sc1/
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL
|
MD5:
e7c3964fbfa1861e8100b2eaff2f747f
SHA1:
f495b143b75dedaa1414137b23be2de16fd0975f
SHA256:
b5992417a9ef1b311dc51887a268f9ddcf58c0527c22979e336458abd207a591
SSDeep:
1536:mdxz96AV2MJrq2ihc/ajkGl3AjQy/qSPMIje4yS5NQOluiKMgvCmwyf5LKd81Kka:oz0MJrq2ihH4Gl3AYmje4bQOlK1g99ou
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL.spyhunter
|
MD5:
e7c3964fbfa1861e8100b2eaff2f747f
SHA1:
f495b143b75dedaa1414137b23be2de16fd0975f
SHA256:
b5992417a9ef1b311dc51887a268f9ddcf58c0527c22979e336458abd207a591
SSDeep:
1536:mdxz96AV2MJrq2ihc/ajkGl3AjQy/qSPMIje4yS5NQOluiKMgvCmwyf5LKd81Kka:oz0MJrq2ihH4Gl3AYmje4bQOlK1g99ou
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL
|
MD5:
e5345fb7b78ad57f4a7965424b57aded
SHA1:
bffa884ecad422e79322e44e19e1388ab917e32c
SHA256:
1a4f136a79770713715deabf1d806b67ea9b83301f799fd3d2b6f38c45d65ded
SSDeep:
6144:5zVrzSAIo1DhGyeR9CYnlbzuq2H67L2lFTMiS3IWtmTvdpg1zZWy2d6mp9mf5leq:C
ImpHash:
None
|
Access, Read
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.spyhunter
|
MD5:
e5345fb7b78ad57f4a7965424b57aded
SHA1:
bffa884ecad422e79322e44e19e1388ab917e32c
SHA256:
1a4f136a79770713715deabf1d806b67ea9b83301f799fd3d2b6f38c45d65ded
SSDeep:
6144:5zVrzSAIo1DhGyeR9CYnlbzuq2H67L2lFTMiS3IWtmTvdpg1zZWy2d6mp9mf5leq:C
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL
|
MD5:
7dc27cf3b6e5767c1cb282b742ed5aac
SHA1:
557aed3afbbcb67271f75ff70655178f7a016c99
SHA256:
1874d7338f3646a96f5b19fd193c651648ebb753ee741f50b1047a1af1d850c1
SSDeep:
3072:EgwgIov/rZKfwNjHerABOlau1zr4GqwG4batZhe95n:KZo3VBOlnrSWV
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL.spyhunter
|
MD5:
7dc27cf3b6e5767c1cb282b742ed5aac
SHA1:
557aed3afbbcb67271f75ff70655178f7a016c99
SHA256:
1874d7338f3646a96f5b19fd193c651648ebb753ee741f50b1047a1af1d850c1
SSDeep:
3072:EgwgIov/rZKfwNjHerABOlau1zr4GqwG4batZhe95n:KZo3VBOlnrSWV
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT
|
MD5:
9949861f90487c50a28c0f335719b405
SHA1:
bd6278f530f0eb0cdc37ff70294cb1635beb8bdc
SHA256:
83a588b66c497e42d8f56eb75342a4a74fc49ba2efad00b8f641de4b58bdc503
SSDeep:
24576:WRORrRaRLRLRiIi/A/N/RxRGR6LRARlRTRu:c
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.spyhunter
|
MD5:
9949861f90487c50a28c0f335719b405
SHA1:
bd6278f530f0eb0cdc37ff70294cb1635beb8bdc
SHA256:
83a588b66c497e42d8f56eb75342a4a74fc49ba2efad00b8f641de4b58bdc503
SSDeep:
24576:WRORrRaRLRLRiIi/A/N/RxRGR6LRARlRTRu:c
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL
|
MD5:
a2506ab6f618c9c1e41e09f7dbf611d5
SHA1:
167a9ecabc262259585065ce0ba710fa02808247
SHA256:
437c8480582ad4af1c5c35ed32df5b60c7778ccfc9f7e9c1f140e7a21c1e2ef8
SSDeep:
6144:nSTFDJV4kgWgXoOpmJWFpLsOl8rVqswOY:STFDJV4kCAsXeYs/Y
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL.spyhunter
|
MD5:
a2506ab6f618c9c1e41e09f7dbf611d5
SHA1:
167a9ecabc262259585065ce0ba710fa02808247
SHA256:
437c8480582ad4af1c5c35ed32df5b60c7778ccfc9f7e9c1f140e7a21c1e2ef8
SSDeep:
6144:nSTFDJV4kgWgXoOpmJWFpLsOl8rVqswOY:STFDJV4kCAsXeYs/Y
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB
|
MD5:
4b62eb800ce0a86a7c6eb0f20a35c72e
SHA1:
e34e0ab22d3dc19bc683b79aab17e1fc62869113
SHA256:
cd6535c988543712eca5477f9931d3d53e6f0eaf4c9befe50ff4a2514e727d33
SSDeep:
384:2aYw3wuXgGjkSPiIcguMt/Pel521y8l3+oRtN:LnXgGVug9a52bsc
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB.spyhunter
|
MD5:
4b62eb800ce0a86a7c6eb0f20a35c72e
SHA1:
e34e0ab22d3dc19bc683b79aab17e1fc62869113
SHA256:
cd6535c988543712eca5477f9931d3d53e6f0eaf4c9befe50ff4a2514e727d33
SSDeep:
384:2aYw3wuXgGjkSPiIcguMt/Pel521y8l3+oRtN:LnXgGVug9a52bsc
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe
|
MD5:
74d4ac433855a15973f730158427aa52
SHA1:
4b7f4fb3d12367fa118a75b68b646557bc14001b
SHA256:
00515d3ea519a73230e6457ae6ea31e71c030e8e054f6fa3a4824692f7ce299a
SSDeep:
384:bBpj9Ug0J3MnvjKjGqqBXXWMeXci2jpvk:bBB9oJMnRXTeMi2jpvk
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe.spyhunter
|
MD5:
74d4ac433855a15973f730158427aa52
SHA1:
4b7f4fb3d12367fa118a75b68b646557bc14001b
SHA256:
00515d3ea519a73230e6457ae6ea31e71c030e8e054f6fa3a4824692f7ce299a
SSDeep:
384:bBpj9Ug0J3MnvjKjGqqBXXWMeXci2jpvk:bBB9oJMnRXTeMi2jpvk
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Source Engine\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
|
MD5:
0dd30398fe1f773277eee4c739f38072
SHA1:
cadbc0163b27718e957cce65ff2beec99e78a0e9
SHA256:
9b3d3403ca30251e5f88c0b49e03f8fc74aeb5b16ffbf5d3e67453aa8679f17a
SSDeep:
3072:XNrZSTAkXbVjAaX/0EVNt4xXqutFdNciAqnYCDb5+aVjMvhNOSH2S9on:XNrYskXbVjF/ZNGtFdNdFnTDYZNjPs
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE.spyhunter
|
MD5:
0dd30398fe1f773277eee4c739f38072
SHA1:
cadbc0163b27718e957cce65ff2beec99e78a0e9
SHA256:
9b3d3403ca30251e5f88c0b49e03f8fc74aeb5b16ffbf5d3e67453aa8679f17a
SSDeep:
3072:XNrZSTAkXbVjAaX/0EVNt4xXqutFdNciAqnYCDb5+aVjMvhNOSH2S9on:XNrYskXbVjF/ZNGtFdNdFnTDYZNjPs
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV
|
MD5:
f7e6cc66eb32cb42a7ee143e29cf1446
SHA1:
9260583dc639e06cc0619619e61f1ed4535dffa1
SHA256:
8c9f0e8b9b419f0e4dc5fa3662df9fa558422035065b8eed83568674975073f0
SSDeep:
768:ih8C5WWh7d0rkf3i6IVZt3/Ov9SD7Oha4oMi2jXHUFg3:iKned0Qf36ZOlSDl4P9rHUFg3
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV.spyhunter
|
MD5:
f7e6cc66eb32cb42a7ee143e29cf1446
SHA1:
9260583dc639e06cc0619619e61f1ed4535dffa1
SHA256:
8c9f0e8b9b419f0e4dc5fa3662df9fa558422035065b8eed83568674975073f0
SSDeep:
768:ih8C5WWh7d0rkf3i6IVZt3/Ov9SD7Oha4oMi2jXHUFg3:iKned0Qf36ZOlSDl4P9rHUFg3
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv
|
MD5:
50fca4e206c769e1e6bbb267771ba87b
SHA1:
6df0da1a4258840c62b24614f58b35533a6ae8c1
SHA256:
10b5f74391df641a981971a050b15455919a008a052482cee7a354670bb05c71
SSDeep:
768:TVLIWG/dXZX0OoMts2+We0vJ/kNHGKKuidr35hc5HgQ09tx3vCf6qa0dbMi2jpvE:TVEWmxZ9ofrmYihcSQ09jvCfCcI951tw
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv.spyhunter
|
MD5:
50fca4e206c769e1e6bbb267771ba87b
SHA1:
6df0da1a4258840c62b24614f58b35533a6ae8c1
SHA256:
10b5f74391df641a981971a050b15455919a008a052482cee7a354670bb05c71
SSDeep:
768:TVLIWG/dXZX0OoMts2+We0vJ/kNHGKKuidr35hc5HgQ09tx3vCf6qa0dbMi2jpvE:TVEWmxZ9ofrmYihcSQ09jvCfCcI951tw
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV
|
MD5:
f423f2991f16cdf46f17c2097593b22a
SHA1:
d229b67c3f9bd1a5e54338cd69db8afcf4557fed
SHA256:
936e2b40061afcc5ebf4a327d56ebd0808d930fb3a51dca7c5c951cbd55bd9c1
SSDeep:
6144:gbqGXZKQRWOlnyJOxJ456CuLTBwC8FqzB:Sq+AAvyJCJ456lBQMB
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV.spyhunter
|
MD5:
f423f2991f16cdf46f17c2097593b22a
SHA1:
d229b67c3f9bd1a5e54338cd69db8afcf4557fed
SHA256:
936e2b40061afcc5ebf4a327d56ebd0808d930fb3a51dca7c5c951cbd55bd9c1
SSDeep:
6144:gbqGXZKQRWOlnyJOxJ456CuLTBwC8FqzB:Sq+AAvyJCJ456lBQMB
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV
|
MD5:
00227eef869df5de405b3dc2d1dcb759
SHA1:
d97105285e6020e3a0e4fbc1257d58d180fa9908
SHA256:
2148fada17794a3c041e23338bc6a4ee5a42123c166aa9c8777155582b501412
SSDeep:
6144:LkVjfKEEmPgU/9YsJx3swD3y0QdxFpTbEh:MTKGPgxsn3vD3y9bXTgh
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV.spyhunter
|
MD5:
00227eef869df5de405b3dc2d1dcb759
SHA1:
d97105285e6020e3a0e4fbc1257d58d180fa9908
SHA256:
2148fada17794a3c041e23338bc6a4ee5a42123c166aa9c8777155582b501412
SSDeep:
6144:LkVjfKEEmPgU/9YsJx3swD3y0QdxFpTbEh:MTKGPgxsn3vD3y9bXTgh
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM
|
MD5:
e8471c8fd166c733cf0fb0a582bf652f
SHA1:
eae244d5271b7c2dc56ba537720dba723f9592ad
SHA256:
c9ca6363fbde5e00b56aa5299e4fd4b40370562b9fc4fc228d70625b5218a279
SSDeep:
1536:dFsF4NEbf6cl50xbMAhal50xbM/F49L3wWNL:vs4KbXoMAkXoMO9jN
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM.spyhunter
|
MD5:
e8471c8fd166c733cf0fb0a582bf652f
SHA1:
eae244d5271b7c2dc56ba537720dba723f9592ad
SHA256:
c9ca6363fbde5e00b56aa5299e4fd4b40370562b9fc4fc228d70625b5218a279
SSDeep:
1536:dFsF4NEbf6cl50xbMAhal50xbM/F49L3wWNL:vs4KbXoMAkXoMO9jN
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF
|
MD5:
e3d291ac2aeec605fc425bc1f261617e
SHA1:
88911391da9deec2404e87b27d7403bea1e38f23
SHA256:
0f9b2c44264a6195e87a97705a8ecd4579a771b2e43b7bbeef353f37454ebee4
SSDeep:
12:cfyEU6zoaeJ/PyJkuiBG79F8s4SL3MBIULgmMIBNAsa4Mz7Y:7huiBG7Dv4S8BIK/bAsaW
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF.spyhunter
|
MD5:
e3d291ac2aeec605fc425bc1f261617e
SHA1:
88911391da9deec2404e87b27d7403bea1e38f23
SHA256:
0f9b2c44264a6195e87a97705a8ecd4579a771b2e43b7bbeef353f37454ebee4
SSDeep:
12:cfyEU6zoaeJ/PyJkuiBG79F8s4SL3MBIULgmMIBNAsa4Mz7Y:7huiBG7Dv4S8BIK/bAsaW
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF
|
MD5:
22beae71e10d8d80adcfa5b96188f5b9
SHA1:
88a8dd73499f4f541424c482024876d414f9bd83
SHA256:
4738c7239b70c566c3ff3f563564db72fa4a64f1013472417958d1dd81a95a74
SSDeep:
48:xk0vGl6icvKaVbspAnB3p5AnadQ1VXFQr9W5UmDaLu9ZO+jSRyovK7C5:mi5TP0C4NbKMGqZ7jA/K7K
ImpHash:
None
|
Access
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.spyhunter
|
MD5:
22beae71e10d8d80adcfa5b96188f5b9
SHA1:
88a8dd73499f4f541424c482024876d414f9bd83
SHA256:
4738c7239b70c566c3ff3f563564db72fa4a64f1013472417958d1dd81a95a74
SSDeep:
48:xk0vGl6icvKaVbspAnB3p5AnadQ1VXFQr9W5UmDaLu9ZO+jSRyovK7C5:mi5TP0C4NbKMGqZ7jA/K7K
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG
|
MD5:
71474178b82af3d75e0fd1352af742d1
SHA1:
743a04ad7a9a21acacb6e51ac0d3b50b746efde5
SHA256:
f9d3eb230707441e95202b39f8c07b2a4cd683d9cf8c313c3410d923bc61436b
SSDeep:
768:KHEixCex6FzQFeKmrzmVZpJCSc5FmCJ4yiwQHKyujf:KkixCexJeKmeUjmAB+E
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.spyhunter
|
MD5:
71474178b82af3d75e0fd1352af742d1
SHA1:
743a04ad7a9a21acacb6e51ac0d3b50b746efde5
SHA256:
f9d3eb230707441e95202b39f8c07b2a4cd683d9cf8c313c3410d923bc61436b
SSDeep:
768:KHEixCex6FzQFeKmrzmVZpJCSc5FmCJ4yiwQHKyujf:KkixCexJeKmeUjmAB+E
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF
|
MD5:
81108dccde9f4a0c6f52f2877458b84e
SHA1:
03d90c020f26137ff2a31e815dc46a94233ce866
SHA256:
71af5e6b5125c0965e2b2a92cd50a4013603c5f3104972f01c0539c088631e25
SSDeep:
48:bhieC7Y992sgNxymGTh5c2H0vuX24nSu5CF:VV9/gABUv948
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.spyhunter
|
MD5:
81108dccde9f4a0c6f52f2877458b84e
SHA1:
03d90c020f26137ff2a31e815dc46a94233ce866
SHA256:
71af5e6b5125c0965e2b2a92cd50a4013603c5f3104972f01c0539c088631e25
SSDeep:
48:bhieC7Y992sgNxymGTh5c2H0vuX24nSu5CF:VV9/gABUv948
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG
|
MD5:
8f0782624deee69d4250bb44aad31b4a
SHA1:
8a10489da73354fcf6040a46cdcf72c531bf9293
SHA256:
cf5395ff3af836cc05b81a9e950c2a5f1157503f2745b74ec573c2b2de8de74c
SSDeep:
768:U3JnuNPDpMWg5Mjsj0iHMAIhqshvOYGDSGpWr7+uD:U3lCehMjs3sPHhvOYGpWWuD
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.spyhunter
|
MD5:
8f0782624deee69d4250bb44aad31b4a
SHA1:
8a10489da73354fcf6040a46cdcf72c531bf9293
SHA256:
cf5395ff3af836cc05b81a9e950c2a5f1157503f2745b74ec573c2b2de8de74c
SSDeep:
768:U3JnuNPDpMWg5Mjsj0iHMAIhqshvOYGDSGpWr7+uD:U3lCehMjs3sPHhvOYGpWWuD
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG
|
MD5:
afeb7d18a2a6f716bebd9b8a0198cabb
SHA1:
b4a69d3ac0e653d2828f67842f352f9088bd4139
SHA256:
cb638aa04115f3ea318d10f0e63848a9c8b71e5e506c4ca1d7b9a7d2d52bed7a
SSDeep:
768:xEYfL9MUzoC4igUAeSWAsAubZEJKYeFRSmEA7j5z/YgwIK9mP:9hMUzbsihAJubsKYeFImEA7VzYiCK
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.spyhunter
|
MD5:
afeb7d18a2a6f716bebd9b8a0198cabb
SHA1:
b4a69d3ac0e653d2828f67842f352f9088bd4139
SHA256:
cb638aa04115f3ea318d10f0e63848a9c8b71e5e506c4ca1d7b9a7d2d52bed7a
SSDeep:
768:xEYfL9MUzoC4igUAeSWAsAubZEJKYeFRSmEA7j5z/YgwIK9mP:9hMUzbsihAJubsKYeFImEA7VzYiCK
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG
|
MD5:
ceea3a41d8006000b317c632f4c3edcf
SHA1:
fac9e1a34136a5403bcbae8f29575b1d6890bd6d
SHA256:
bbe6445dff5d19afd8691133effde9e5e431900ef37a08b4b5afc5b1267cc7f2
SSDeep:
768:b6ea8yct8Rj8iYdskk7oCTQeIqdPtgyP3H3J97LqrQ:Ba8yiqj8F+kk0qrbP3H3J97Lq8
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.spyhunter
|
MD5:
ceea3a41d8006000b317c632f4c3edcf
SHA1:
fac9e1a34136a5403bcbae8f29575b1d6890bd6d
SHA256:
bbe6445dff5d19afd8691133effde9e5e431900ef37a08b4b5afc5b1267cc7f2
SSDeep:
768:b6ea8yct8Rj8iYdskk7oCTQeIqdPtgyP3H3J97LqrQ:Ba8yiqj8F+kk0qrbP3H3J97Lq8
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG
|
MD5:
8f8325694ddb2dfae46e394c3cfa7e6a
SHA1:
68f2566a69187da4a310b18409d555d9ef4e34d8
SHA256:
5d77958a1eb4e07d4256cd21b2eb180488b5e9086246c97f3bc47184c0904827
SSDeep:
384:gUzf96fWO/hwQc/bHU9jA9UvS8J29m3GCH5k22MNHvpfkA32WcaZfN6SPun:gAfQfh5wbmsSG9m02HxpMA3vcaJin
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.spyhunter
|
MD5:
8f8325694ddb2dfae46e394c3cfa7e6a
SHA1:
68f2566a69187da4a310b18409d555d9ef4e34d8
SHA256:
5d77958a1eb4e07d4256cd21b2eb180488b5e9086246c97f3bc47184c0904827
SSDeep:
384:gUzf96fWO/hwQc/bHU9jA9UvS8J29m3GCH5k22MNHvpfkA32WcaZfN6SPun:gAfQfh5wbmsSG9m02HxpMA3vcaJin
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM
|
MD5:
681cc7a49ca2d66a249d00b476db4b0d
SHA1:
b0b92b77c72d5696a2662ca122165fb120189987
SHA256:
7958b4f28062559ca9f34ee5dad7c9f7f1c8947755731a2d0fdb237ad6c21417
SSDeep:
768:+F6J/Q0YQL3qzmlmomIgd0QZx/kMJbSZ20aWfVNi:F/1Yu3KCi
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM.spyhunter
|
MD5:
681cc7a49ca2d66a249d00b476db4b0d
SHA1:
b0b92b77c72d5696a2662ca122165fb120189987
SHA256:
7958b4f28062559ca9f34ee5dad7c9f7f1c8947755731a2d0fdb237ad6c21417
SSDeep:
768:+F6J/Q0YQL3qzmlmomIgd0QZx/kMJbSZ20aWfVNi:F/1Yu3KCi
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF
|
MD5:
6096d95fbf970185ec897348789fb7f4
SHA1:
2147cfa6250c1b188b0e8661685f9b7989f9e027
SHA256:
51b4d8c65106a5dbf3ff63d138add2fa6dabc81865fda995ce7ee78c0f49d58a
SSDeep:
12:sj8N5kE1ypR3o1u2BuOqztY8mTPbZ2he3ghBauLbva5L+gy6n:sj8N5kEMpR3Eu2Bt7PbZR38WZy6
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF.spyhunter
|
MD5:
6096d95fbf970185ec897348789fb7f4
SHA1:
2147cfa6250c1b188b0e8661685f9b7989f9e027
SHA256:
51b4d8c65106a5dbf3ff63d138add2fa6dabc81865fda995ce7ee78c0f49d58a
SSDeep:
12:sj8N5kE1ypR3o1u2BuOqztY8mTPbZ2he3ghBauLbva5L+gy6n:sj8N5kEMpR3Eu2Bt7PbZR38WZy6
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF
|
MD5:
0858fd5de6228064f3b07de136b6ca15
SHA1:
d4efe88aa89de9515ab5e764d39702d06c145a34
SHA256:
6cd266902408bd38f79f6e49ed144135d0585579a1596e88423fe3544c397360
SSDeep:
24:9uFB73rQmBPCrnShEXOGhwufYTQCnfEtLGmaKy2jGVi53zLMH0joFJ+goWno3ODQ:96BRarnDH+7nfEtLGmRiVi5DWUGJBFn2
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.spyhunter
|
MD5:
0858fd5de6228064f3b07de136b6ca15
SHA1:
d4efe88aa89de9515ab5e764d39702d06c145a34
SHA256:
6cd266902408bd38f79f6e49ed144135d0585579a1596e88423fe3544c397360
SSDeep:
24:9uFB73rQmBPCrnShEXOGhwufYTQCnfEtLGmaKy2jGVi53zLMH0joFJ+goWno3ODQ:96BRarnDH+7nfEtLGmRiVi5DWUGJBFn2
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG
|
MD5:
18cc69b4ccacf0417a0f7494c85b5fdf
SHA1:
499560f239afda06f0c7873dd1c35911060ebf46
SHA256:
5123c9256fefc43b5cc195446ce44178cc6277c35dc1a930f509624bb3f33577
SSDeep:
384:9psrrqbA4F3FiDQSF2ZUrhDfDFH3/g+H94BY+DetpMZxjgceJKRIMDA:9SrGbhiDQrZUrhvFXpaBY+0kjVo
ImpHash:
None
|
Access, Read
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.spyhunter
|
MD5:
18cc69b4ccacf0417a0f7494c85b5fdf
SHA1:
499560f239afda06f0c7873dd1c35911060ebf46
SHA256:
5123c9256fefc43b5cc195446ce44178cc6277c35dc1a930f509624bb3f33577
SSDeep:
384:9psrrqbA4F3FiDQSF2ZUrhDfDFH3/g+H94BY+DetpMZxjgceJKRIMDA:9SrGbhiDQrZUrhvFXpaBY+0kjVo
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF
|
MD5:
89882695e53084ffacd24a4a406f9578
SHA1:
74bfb0568d16fbe456e363bdd996df38cc94c097
SHA256:
af074e4b701c10efad5f779a2e688b79d1005c8b80499eabd2cb57822f5c1015
SSDeep:
96:pekKQEqlF0SjNUkNEV0atLq6n3yytrqls6oRlNyndF13:8kKQRlFvjCkiVfLT3yyNqls6CNidFV
ImpHash:
None
|
Access, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.spyhunter
|
MD5:
89882695e53084ffacd24a4a406f9578
SHA1:
74bfb0568d16fbe456e363bdd996df38cc94c097
SHA256:
af074e4b701c10efad5f779a2e688b79d1005c8b80499eabd2cb57822f5c1015
SSDeep:
96:pekKQEqlF0SjNUkNEV0atLq6n3yytrqls6oRlNyndF13:8kKQRlFvjCkiVfLT3yyNqls6CNidFV
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG
|
MD5:
c086e4e2280ca43c9c40868b16c33c89
SHA1:
ad6b7551702fc787f7e7d53df1368a5fed6a231f
SHA256:
d54e9d7b0fdc30a2900d1dc314bdf72a13674e03ba0df59594b08e7945d085df
SSDeep:
768:Gs3txbN4W5oIo6oxnqHqO/JuC9UFkVyVJ0yPg1JDD/g7hkgTLQw:GQBoZHAJ7+FkVC0yI1FbgNVQw
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.spyhunter
|
MD5:
c086e4e2280ca43c9c40868b16c33c89
SHA1:
ad6b7551702fc787f7e7d53df1368a5fed6a231f
SHA256:
d54e9d7b0fdc30a2900d1dc314bdf72a13674e03ba0df59594b08e7945d085df
SSDeep:
768:Gs3txbN4W5oIo6oxnqHqO/JuC9UFkVyVJ0yPg1JDD/g7hkgTLQw:GQBoZHAJ7+FkVC0yI1FbgNVQw
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG
|
MD5:
3dea2784c60252580c3ef43304ab8cc5
SHA1:
55ca23473c73166953bbcfb28f3a9e38cdf95f18
SHA256:
c12d26272469fbd8c6c9afcd31a9ccd6c7451d547dd4c80a14ff4b4ba3cc17de
SSDeep:
768:CrQlzIrmtJjNLRCgbCeQFuIMZYLz4Dh5/IT:FLhZbCrUYLzgcT
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.spyhunter
|
MD5:
3dea2784c60252580c3ef43304ab8cc5
SHA1:
55ca23473c73166953bbcfb28f3a9e38cdf95f18
SHA256:
c12d26272469fbd8c6c9afcd31a9ccd6c7451d547dd4c80a14ff4b4ba3cc17de
SSDeep:
768:CrQlzIrmtJjNLRCgbCeQFuIMZYLz4Dh5/IT:FLhZbCrUYLzgcT
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF
|
MD5:
5051d7bc7f23f478563ecfe6b014e3e6
SHA1:
f3a57a43aaef9bbe846ab485aa0eed18396d71b6
SHA256:
58d6ef164d4ed4ee2e26b3057443230ee39af406f2d4e76c945c345b9808a4b0
SSDeep:
96:UQiZpVK23+aZBjJcj3Z/wefFYab5q07voijqCKLDsLM0CPsOiJn:UQUkM7+j3ZcGq0DYDkLM0UdQ
ImpHash:
None
|
Access, Read
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.spyhunter
|
MD5:
5051d7bc7f23f478563ecfe6b014e3e6
SHA1:
f3a57a43aaef9bbe846ab485aa0eed18396d71b6
SHA256:
58d6ef164d4ed4ee2e26b3057443230ee39af406f2d4e76c945c345b9808a4b0
SSDeep:
96:UQiZpVK23+aZBjJcj3Z/wefFYab5q07voijqCKLDsLM0CPsOiJn:UQUkM7+j3ZcGq0DYDkLM0UdQ
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG
|
MD5:
ec3f70e1ba1fa8f4be92f84ee5d64842
SHA1:
201bbfe5fc54cc220eb57440b5e30cfdb36c9ed2
SHA256:
fb4b9f505fe8e277b4db4864fcee0a42aef3cc0491a6c58c664b74b2fc289d36
SSDeep:
1536:0uyRHvBsTtfV/8YL5hTYK4GISJUmw8irlzZv6:0u4JsTt9UAFgXX8irZZi
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.spyhunter
|
MD5:
ec3f70e1ba1fa8f4be92f84ee5d64842
SHA1:
201bbfe5fc54cc220eb57440b5e30cfdb36c9ed2
SHA256:
fb4b9f505fe8e277b4db4864fcee0a42aef3cc0491a6c58c664b74b2fc289d36
SSDeep:
1536:0uyRHvBsTtfV/8YL5hTYK4GISJUmw8irlzZv6:0u4JsTt9UAFgXX8irZZi
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF
|
MD5:
ec4677764e8c4ae0c2b88e1f6cc96aff
SHA1:
e32cfebac6a7e3498f29a4ec9405ea28e62ba57e
SHA256:
cd61968fcf5c67f506a4686c80dc6f2a6791b8cdde1ed3796852420f287e0889
SSDeep:
6:i7hC9/KBLFdPojfVhszhDE0pQiTU/wDvY0fqggZXOLqmwGMTtwOxU/4NC/oabf8T:i7Q/aPojkbpQR4ffqgA3GOc4I88ypb
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF.spyhunter
|
MD5:
ec4677764e8c4ae0c2b88e1f6cc96aff
SHA1:
e32cfebac6a7e3498f29a4ec9405ea28e62ba57e
SHA256:
cd61968fcf5c67f506a4686c80dc6f2a6791b8cdde1ed3796852420f287e0889
SSDeep:
6:i7hC9/KBLFdPojfVhszhDE0pQiTU/wDvY0fqggZXOLqmwGMTtwOxU/4NC/oabf8T:i7Q/aPojkbpQR4ffqgA3GOc4I88ypb
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF
|
MD5:
23f23516967d37a9b6bc31c85bb3f28e
SHA1:
808b10a6eeaee38bf7284d5612333db3be04fa8e
SHA256:
8ae4a99528887f2f0ee09458f3c8e866b26f0abe524ca3ac727916e0b11f550d
SSDeep:
48:O6kOfANLkBIyKGaNQt8TCrodT/Qjhak7wI30AeiHZeAhXoALnj050noX/hQdeaMu:ZPULkBBKGaCtSCkajhak0I3oiHZeQXJX
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.spyhunter
|
MD5:
23f23516967d37a9b6bc31c85bb3f28e
SHA1:
808b10a6eeaee38bf7284d5612333db3be04fa8e
SHA256:
8ae4a99528887f2f0ee09458f3c8e866b26f0abe524ca3ac727916e0b11f550d
SSDeep:
48:O6kOfANLkBIyKGaNQt8TCrodT/Qjhak7wI30AeiHZeAhXoALnj050noX/hQdeaMu:ZPULkBBKGaCtSCkajhak0I3oiHZeQXJX
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG
|
MD5:
8695f9565bdfa05fde297556d7f1439a
SHA1:
a4b1e8fbd3b6d8087f36d59dc477c0c4c001b5d8
SHA256:
7aa8f8e5750fa9a5f8f408d3dcbe7a5179ad450a9d25af81e0d1d7126c6bc4cc
SSDeep:
384:tovLMeml95bo0CWFsP4RfxcCIxVV6+JUFQ01A4JxakgDV7QeJDPp:SvIekUN+7YUeEu8xzcVMQDR
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.spyhunter
|
MD5:
8695f9565bdfa05fde297556d7f1439a
SHA1:
a4b1e8fbd3b6d8087f36d59dc477c0c4c001b5d8
SHA256:
7aa8f8e5750fa9a5f8f408d3dcbe7a5179ad450a9d25af81e0d1d7126c6bc4cc
SSDeep:
384:tovLMeml95bo0CWFsP4RfxcCIxVV6+JUFQ01A4JxakgDV7QeJDPp:SvIekUN+7YUeEu8xzcVMQDR
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF
|
MD5:
95be6ec3e8ba3beac2dda2ebe3be4200
SHA1:
65df438e90674449101034aa5c2c592e33719301
SHA256:
275a9e13ee367ad2b0e599cda0d585aae91a799e27fb867efe3aae9481099bbc
SSDeep:
12:wSiqBv+/H6yYoSiUAtFvTBfni2H3p7fw9mzvcp3EwkZ+dUsaD3hmdtt:wIkH6yJVvZn93p7f2f0wkI2ZD3hS
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF.spyhunter
|
MD5:
95be6ec3e8ba3beac2dda2ebe3be4200
SHA1:
65df438e90674449101034aa5c2c592e33719301
SHA256:
275a9e13ee367ad2b0e599cda0d585aae91a799e27fb867efe3aae9481099bbc
SSDeep:
12:wSiqBv+/H6yYoSiUAtFvTBfni2H3p7fw9mzvcp3EwkZ+dUsaD3hmdtt:wIkH6yJVvZn93p7f2f0wkI2ZD3hS
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF
|
MD5:
caae996ac1c0092b8f0f851d73fb2936
SHA1:
8cc352883194d0b825445f10b34517ca51d5aa39
SHA256:
7d0efdb27f86e4286bb3a551d0dc4c2284dff0e993d77d6952cafa48d0fd3129
SSDeep:
24:YRuusfZhIOvFlNKM8qMPNjC7j+6+Yw1N+9FmBm32GzLgUXpvVjGMH:YRuux4C7PpCm6Bwe9FmBm9gupBGM
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.spyhunter
|
MD5:
caae996ac1c0092b8f0f851d73fb2936
SHA1:
8cc352883194d0b825445f10b34517ca51d5aa39
SHA256:
7d0efdb27f86e4286bb3a551d0dc4c2284dff0e993d77d6952cafa48d0fd3129
SSDeep:
24:YRuusfZhIOvFlNKM8qMPNjC7j+6+Yw1N+9FmBm32GzLgUXpvVjGMH:YRuux4C7PpCm6Bwe9FmBm9gupBGM
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG
|
MD5:
83d21b859197551228d936e99450fecb
SHA1:
30b30bb124d1756314ccabd05db5c6c818dca249
SHA256:
85a3a01f7da97944a4a3f12cbcadce229e76055085b12cc1fd8812b5e749364f
SSDeep:
384:WOoMcqmn9ZueRP106hGDLk+QXmafEA4ANwiJqJo2sfh/d2eYUGaXOIMsO+N:nofqIueRP1lhGvm2UNwc1nf2eYUzxMsn
ImpHash:
None
|
Access, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.spyhunter
|
MD5:
83d21b859197551228d936e99450fecb
SHA1:
30b30bb124d1756314ccabd05db5c6c818dca249
SHA256:
85a3a01f7da97944a4a3f12cbcadce229e76055085b12cc1fd8812b5e749364f
SSDeep:
384:WOoMcqmn9ZueRP106hGDLk+QXmafEA4ANwiJqJo2sfh/d2eYUGaXOIMsO+N:nofqIueRP1lhGvm2UNwc1nf2eYUzxMsn
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF
|
MD5:
87609bef459b811cd8a890aee13592aa
SHA1:
e5f0de57fdd527f0925e9518505bb90e90cd1814
SHA256:
dbb2e6e7d1910753689d68f11bc227f2c9df0346de8077d360f270e26099bd49
SSDeep:
12:cXkQ0kw9XaB+0DVlNd1QA8AQFs70xO4KChfnlk9FG5/2PxEbJgBOF0v1CC3LAjVr:UqlcD1QH40xUChfn2G/2lBOKv8C7At
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF.spyhunter
|
MD5:
87609bef459b811cd8a890aee13592aa
SHA1:
e5f0de57fdd527f0925e9518505bb90e90cd1814
SHA256:
dbb2e6e7d1910753689d68f11bc227f2c9df0346de8077d360f270e26099bd49
SSDeep:
12:cXkQ0kw9XaB+0DVlNd1QA8AQFs70xO4KChfnlk9FG5/2PxEbJgBOF0v1CC3LAjVr:UqlcD1QH40xUChfn2G/2lBOKv8C7At
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF
|
MD5:
9edc860a6f114ddc9613520e954b30dd
SHA1:
2f530e1bf03bbd370045c44b008eb7dbca2fbb07
SHA256:
1db86a4c6a0a9456e46cfcca2b3ca53db41fb336dcdfccbacfd13ec58f7c025b
SSDeep:
24:ZKQopgF/orXGESUw9rMT+1isMWqsy1N43M+cNn9KBf6FbpFKq+hqtgWoAreNki3o:ZKtgFQbVStV0+1isMHBTi5cGUhKq+M0m
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.spyhunter
|
MD5:
9edc860a6f114ddc9613520e954b30dd
SHA1:
2f530e1bf03bbd370045c44b008eb7dbca2fbb07
SHA256:
1db86a4c6a0a9456e46cfcca2b3ca53db41fb336dcdfccbacfd13ec58f7c025b
SSDeep:
24:ZKQopgF/orXGESUw9rMT+1isMWqsy1N43M+cNn9KBf6FbpFKq+hqtgWoAreNki3o:ZKtgFQbVStV0+1isMHBTi5cGUhKq+M0m
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG
|
MD5:
b6d919e6d39e39eb44958922d33da62f
SHA1:
9df428c6cd938b58865d508a56e41c08665abcd4
SHA256:
4a6b3ae00cb91c166dca96fa91f939d7bc63ae9a9f454b46463b06dee998a9ee
SSDeep:
192:v5rOk+xqLRl4dyUEqYexLCmE+NrC6SMBWeVViV87u3CMyvPLlR7fPK:xrO/GfU7tCmx3SCViVsu3CDTH7PK
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.spyhunter
|
MD5:
b6d919e6d39e39eb44958922d33da62f
SHA1:
9df428c6cd938b58865d508a56e41c08665abcd4
SHA256:
4a6b3ae00cb91c166dca96fa91f939d7bc63ae9a9f454b46463b06dee998a9ee
SSDeep:
192:v5rOk+xqLRl4dyUEqYexLCmE+NrC6SMBWeVViV87u3CMyvPLlR7fPK:xrO/GfU7tCmx3SCViVsu3CDTH7PK
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM
|
MD5:
b51829d4701624f4d491df48bd039eb9
SHA1:
55a2b02ffac4f38dd712bf32df6c8d6eb3d3f3b3
SHA256:
cf62c74ab4a6e54a6059ac12089a73e41a1d981e9a65524bb2aa22923d380955
SSDeep:
768:6V1NgkROfXSiAoqAyNBFJpCRhGy9VDL8BxWxwQwTzv0kbBr9ImME6Br+tCCFIKBR:s7gk8vxAoqAyNBFrCKy4BxjamMQf
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM.spyhunter
|
MD5:
b51829d4701624f4d491df48bd039eb9
SHA1:
55a2b02ffac4f38dd712bf32df6c8d6eb3d3f3b3
SHA256:
cf62c74ab4a6e54a6059ac12089a73e41a1d981e9a65524bb2aa22923d380955
SSDeep:
768:6V1NgkROfXSiAoqAyNBFJpCRhGy9VDL8BxWxwQwTzv0kbBr9ImME6Br+tCCFIKBR:s7gk8vxAoqAyNBFrCKy4BxjamMQf
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF
|
MD5:
b4b7102d2b03cd364f06eb02a980a5ba
SHA1:
f6c57c1d0dfbeafdcfd88cba910790b7156673eb
SHA256:
09aecab68032801c6cc4bc54e9f4195d5af77029997bc891ebd34c2a1ea4b4a4
SSDeep:
12:L1cw9pClRbzuhMxfFUFGKlAs/dxriYx+ecBUyGuQ:KkClRbqaGFPA4ViYxvcxQ
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF.spyhunter
|
MD5:
b4b7102d2b03cd364f06eb02a980a5ba
SHA1:
f6c57c1d0dfbeafdcfd88cba910790b7156673eb
SHA256:
09aecab68032801c6cc4bc54e9f4195d5af77029997bc891ebd34c2a1ea4b4a4
SSDeep:
12:L1cw9pClRbzuhMxfFUFGKlAs/dxriYx+ecBUyGuQ:KkClRbqaGFPA4ViYxvcxQ
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG
|
MD5:
098dd10eb234230c8352fda773f989b9
SHA1:
e0fe64f6cc6f8ae8b03641470d9b5c36a176bf71
SHA256:
2242fa3fac2ae2771fe17449c4c2819c53019734d9e9a9b6bcd98e4390f8b1b7
SSDeep:
768:VG/2q3Iz2rve6CwNHa5unJvnA4TI8vLMZXxbAA0:VM2SIzYve6C2pBnTI8vsRA1
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.spyhunter
|
MD5:
098dd10eb234230c8352fda773f989b9
SHA1:
e0fe64f6cc6f8ae8b03641470d9b5c36a176bf71
SHA256:
2242fa3fac2ae2771fe17449c4c2819c53019734d9e9a9b6bcd98e4390f8b1b7
SSDeep:
768:VG/2q3Iz2rve6CwNHa5unJvnA4TI8vLMZXxbAA0:VM2SIzYve6C2pBnTI8vsRA1
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG
|
MD5:
cb0542971fb7250079b776212d955f0e
SHA1:
6a513bcaf52614f1ca4406e3080d5ad8c9c3e90a
SHA256:
9f4aecaeaf2602aa3d85b535d66400482d65f2cb0161143911bd55b55f9ad8dd
SSDeep:
384:60YEpHN1mn0keh3rQj+GUTuuIWdpox+LMBUsqpGad5Qusrv:6qpHNslehbQ4THw+YBUsqppQuav
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.spyhunter
|
MD5:
cb0542971fb7250079b776212d955f0e
SHA1:
6a513bcaf52614f1ca4406e3080d5ad8c9c3e90a
SHA256:
9f4aecaeaf2602aa3d85b535d66400482d65f2cb0161143911bd55b55f9ad8dd
SSDeep:
384:60YEpHN1mn0keh3rQj+GUTuuIWdpox+LMBUsqpGad5Qusrv:6qpHNslehbQ4THw+YBUsqppQuav
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF
|
MD5:
1e73224f9b8e90799ea5688dd65e0d6f
SHA1:
ac40e1f6ecaf9d1423f4d0aac609de0cf30c3952
SHA256:
ae3dd581c973c1e203fce5632ee8b9efccda955885075ad03c126377705f0d1f
SSDeep:
48:Y114DZrLxE/9M9hH8eMjW8KMYT3XhDCgv2+6O3bgbj9CkCxoSl87:wCDZrLG+hcLjXKMGhDCgv2+5b4o1o
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.spyhunter
|
MD5:
1e73224f9b8e90799ea5688dd65e0d6f
SHA1:
ac40e1f6ecaf9d1423f4d0aac609de0cf30c3952
SHA256:
ae3dd581c973c1e203fce5632ee8b9efccda955885075ad03c126377705f0d1f
SSDeep:
48:Y114DZrLxE/9M9hH8eMjW8KMYT3XhDCgv2+6O3bgbj9CkCxoSl87:wCDZrLG+hcLjXKMGhDCgv2+5b4o1o
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM
|
MD5:
aae681ca3e842b34bc73611c5a885e51
SHA1:
c71aa0d4ecd1a650f53f6727f80c4adf60bdfb0e
SHA256:
3c23841418353edd55e6933b474c65a70b08a39a8b12d51ce68112e8494b7d43
SSDeep:
768:eW4mGcFq6UcQzmS+gOqtBQCxRwEEXcULIqtBQZdtnHmyuas3T5iWKVz6tMfFfyNi:bMq/3qfQCxccULIqfQyi
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM.spyhunter
|
MD5:
aae681ca3e842b34bc73611c5a885e51
SHA1:
c71aa0d4ecd1a650f53f6727f80c4adf60bdfb0e
SHA256:
3c23841418353edd55e6933b474c65a70b08a39a8b12d51ce68112e8494b7d43
SSDeep:
768:eW4mGcFq6UcQzmS+gOqtBQCxRwEEXcULIqtBQZdtnHmyuas3T5iWKVz6tMfFfyNi:bMq/3qfQCxccULIqfQyi
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF
|
MD5:
d4def61ca9c41706da44f918d6df6ba8
SHA1:
f42c2616696b9d5c0657cff10c50045dddb4ecdb
SHA256:
9472636e266efd5d38ad804b4cddf726e5200dd580f89cacaace162bf6f96471
SSDeep:
12:ewLHhVqUnX/MqFNxs9TMuIpyaZBcdqJ2ioFg2SulDddJ2Yc7psskthZ:enUvztJLcd02io2hulDddJ+pzkt
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF.spyhunter
|
MD5:
d4def61ca9c41706da44f918d6df6ba8
SHA1:
f42c2616696b9d5c0657cff10c50045dddb4ecdb
SHA256:
9472636e266efd5d38ad804b4cddf726e5200dd580f89cacaace162bf6f96471
SSDeep:
12:ewLHhVqUnX/MqFNxs9TMuIpyaZBcdqJ2ioFg2SulDddJ2Yc7psskthZ:enUvztJLcd02io2hulDddJ+pzkt
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG
|
MD5:
5de4b1a596c9feeb95a77442ee585cef
SHA1:
c706ab27ed86e50a514b63290704f61477941304
SHA256:
6f79131f7c926ada2e08aa0507f97cf2ed5f13848591cc7bb2a5750276d2c06a
SSDeep:
384:ERoagoMbVS3QfcVNIx9VoDXX6VVhh9bXkBHMNgS2jD2OaRqJH5M:LoMbVkQfaEVoDXqwBI2/95M
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.spyhunter
|
MD5:
5de4b1a596c9feeb95a77442ee585cef
SHA1:
c706ab27ed86e50a514b63290704f61477941304
SHA256:
6f79131f7c926ada2e08aa0507f97cf2ed5f13848591cc7bb2a5750276d2c06a
SSDeep:
384:ERoagoMbVS3QfcVNIx9VoDXX6VVhh9bXkBHMNgS2jD2OaRqJH5M:LoMbVkQfaEVoDXqwBI2/95M
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM
|
MD5:
bc1b06dcebd922cc8ab1c6fcb7cea76a
SHA1:
8d52f8557386be61b312a0856cc89db9796df1ec
SHA256:
4b3f1c9e8bb87425811f3952e49187f3c043f4e5020fde46a3f19d643b2ec58b
SSDeep:
768:5I6kRQD80a1MhuxDSL94nvFA+bkp90mAaTnESpWvK/NBP:e9y8PBSL4i
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM.spyhunter
|
MD5:
bc1b06dcebd922cc8ab1c6fcb7cea76a
SHA1:
8d52f8557386be61b312a0856cc89db9796df1ec
SHA256:
4b3f1c9e8bb87425811f3952e49187f3c043f4e5020fde46a3f19d643b2ec58b
SSDeep:
768:5I6kRQD80a1MhuxDSL94nvFA+bkp90mAaTnESpWvK/NBP:e9y8PBSL4i
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF
|
MD5:
c0cffa91b0cebf09ee507bd9efea0b7a
SHA1:
acecdd86329361dc10d262f511e3f88fe1a8574b
SHA256:
c5707bd0e39ccef7a1da0b3b275a59af1cdeef27c19eb9d76778b47dc191e9f5
SSDeep:
192:k5yBIvxNuVksnAKFrTn9t7iYsPi77575M3U:TIJsDV9td57EU
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF.spyhunter
|
MD5:
c0cffa91b0cebf09ee507bd9efea0b7a
SHA1:
acecdd86329361dc10d262f511e3f88fe1a8574b
SHA256:
c5707bd0e39ccef7a1da0b3b275a59af1cdeef27c19eb9d76778b47dc191e9f5
SSDeep:
192:k5yBIvxNuVksnAKFrTn9t7iYsPi77575M3U:TIJsDV9td57EU
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG
|
MD5:
20913720153ab54f0dc01abaad4c5138
SHA1:
cea1d7d213f6ef9b1e050bcc7b4b3aef6ca14862
SHA256:
45a93b21d9b3882d970d20039d97a78154c8951e75be8f3dce54816dfd38000a
SSDeep:
768:7iyCoorbb1Qjn7jlRDOgSdE7UXwYwEh+mt:zCooHb167BRyrE7UXwYwEhlt
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.spyhunter
|
MD5:
20913720153ab54f0dc01abaad4c5138
SHA1:
cea1d7d213f6ef9b1e050bcc7b4b3aef6ca14862
SHA256:
45a93b21d9b3882d970d20039d97a78154c8951e75be8f3dce54816dfd38000a
SSDeep:
768:7iyCoorbb1Qjn7jlRDOgSdE7UXwYwEh+mt:zCooHb167BRyrE7UXwYwEhlt
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS
|
MD5:
aaebac7f0013bc1075d846cc8710785d
SHA1:
5653fd4ba1da61046d5b94aee9d6f8c88197a282
SHA256:
2ae0091d9cfd61684841730aab854b8a9dbcda5914b481e7ee2efca11586dc45
SSDeep:
24576:RU6Expo2lu5EQudFB06VArUC4N6O8FIl0:RUBxq28563rA4N6O8FI6
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS.spyhunter
|
MD5:
aaebac7f0013bc1075d846cc8710785d
SHA1:
5653fd4ba1da61046d5b94aee9d6f8c88197a282
SHA256:
2ae0091d9cfd61684841730aab854b8a9dbcda5914b481e7ee2efca11586dc45
SSDeep:
24576:RU6Expo2lu5EQudFB06VArUC4N6O8FIl0:RUBxq28563rA4N6O8FI6
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\MSB1ENFR.ITS
|
MD5:
d5c966d2c2745945bc9e3c6ab623cc13
SHA1:
3036b4ef100f91f69a2208e10e5300ab47b4c7eb
SHA256:
d01be18228912790646981b2cef41e615285ee1b43c5a21b74283592f2871ce2
SSDeep:
24576:S1YfiG+HPp93oE/tvp9+WYwYyotoeSQyeEH3gL9irpGEX2:S1ONg93oM7YwY5toWgHKEG
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\MSB1ENFR.ITS.spyhunter
|
MD5:
d5c966d2c2745945bc9e3c6ab623cc13
SHA1:
3036b4ef100f91f69a2208e10e5300ab47b4c7eb
SHA256:
d01be18228912790646981b2cef41e615285ee1b43c5a21b74283592f2871ce2
SSDeep:
24576:S1YfiG+HPp93oE/tvp9+WYwYyotoeSQyeEH3gL9irpGEX2:S1ONg93oM7YwY5toWgHKEG
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL
|
MD5:
475829265285498b7624a7857a6fde35
SHA1:
974b0722400f2b1d2fef3fdaa72ba00aaa5dc298
SHA256:
e704ff6f8dec3b0d1fc8b8a45bb8c1905e2c92148802f6848498a174a6bc0b9b
SSDeep:
3072:B7rpYxzVNgfFBkbjvpzC34E4S3ZXkwSCvfRfO2U4ks4djN5ij:B7rpGVNykHRC34XIJkZCvfRfzU44pij
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL.spyhunter
|
MD5:
475829265285498b7624a7857a6fde35
SHA1:
974b0722400f2b1d2fef3fdaa72ba00aaa5dc298
SHA256:
e704ff6f8dec3b0d1fc8b8a45bb8c1905e2c92148802f6848498a174a6bc0b9b
SSDeep:
3072:B7rpYxzVNgfFBkbjvpzC34E4S3ZXkwSCvfRfO2U4ks4djN5ij:B7rpGVNykHRC34XIJkZCvfRfzU44pij
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS
|
MD5:
653496689ed3abc558de4eca29d05ac3
SHA1:
ef503679742fc5ccce205fdb6d482ed2ff3c7e3c
SHA256:
3181fd82ae2007748320ad2d99ffd4923406ad864257aa89604f15889f199ef6
SSDeep:
24576:QIbUWwGqywx1TnO/faPRrBJPnSLqY+rgC4qf8sme+:QIbUWjDw7O/UeL0eqUF1
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS.spyhunter
|
MD5:
653496689ed3abc558de4eca29d05ac3
SHA1:
ef503679742fc5ccce205fdb6d482ed2ff3c7e3c
SHA256:
3181fd82ae2007748320ad2d99ffd4923406ad864257aa89604f15889f199ef6
SSDeep:
24576:QIbUWwGqywx1TnO/faPRrBJPnSLqY+rgC4qf8sme+:QIbUWjDw7O/UeL0eqUF1
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX
|
MD5:
15d792867739f476ec9b9dff7e176fcf
SHA1:
121ec96798824ecb1e8c2b427975af5805cec89e
SHA256:
a009545d0b28e45b8e4324c5a2e42a2d3431a1a98036a39d9412b5b48b8872e3
SSDeep:
12288:eoZZLNBBpU2LWmsNQuiIIBuRZy0KvUt/Rm3+mUQNaidUj4W9pX:eIZDpUxrlXZy0btJm3BHEo2X
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX.spyhunter
|
MD5:
15d792867739f476ec9b9dff7e176fcf
SHA1:
121ec96798824ecb1e8c2b427975af5805cec89e
SHA256:
a009545d0b28e45b8e4324c5a2e42a2d3431a1a98036a39d9412b5b48b8872e3
SSDeep:
12288:eoZZLNBBpU2LWmsNQuiIIBuRZy0KvUt/Rm3+mUQNaidUj4W9pX:eIZDpUxrlXZy0btJm3BHEo2X
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS
|
MD5:
79aedec6f288b40ff4f9e0606c054ac0
SHA1:
b71a736032808313a7094042222699d3d35c35e2
SHA256:
5ad9f996d7ed12879f124d1f32f03ef4211e1cbfd71238e2db9668e98e45ebbe
SSDeep:
24576:o4nHDFqMt8YONscreHzHuzAfBkhUKnImhyoZL3PkTHqaUQYkwlsrmXjAoQEF/duc:FHDFqdYONNeDuzApkhUYIHoV3POFUQw/
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS.spyhunter
|
MD5:
79aedec6f288b40ff4f9e0606c054ac0
SHA1:
b71a736032808313a7094042222699d3d35c35e2
SHA256:
5ad9f996d7ed12879f124d1f32f03ef4211e1cbfd71238e2db9668e98e45ebbe
SSDeep:
24576:o4nHDFqMt8YONscreHzHuzAfBkhUKnImhyoZL3PkTHqaUQYkwlsrmXjAoQEF/duc:FHDFqdYONNeDuzApkhUYIHoV3POFUQw/
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.DLL
|
MD5:
8712b6dd7acde77d0ca8962c2fff59ad
SHA1:
c495080118641ef242ed70fda33a4776d3cbf990
SHA256:
2c8779884a822daf8905c58f8ac03d99af434441afe187620f6c0763111d751f
SSDeep:
3072:MDxniVxZ0r3vBuC3UEgybZfXwSCLX1zSqgIUW2N58J:knCoroC3U/MxXZCLX1zbgI528J
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.DLL.spyhunter
|
MD5:
8712b6dd7acde77d0ca8962c2fff59ad
SHA1:
c495080118641ef242ed70fda33a4776d3cbf990
SHA256:
2c8779884a822daf8905c58f8ac03d99af434441afe187620f6c0763111d751f
SSDeep:
3072:MDxniVxZ0r3vBuC3UEgybZfXwSCLX1zSqgIUW2N58J:knCoroC3U/MxXZCLX1zbgI528J
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS
|
MD5:
cf73ac54e4037b3edd040a92608ca30b
SHA1:
c74e7fc4ed735c6ae20a75070abb11d6a48a56eb
SHA256:
586d39771ee822b8791e84b83197fb2a159fd5b28d4702776bd4d99a8225af64
SSDeep:
24576:QFdvU44SXjoReeW+gTtIlDDYilCdIJcVp9D:WvU44SXjon2tI98XSmH9D
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS.spyhunter
|
MD5:
cf73ac54e4037b3edd040a92608ca30b
SHA1:
c74e7fc4ed735c6ae20a75070abb11d6a48a56eb
SHA256:
586d39771ee822b8791e84b83197fb2a159fd5b28d4702776bd4d99a8225af64
SSDeep:
24576:QFdvU44SXjoReeW+gTtIlDDYilCdIJcVp9D:WvU44SXjon2tI98XSmH9D
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX
|
MD5:
5bea008007a2a15112c4d0ef24f368e9
SHA1:
72d666e8b176902c93f09356051387574229a9a0
SHA256:
5315f222833481517aa0089a1d520e8d142bb3175c95abb39f99ba93439ab4d0
SSDeep:
12288:+faF+hGPOEmdFrGt9rNcIlLUI9puhhVwBDvjVhcj:+facwGEmdFrwrqIlbpuzsdhY
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX.spyhunter
|
MD5:
5bea008007a2a15112c4d0ef24f368e9
SHA1:
72d666e8b176902c93f09356051387574229a9a0
SHA256:
5315f222833481517aa0089a1d520e8d142bb3175c95abb39f99ba93439ab4d0
SSDeep:
12288:+faF+hGPOEmdFrGt9rNcIlLUI9puhhVwBDvjVhcj:+facwGEmdFrwrqIlbpuzsdhY
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX
|
MD5:
648252ef2c3ddd420acaa10f1e67f62f
SHA1:
41f41376a0c084395a96158bf4eb58e5d512ac68
SHA256:
edd33e346c99c7d8264656753d452661138f6e62b80345fa1e1f26cab322e0d6
SSDeep:
24576:JOyWC8CQCJC8Cy1XULEeJL3fpPp+qM3ZHDwV:6TJLRnM3ZHDwV
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.spyhunter
|
MD5:
648252ef2c3ddd420acaa10f1e67f62f
SHA1:
41f41376a0c084395a96158bf4eb58e5d512ac68
SHA256:
edd33e346c99c7d8264656753d452661138f6e62b80345fa1e1f26cab322e0d6
SSDeep:
24576:JOyWC8CQCJC8Cy1XULEeJL3fpPp+qM3ZHDwV:6TJLRnM3ZHDwV
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX
|
MD5:
a3682bc682d8f74e5fdbf94e3333946b
SHA1:
c278aebe3de8a946ed7cd18d165c42387dba08fc
SHA256:
9a3b897a17938e9a6efa353e3008cf368920df985d5ff5213db9eebd51328267
SSDeep:
24:uF1Fx6KAJfKHA+9QqC6o4Muq3Vf3JBiRf+XsdPJfGMWp7v/BE+5jPeqj:01X6EkL5uqFiRdBfGRTlj
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX.spyhunter
|
MD5:
a3682bc682d8f74e5fdbf94e3333946b
SHA1:
c278aebe3de8a946ed7cd18d165c42387dba08fc
SHA256:
9a3b897a17938e9a6efa353e3008cf368920df985d5ff5213db9eebd51328267
SSDeep:
24:uF1Fx6KAJfKHA+9QqC6o4Muq3Vf3JBiRf+XsdPJfGMWp7v/BE+5jPeqj:01X6EkL5uqFiRdBfGRTlj
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL
|
MD5:
d789fe1f3c9b50cbc219e44a6db99dd9
SHA1:
9f7b5894c017ddb08fbc28e1cefe333e08bed4de
SHA256:
384e2fff70fdda237c817eabb2b02cf81e456e18e8994442ceefe24d41c6010f
SSDeep:
3072:n59ibUhePAA7PvHakMcCXEn/PM/4KCqeTXHS40dOcyjRn4d6UKc95F:n29FL0dOcyFn5ML
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.spyhunter
|
MD5:
d789fe1f3c9b50cbc219e44a6db99dd9
SHA1:
9f7b5894c017ddb08fbc28e1cefe333e08bed4de
SHA256:
384e2fff70fdda237c817eabb2b02cf81e456e18e8994442ceefe24d41c6010f
SSDeep:
3072:n59ibUhePAA7PvHakMcCXEn/PM/4KCqeTXHS40dOcyjRn4d6UKc95F:n29FL0dOcyFn5ML
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL
|
MD5:
de022a5b0754ba5c2d47cbd53c62083a
SHA1:
fd6b6282fb640ce54a0b9ea47b09ad5b2331c92e
SHA256:
dda93f6e52a14cadad69e08fbdfc3591a282448f9dd47d11882e3ef1befdcea9
SSDeep:
6144:Wrw1/Yix1TGqcvRlJaZgaNpXC2fqN+qju5oxM:4w1gm1TGTrJaBX5xiM
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL.spyhunter
|
MD5:
de022a5b0754ba5c2d47cbd53c62083a
SHA1:
fd6b6282fb640ce54a0b9ea47b09ad5b2331c92e
SHA256:
dda93f6e52a14cadad69e08fbdfc3591a282448f9dd47d11882e3ef1befdcea9
SSDeep:
6144:Wrw1/Yix1TGqcvRlJaZgaNpXC2fqN+qju5oxM:4w1gm1TGTrJaBX5xiM
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL
|
MD5:
e33b8e262d4111389a3536008176aec7
SHA1:
5455881b4226f1e97fb0cf0463d1b875497d7f0b
SHA256:
392f0b43c672d760c29c2c5aa5cc44c732f3d90ef88bcb8ef1dd3480f024e87d
SSDeep:
1536:RnzqPaygEJcPSguPZunE/ELivYelSoFIvtGO2fTBY9tleX95K:RuParAvPZunbeYelSoF4tGO2f1Y9aX94
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL.spyhunter
|
MD5:
e33b8e262d4111389a3536008176aec7
SHA1:
5455881b4226f1e97fb0cf0463d1b875497d7f0b
SHA256:
392f0b43c672d760c29c2c5aa5cc44c732f3d90ef88bcb8ef1dd3480f024e87d
SSDeep:
1536:RnzqPaygEJcPSguPZunE/ELivYelSoFIvtGO2fTBY9tleX95K:RuParAvPZunbeYelSoF4tGO2f1Y9aX94
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL
|
MD5:
09c16332ff5482f2cd8a551f429819ed
SHA1:
76bf610316ffe8fbf6d4573a776e725cc703b5ff
SHA256:
c6fdce25dcf1a592307a59a54d64f57c564ed079963bfad5bbda397eba41f468
SSDeep:
3072:e5BTZlDf39NYR35OKmCgcTwl4R1px3O5Sm0d5empTzghYlDnThqmjHj1Ox1QYYtt:Gl8A4Nd5empT8hYlDnThqm31PuZhMsZG
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL.spyhunter
|
MD5:
09c16332ff5482f2cd8a551f429819ed
SHA1:
76bf610316ffe8fbf6d4573a776e725cc703b5ff
SHA256:
c6fdce25dcf1a592307a59a54d64f57c564ed079963bfad5bbda397eba41f468
SSDeep:
3072:e5BTZlDf39NYR35OKmCgcTwl4R1px3O5Sm0d5empTzghYlDnThqmjHj1Ox1QYYtt:Gl8A4Nd5empT8hYlDnThqm31PuZhMsZG
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Triedit\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM
|
MD5:
a8ff596eee689a2d0724aa5622084e91
SHA1:
6cb8760fef344c401e14ff04f9499d58149c786f
SHA256:
d576360d70d376dc8fc70ac4c85a4c77e35e0d2338b73c29318fe7c1b17f9dca
SSDeep:
6144:W/iCjekFDEFycCdSHbOXHOeV2IWYLXlB5cUC5M+YLhee1D6ihIxfwGvdnK:fCje+sASHbKVPpNxhLheeD6g1KdK
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.spyhunter
|
MD5:
a8ff596eee689a2d0724aa5622084e91
SHA1:
6cb8760fef344c401e14ff04f9499d58149c786f
SHA256:
d576360d70d376dc8fc70ac4c85a4c77e35e0d2338b73c29318fe7c1b17f9dca
SSDeep:
6144:W/iCjekFDEFycCdSHbOXHOeV2IWYLXlB5cUC5M+YLhee1D6ihIxfwGvdnK:fCje+sASHbKVPpNxhLheeD6g1KdK
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM
|
MD5:
fced9bcc4cef795282830d110594f714
SHA1:
bbb2ec9b3f91cf4489fd0c63d8f26ce073b7d632
SHA256:
4217bd2208b739e2141d2a75102cdd844dc5d042b58bf1d0b588e6a6731813cf
SSDeep:
3072:xfQbi1r2WP1+K5+J/0IFzYRj7idUHOrpLzt9AIP/rA:xfmQKWP13g0Tj7zkLzt9bE
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.spyhunter
|
MD5:
fced9bcc4cef795282830d110594f714
SHA1:
bbb2ec9b3f91cf4489fd0c63d8f26ce073b7d632
SHA256:
4217bd2208b739e2141d2a75102cdd844dc5d042b58bf1d0b588e6a6731813cf
SSDeep:
3072:xfQbi1r2WP1+K5+J/0IFzYRj7idUHOrpLzt9AIP/rA:xfmQKWP13g0Tj7zkLzt9bE
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL
|
MD5:
40594350c16a0d996293213e4bdba4d4
SHA1:
94f1b00ef92f90e912c9c062b836cd4c710b1ebc
SHA256:
a89d011508c72ff1ecb6536d5e1845a0b392b12b7f19c262a8ef286744084d5c
SSDeep:
3072:VfMMqowMvjAJf/AX75PeaeEEXVpAMD5NiFmPKVHnopxLW05RJCcZ3BM95c:ZMDMgoXslG0N8m
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL.spyhunter
|
MD5:
40594350c16a0d996293213e4bdba4d4
SHA1:
94f1b00ef92f90e912c9c062b836cd4c710b1ebc
SHA256:
a89d011508c72ff1ecb6536d5e1845a0b392b12b7f19c262a8ef286744084d5c
SSDeep:
3072:VfMMqowMvjAJf/AX75PeaeEEXVpAMD5NiFmPKVHnopxLW05RJCcZ3BM95c:ZMDMgoXslG0N8m
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM
|
MD5:
0732b8bd80a6f3e4e2e3fd38d00dd163
SHA1:
3410a335ac14a57bf7e778ca3533a72a1b29406d
SHA256:
50313e557bfe79de8b0acc9e24e23caaef5f2698eb431c3146b39b07c5d44de7
SSDeep:
1536:PH+P2ngRSh+p9rJXAUVvqH5PAQhFWZWJBug1zX2XBw83smm74g:PPGnrJXAgvCJAUWZw7d2x3tmr
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.spyhunter
|
MD5:
0732b8bd80a6f3e4e2e3fd38d00dd163
SHA1:
3410a335ac14a57bf7e778ca3533a72a1b29406d
SHA256:
50313e557bfe79de8b0acc9e24e23caaef5f2698eb431c3146b39b07c5d44de7
SSDeep:
1536:PH+P2ngRSh+p9rJXAUVvqH5PAQhFWZWJBug1zX2XBw83smm74g:PPGnrJXAgvCJAUWZw7d2x3tmr
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM
|
MD5:
97dce6dfb5ab51490fdea69d3901fb81
SHA1:
a8878b4b85566e2a78826144f5f638d7b63eebfa
SHA256:
5dc47b5a58c14bcf168202c3232254cb744bfe9b9671a51aeeb60947a1de35df
SSDeep:
1536:b6pw/tkns0AR4DjDWkMcmItHSrC368VL+B:b6C+jDQWkC3uB
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.spyhunter
|
MD5:
97dce6dfb5ab51490fdea69d3901fb81
SHA1:
a8878b4b85566e2a78826144f5f638d7b63eebfa
SHA256:
5dc47b5a58c14bcf168202c3232254cb744bfe9b9671a51aeeb60947a1de35df
SSDeep:
1536:b6pw/tkns0AR4DjDWkMcmItHSrC368VL+B:b6C+jDQWkC3uB
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM
|
MD5:
2478eeb1cee95d5fe8be4d557b076696
SHA1:
ccdc10967e66d843fd87ed49f5fb56f91cc6eb7d
SHA256:
c2b6b4f04e7fcca762a6dcac24e6c960a03f98daa2314c702c40b33a2410c4f3
SSDeep:
24576:W8SLY1r4snoHaFH28EB4nTDnBGue2uaZjFkncfgPwuVPyDS:hfXCal2L4veraP3gPwuVPH
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.spyhunter
|
MD5:
2478eeb1cee95d5fe8be4d557b076696
SHA1:
ccdc10967e66d843fd87ed49f5fb56f91cc6eb7d
SHA256:
c2b6b4f04e7fcca762a6dcac24e6c960a03f98daa2314c702c40b33a2410c4f3
SSDeep:
24576:W8SLY1r4snoHaFH28EB4nTDnBGue2uaZjFkncfgPwuVPyDS:hfXCal2L4veraP3gPwuVPH
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM
|
MD5:
6c2a7fec416c5ebe9af9e5d000b510d1
SHA1:
13f10a3e0574165fbf477785ffcafdd08678805b
SHA256:
2a63d3c31f903e6ccacf8b9e288d3b478d0753573ac9a7c0bc3849a7258c463a
SSDeep:
3072:lsJcCgEMladkzNUnHH9Vcr4Go862RIF49wTUYQ2:JEeXNmcrm86D49wT5Q2
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.spyhunter
|
MD5:
6c2a7fec416c5ebe9af9e5d000b510d1
SHA1:
13f10a3e0574165fbf477785ffcafdd08678805b
SHA256:
2a63d3c31f903e6ccacf8b9e288d3b478d0753573ac9a7c0bc3849a7258c463a
SSDeep:
3072:lsJcCgEMladkzNUnHH9Vcr4Go862RIF49wTUYQ2:JEeXNmcrm86D49wT5Q2
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM
|
MD5:
8c65cddbbbfb3b63eb7a91af8680e6bf
SHA1:
e250e8dd8c921209e1c2dc6062ce290e4c338faa
SHA256:
553a3f6588db07518fad5989fe945c38d93c74febb27ed7f555bd556d9c546c3
SSDeep:
12288:13kgrSLv0wJYyWrIbcv3sI7EJwDQSXO01INP:10grA0R+cfsMEJwDQSXkNP
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.spyhunter
|
MD5:
8c65cddbbbfb3b63eb7a91af8680e6bf
SHA1:
e250e8dd8c921209e1c2dc6062ce290e4c338faa
SHA256:
553a3f6588db07518fad5989fe945c38d93c74febb27ed7f555bd556d9c546c3
SSDeep:
12288:13kgrSLv0wJYyWrIbcv3sI7EJwDQSXO01INP:10grA0R+cfsMEJwDQSXkNP
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL
|
MD5:
b3c2bb81428559e0dd008b6ff907a8ee
SHA1:
aa98f18366b0332bc7a6dfad915416f9e4b9ecd2
SHA256:
9e6835ce8d7c8a35073bdc86774e1e09cdf48a68c2131b7e9e427089f9ec9406
SSDeep:
49152:VfKMeBz7SRz3ch/uSYSzDdd17yYPDvRvB4g0ADVun4/ZT/J3PIW4:VWThzvrPVuneBPIL
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\VBE7.DLL.spyhunter
|
MD5:
b3c2bb81428559e0dd008b6ff907a8ee
SHA1:
aa98f18366b0332bc7a6dfad915416f9e4b9ecd2
SHA256:
9e6835ce8d7c8a35073bdc86774e1e09cdf48a68c2131b7e9e427089f9ec9406
SSDeep:
49152:VfKMeBz7SRz3ch/uSYSzDdd17yYPDvRvB4g0ADVun4/ZT/J3PIW4:VWThzvrPVuneBPIL
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VC\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll
|
MD5:
8c4dc4b980e6bbe13dec83e6ad5c72a9
SHA1:
5b6f72e864bdd061bb7ff4fe3e7a2bf577945f41
SHA256:
cfa459bdd7277f0d595b142ae93f9709f09808635e332691c56f8c1594ec7584
SSDeep:
12288:oc2YwE7VSxeUMUCcTd8Ht4lYyF2f78oyoMZggTSN:P2DE7oxeUXfaHtkYZjiQg2N
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.spyhunter
|
MD5:
8c4dc4b980e6bbe13dec83e6ad5c72a9
SHA1:
5b6f72e864bdd061bb7ff4fe3e7a2bf577945f41
SHA256:
cfa459bdd7277f0d595b142ae93f9709f09808635e332691c56f8c1594ec7584
SSDeep:
12288:oc2YwE7VSxeUMUCcTd8Ht4lYyF2f78oyoMZggTSN:P2DE7oxeUXfaHtkYZjiQg2N
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll
|
MD5:
acfea5b052a271dcf5b6d0a16d1380f5
SHA1:
4d7a81a16eb54184dd1b791b09323cfe1e1f53e3
SHA256:
bcdb798854941fac46b87a769114f13ec6e5691c187c17580db85f8c26f07e7f
SSDeep:
12288:QtBtFaU5q0DXe3vz9GvVoXMl9UE3YzYgyAAX3A+:QpJ9re3vz9G9oXc9j3rX3A+
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll.spyhunter
|
MD5:
acfea5b052a271dcf5b6d0a16d1380f5
SHA1:
4d7a81a16eb54184dd1b791b09323cfe1e1f53e3
SHA256:
bcdb798854941fac46b87a769114f13ec6e5691c187c17580db85f8c26f07e7f
SSDeep:
12288:QtBtFaU5q0DXe3vz9GvVoXMl9UE3YzYgyAAX3A+:QpJ9re3vz9G9oXc9j3rX3A+
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VGX\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX
|
MD5:
0bf10f4957b1979271c4a1a60babee18
SHA1:
c8501be18e6dfff2645437f71d5285b9b9ac89ac
SHA256:
42b59b97754f7e2d7230d96be9e8a8dbdf754046095036a6743776ec2549bd7d
SSDeep:
3072:IvRCpr9UO8gmF005x7WXCWawuHk5FvoM6CgUzImj+TtYb3gAcsouq8+WbiXGmQGz:McUuiNhkvBPgUV+6EAcsozJWda
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX.spyhunter
|
MD5:
0bf10f4957b1979271c4a1a60babee18
SHA1:
c8501be18e6dfff2645437f71d5285b9b9ac89ac
SHA256:
42b59b97754f7e2d7230d96be9e8a8dbdf754046095036a6743776ec2549bd7d
SSDeep:
3072:IvRCpr9UO8gmF005x7WXCWawuHk5FvoM6CgUzImj+TtYb3gAcsouq8+WbiXGmQGz:McUuiNhkvBPgUV+6EAcsozJWda
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX
|
MD5:
f339f26ccc36bdc6f174b060f2563e45
SHA1:
285c506ff1328dd6a0bd5385a31d6b64b192e78b
SHA256:
8bb8f16a889eff39135212dfacde1ce56f192b479f0dd0fd83b3a41554370d04
SSDeep:
12288:TTyT8oGb3jBDqXUTXlRFHT7xKmMWRKMXYOdZL0dHEWcDqhR:aTCbYY39tzYrak
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX.spyhunter
|
MD5:
f339f26ccc36bdc6f174b060f2563e45
SHA1:
285c506ff1328dd6a0bd5385a31d6b64b192e78b
SHA256:
8bb8f16a889eff39135212dfacde1ce56f192b479f0dd0fd83b3a41554370d04
SSDeep:
12288:TTyT8oGb3jBDqXUTXlRFHT7xKmMWRKMXYOdZL0dHEWcDqhR:aTCbYY39tzYrak
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX
|
MD5:
7e181df42304b0622a88b6ad339f5669
SHA1:
75d76a76cb4b56e619144b9036304b5e7351a4a0
SHA256:
4bf4782fc9fe68a90ecaf62f555aaf495c6298d8ab3c293bf7fb66d0a6fc0111
SSDeep:
6144:ESFD3vJEUcRh7Q3u6aUAearitYNHxY7gfvrs:ESFCUI0RYNCqA
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX.spyhunter
|
MD5:
7e181df42304b0622a88b6ad339f5669
SHA1:
75d76a76cb4b56e619144b9036304b5e7351a4a0
SHA256:
4bf4782fc9fe68a90ecaf62f555aaf495c6298d8ab3c293bf7fb66d0a6fc0111
SSDeep:
6144:ESFD3vJEUcRh7Q3u6aUAearitYNHxY7gfvrs:ESFCUI0RYNCqA
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX
|
MD5:
afe2007f14f4ccad9c370648b01f70db
SHA1:
44b81aa8a4f69a88965cfe54bb90b4dfa0dd2aad
SHA256:
8f54d47a54337771af6a39a35b771cc3f67916818ffcac452c18a0de7b5e99ed
SSDeep:
24576:rp1Hy3pahq5DNaG+RRvXMvJv+m74yycWWTGxJEri8O:rjyEhs8G+vvXAV+w5WWTuJj8O
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX.spyhunter
|
MD5:
afe2007f14f4ccad9c370648b01f70db
SHA1:
44b81aa8a4f69a88965cfe54bb90b4dfa0dd2aad
SHA256:
8f54d47a54337771af6a39a35b771cc3f67916818ffcac452c18a0de7b5e99ed
SSDeep:
24576:rp1Hy3pahq5DNaG+RRvXMvJv+m74yycWWTGxJEri8O:rjyEhs8G+vvXAV+w5WWTuJj8O
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\IC-TXT.SHX
|
MD5:
5536c2541a32053750de605a600a816e
SHA1:
cd962d3cedf3a5cbc1f881c96ff93d06a6bc4b08
SHA256:
4bd1f3f6ad7fea4b88edca59efe33aaa8e9b08e77fa9642e1e92c42b2138bc0d
SSDeep:
192:brbxdA5HA7rcKu+0UibtNgxBol5yVabFWZmqvXMI0gwyLDSQjdZ5+FvU+:7raIrh0u06abIkgF9T+a+
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\IC-TXT.SHX.spyhunter
|
MD5:
5536c2541a32053750de605a600a816e
SHA1:
cd962d3cedf3a5cbc1f881c96ff93d06a6bc4b08
SHA256:
4bd1f3f6ad7fea4b88edca59efe33aaa8e9b08e77fa9642e1e92c42b2138bc0d
SSDeep:
192:brbxdA5HA7rcKu+0UibtNgxBol5yVabFWZmqvXMI0gwyLDSQjdZ5+FvU+:7raIrh0u06abIkgF9T+a+
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP
|
MD5:
02a0ace4920341731d3280f106119b94
SHA1:
b22e4f9dac987bc15ca66b598f155fca5b032ff9
SHA256:
f045080e4e9d9ce92720781105252bf3fc8da5285c745a0060015ec0a351c18f
SSDeep:
6:8sHy+9xxKr1ZtbCCZi49h202aBSOEtJNurujOO5fz1tVFZzJ3sf3Ebc5jJR:8szchZBCCYiM6SOEtDuruZ13XUDD
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP.spyhunter
|
MD5:
02a0ace4920341731d3280f106119b94
SHA1:
b22e4f9dac987bc15ca66b598f155fca5b032ff9
SHA256:
f045080e4e9d9ce92720781105252bf3fc8da5285c745a0060015ec0a351c18f
SSDeep:
6:8sHy+9xxKr1ZtbCCZi49h202aBSOEtJNurujOO5fz1tVFZzJ3sf3Ebc5jJR:8szchZBCCYiM6SOEtDuruZ13XUDD
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX
|
MD5:
a300443f9b530d77b1afed2a336dead9
SHA1:
e5a76d6069232b5bcbab60ab2d8d055fe8c77ec0
SHA256:
d4c81917a0d2f1fd8a3469bb8f2dc2e5439ba9d9f7c0bdc0497a8246dee01a42
SSDeep:
3072:DwBqExvf4KVrhLc1Or0PD4+LdkVu1EJBLaIvoBDeSF7HBt0Le/Stwdcio+:DwB3l4KVrhY1k07hdQfDvo6+
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX.spyhunter
|
MD5:
a300443f9b530d77b1afed2a336dead9
SHA1:
e5a76d6069232b5bcbab60ab2d8d055fe8c77ec0
SHA256:
d4c81917a0d2f1fd8a3469bb8f2dc2e5439ba9d9f7c0bdc0497a8246dee01a42
SSDeep:
3072:DwBqExvf4KVrhLc1Or0PD4+LdkVu1EJBLaIvoBDeSF7HBt0Le/Stwdcio+:DwB3l4KVrhY1k07hdQfDvo6+
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGTXT.SHX
|
MD5:
4737cc4b9d3c583950fee5a5c8498c4f
SHA1:
80b91b17c4eb8052a41fd2e25e31172066942112
SHA256:
61966ab0cfa0cb49c1e9ea63494fdc3db6971479ea8c18e1f5875ad9774d91fc
SSDeep:
3072:Admn1iM45YP94091NdlcJZPVU7cQ00x8KrIcNIgNIsJTN0rpQdQ1ZJYUpjNkwN6Q:8M1945YP94091NdlcJZPVU7cQ00x8Kr2
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGTXT.SHX.spyhunter
|
MD5:
4737cc4b9d3c583950fee5a5c8498c4f
SHA1:
80b91b17c4eb8052a41fd2e25e31172066942112
SHA256:
61966ab0cfa0cb49c1e9ea63494fdc3db6971479ea8c18e1f5875ad9774d91fc
SSDeep:
3072:Admn1iM45YP94091NdlcJZPVU7cQ00x8KrIcNIgNIsJTN0rpQdQ1ZJYUpjNkwN6Q:8M1945YP94091NdlcJZPVU7cQ00x8Kr2
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX
|
MD5:
1b8ea46f081482d4b24bba9c4821793c
SHA1:
5f20ec339f35800f6a0438a9db8efdbfcdb26f7b
SHA256:
977738fa24c7e2ce9322714dd1705b145eccb8e5d7ccbc5211535a33fa720860
SSDeep:
12288:sRhrIrywxGE4obHoaUFNuGGooENADAHWLi10nLdEE5:sRhrIGwxKo/USoXNAMWY0nLdb
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX.spyhunter
|
MD5:
1b8ea46f081482d4b24bba9c4821793c
SHA1:
5f20ec339f35800f6a0438a9db8efdbfcdb26f7b
SHA256:
977738fa24c7e2ce9322714dd1705b145eccb8e5d7ccbc5211535a33fa720860
SSDeep:
12288:sRhrIrywxGE4obHoaUFNuGGooENADAHWLi10nLdEE5:sRhrIGwxKo/USoXNAMWY0nLdb
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTMTXT.SHX
|
MD5:
e439886b8396db989d401add9cd84910
SHA1:
112068e25fb5ac6ef44992a71dd8cb77fc12172f
SHA256:
7694437a4b0ff13e85c2bc804bf2573872a97af983922fa3a6e68bff764ee276
SSDeep:
12288:D6GEhuMndaTartzKhplUYFKvCZZTrxlk0EKthj7ojILELeYWvs1E:DOuMdltypuvGxm4thgIQ6vwE
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTMTXT.SHX.spyhunter
|
MD5:
e439886b8396db989d401add9cd84910
SHA1:
112068e25fb5ac6ef44992a71dd8cb77fc12172f
SHA256:
7694437a4b0ff13e85c2bc804bf2573872a97af983922fa3a6e68bff764ee276
SSDeep:
12288:D6GEhuMndaTartzKhplUYFKvCZZTrxlk0EKthj7ojILELeYWvs1E:DOuMdltypuvGxm4thgIQ6vwE
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll
|
MD5:
c01fd51f8a6a69f5f13c7f5538169dad
SHA1:
0e9bb29f36aaa5ccc60aabf0d429210264416d46
SHA256:
135c54fa2d7872102c3507b6f7ff0c45f5329bb9854d0a31b7a1a8726e18db9c
SSDeep:
192:pLV08+E7n8DZbzHpgSIrnhArQe9rKpkNYAwODEjB98gnJX3Pkx0qQLcdIvjhn/kc:P08+EYDXgbnhKt9+pkeAwOD8B7JX3k0p
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll.spyhunter
|
MD5:
c01fd51f8a6a69f5f13c7f5538169dad
SHA1:
0e9bb29f36aaa5ccc60aabf0d429210264416d46
SHA256:
135c54fa2d7872102c3507b6f7ff0c45f5329bb9854d0a31b7a1a8726e18db9c
SSDeep:
192:pLV08+E7n8DZbzHpgSIrnhArQe9rKpkNYAwODEjB98gnJX3Pkx0qQLcdIvjhn/kc:P08+EYDXgbnhKt9+pkeAwOD8B7JX3k0p
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
|
MD5:
b44f3a300136e239ba94995020317293
SHA1:
dd050a32e036af47babffb7e5a077ed36bc00dc2
SHA256:
86120c5cf76ee3ddadc8fcdfdeed146a5a68bcfb6b7977274ae4b6accdacc11d
SSDeep:
384:vnqQQnsKmSj7OqQVLuIaNbDGNaLNKgHLXci2jXHUkztv3:isKm+OpVLuI4bwGNxrMi2jXHU2J3
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll.spyhunter
|
MD5:
b44f3a300136e239ba94995020317293
SHA1:
dd050a32e036af47babffb7e5a077ed36bc00dc2
SHA256:
86120c5cf76ee3ddadc8fcdfdeed146a5a68bcfb6b7977274ae4b6accdacc11d
SSDeep:
384:vnqQQnsKmSj7OqQVLuIaNbDGNaLNKgHLXci2jXHUkztv3:isKm+OpVLuI4bwGNxrMi2jXHU2J3
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config
|
MD5:
e827abcd5cba94a6006b3976b5974188
SHA1:
ebe312d9a3b73b2a061c4bb37db618438dba302e
SHA256:
99df6d8ba390e770582bcb455ad4167a3101cd9e06101337b6f46708ae173bd5
SSDeep:
12:J8ig8xHz2yBwEymNzOqe1sZ6m1+tAGjR2OQw7WKET9TkAdogoikg5CcYqBTrXt2V:J8i5xBwEHH7Z6A+24oHAEThNoWf5hJrY
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.spyhunter
|
MD5:
e827abcd5cba94a6006b3976b5974188
SHA1:
ebe312d9a3b73b2a061c4bb37db618438dba302e
SHA256:
99df6d8ba390e770582bcb455ad4167a3101cd9e06101337b6f46708ae173bd5
SSDeep:
12:J8ig8xHz2yBwEymNzOqe1sZ6m1+tAGjR2OQw7WKET9TkAdogoikg5CcYqBTrXt2V:J8i5xBwEHH7Z6A+24oHAEThNoWf5hJrY
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe
|
MD5:
a01096b7c1b5529c1e6a6a0355f9fa0e
SHA1:
02b10d9aec918dd261e9560f410bda7218a165e6
SHA256:
b0441f10b5544ccc58481d2281a43fae58de5121013339bd4e2856a9593d078b
SSDeep:
3072:NzzfyTE+XSTHwEmFvdbiK08GgmZBjuGkKgnpAkqesE950:tyAASbtm1dbi182iGNhere
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.spyhunter
|
MD5:
a01096b7c1b5529c1e6a6a0355f9fa0e
SHA1:
02b10d9aec918dd261e9560f410bda7218a165e6
SHA256:
b0441f10b5544ccc58481d2281a43fae58de5121013339bd4e2856a9593d078b
SSDeep:
3072:NzzfyTE+XSTHwEmFvdbiK08GgmZBjuGkKgnpAkqesE950:tyAASbtm1dbi182iGNhere
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
|
MD5:
1cc0729b12068800fc5322be10465049
SHA1:
e873743323be791febbf38910c55ce3d396846be
SHA256:
e0a0849aae8c08f545a8d39b93fb8ad8fed6750c32e05930b8edfdd15607e143
SSDeep:
6144:lWcmPqAE8Mki1/jHiURwF7tv1iE3PjctYKrO4ANn/E0iFs:w9rEDj/jHibP1/TLM0ia
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll.spyhunter
|
MD5:
1cc0729b12068800fc5322be10465049
SHA1:
e873743323be791febbf38910c55ce3d396846be
SHA256:
e0a0849aae8c08f545a8d39b93fb8ad8fed6750c32e05930b8edfdd15607e143
SSDeep:
6144:lWcmPqAE8Mki1/jHiURwF7tv1iE3PjctYKrO4ANn/E0iFs:w9rEDj/jHibP1/TLM0ia
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll
|
MD5:
b663c70145570cacaedb4dc76b790e3d
SHA1:
7f640f0a5510f195c0f376ef1586d9bd761f8a93
SHA256:
ba3bdeff170411667917a260cd61d03e39fbf03f48bee0d16e1f342c60012579
SSDeep:
768:CU6iIdPJphY3SXDhHAikazzuB5aTPvDwN4op/pJnV14QI48WAE8mfDLPMi2jpvF:CRrdPbhYYKikAO58PvDwN4cRJV1KYAE2
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll.spyhunter
|
MD5:
b663c70145570cacaedb4dc76b790e3d
SHA1:
7f640f0a5510f195c0f376ef1586d9bd761f8a93
SHA256:
ba3bdeff170411667917a260cd61d03e39fbf03f48bee0d16e1f342c60012579
SSDeep:
768:CU6iIdPJphY3SXDhHAikazzuB5aTPvDwN4op/pJnV14QI48WAE8mfDLPMi2jpvF:CRrdPbhYYKikAO58PvDwN4cRJV1KYAE2
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll
|
MD5:
db86e4d2ef170c8029edf7c50bc82ddb
SHA1:
d7e9e9d33afbe1e96b8f7253b5e2db1a76bc4f81
SHA256:
7da5476a0b1303f28676edabd485b1a3a9191bc6b64f9b6f92a7ab5ba3932ba8
SSDeep:
3072:Y2Z3kh84YdcbpzqKbsLZqbGrGn6pTMUeH3RtYxFilgVXpPXxppXTh95o:Y2ZNRdMVmsUGn6ponHzIRLi
ImpHash:
None
|
Access, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.spyhunter
|
MD5:
db86e4d2ef170c8029edf7c50bc82ddb
SHA1:
d7e9e9d33afbe1e96b8f7253b5e2db1a76bc4f81
SHA256:
7da5476a0b1303f28676edabd485b1a3a9191bc6b64f9b6f92a7ab5ba3932ba8
SSDeep:
3072:Y2Z3kh84YdcbpzqKbsLZqbGrGn6pTMUeH3RtYxFilgVXpPXxppXTh95o:Y2ZNRdMVmsUGn6ponHzIRLi
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee100.tlb
|
MD5:
1442251f783da14c87f6dae63bfba74e
SHA1:
265fa83d8e44a3a3d764ecf6beaf5b1a0108876f
SHA256:
40eb27193ccd500a69bc45bcff6faae83c45d6262ba74c787715024ea9b8c9c5
SSDeep:
384:k4QxFaJE+GKwX3Czlv+52fgCQkMu58LXci2jpv56:0dF3Chv+Efg9uCMi2jpv56
ImpHash:
None
|
Access, Read
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee100.tlb.spyhunter
|
MD5:
1442251f783da14c87f6dae63bfba74e
SHA1:
265fa83d8e44a3a3d764ecf6beaf5b1a0108876f
SHA256:
40eb27193ccd500a69bc45bcff6faae83c45d6262ba74c787715024ea9b8c9c5
SSDeep:
384:k4QxFaJE+GKwX3Czlv+52fgCQkMu58LXci2jpv56:0dF3Chv+Efg9uCMi2jpv56
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee90.tlb
|
MD5:
5e125b56aa64ae4e40b758a8977ad110
SHA1:
2c2a16ffcf44edefd52c5fa86c6b2d46fac5974b
SHA256:
85976d995c510798e53176e538f52398017b1c897a9b0121a8ed2b94c466cdb7
SSDeep:
384:0pBlQ+GARmuf8zKJ5DfYx59+K+k4mutF3mWmllI8WMy2GWzZLXci2jXHUsU:05WcLUzYVK+PmKFW82rdMi2jXHUsU
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee90.tlb.spyhunter
|
MD5:
5e125b56aa64ae4e40b758a8977ad110
SHA1:
2c2a16ffcf44edefd52c5fa86c6b2d46fac5974b
SHA256:
85976d995c510798e53176e538f52398017b1c897a9b0121a8ed2b94c466cdb7
SSDeep:
384:0pBlQ+GARmuf8zKJ5DfYx59+K+k4mutF3mWmllI8WMy2GWzZLXci2jXHUsU:05WcLUzYVK+PmKFW82rdMi2jXHUsU
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Folders\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL
|
MD5:
20c6235411a0db24f8679e45cc8c7987
SHA1:
4c17cc70a7953fb05bbf368996a39d8797c0b41e
SHA256:
3b333c3960b4168c6ddba58eedd26458477935366ce0482302cbd05e19f4073f
SSDeep:
192:V0EU7Yq3m+vTnmFb/eW/wrgeDug3xO2iwkA6UAhJXi9rhaOGz:VrU7JdbnASW/wia8y6zhJXIrdGz
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL.spyhunter
|
MD5:
20c6235411a0db24f8679e45cc8c7987
SHA1:
4c17cc70a7953fb05bbf368996a39d8797c0b41e
SHA256:
3b333c3960b4168c6ddba58eedd26458477935366ce0482302cbd05e19f4073f
SSDeep:
192:V0EU7Yq3m+vTnmFb/eW/wrgeDug3xO2iwkA6UAhJXi9rhaOGz:VrU7JdbnASW/wia8y6zhJXIrdGz
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Folders\MSOSV.DLL
|
MD5:
876f3325dee74aa2097c28e52cfc5610
SHA1:
218815ff8b6b169223bbd8b160fa569ed7078dc3
SHA256:
6292e1fb7918123e9cfbf7fc42034ebae70b1f0122f088afb2e3234f903ddd26
SSDeep:
768:8GH9IK6gHMmORaFYn52HHHHnG6FWympO+9nV71afV6JMi2jXHUZnx:NIK6gsReHHHHCpOcnV7Iw69rHUxx
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Folders\MSOSV.DLL.spyhunter
|
MD5:
876f3325dee74aa2097c28e52cfc5610
SHA1:
218815ff8b6b169223bbd8b160fa569ed7078dc3
SHA256:
6292e1fb7918123e9cfbf7fc42034ebae70b1f0122f088afb2e3234f903ddd26
SSDeep:
768:8GH9IK6gHMmORaFYn52HHHHnG6FWympO+9nV71afV6JMi2jXHUZnx:NIK6gsReHHHHCpOcnV7Iw69rHUxx
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG
|
MD5:
ab0f15f6f0f52549cf9104fc3c95775c
SHA1:
3e1c8ae81538e6b400c9dc3d0d4cbe40a1bd3262
SHA256:
daba82cfabdf7595cf94919312cb741e27c1e58ebd90659accb935aca662975b
SSDeep:
3072:Hyq9okmEhEIKkaYSRMo5BBXeeIiQbPiTe9IbIuQ4hfhqo/:HyVBXISRvenKCEhB/
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.spyhunter
|
MD5:
ab0f15f6f0f52549cf9104fc3c95775c
SHA1:
3e1c8ae81538e6b400c9dc3d0d4cbe40a1bd3262
SHA256:
daba82cfabdf7595cf94919312cb741e27c1e58ebd90659accb935aca662975b
SSDeep:
3072:Hyq9okmEhEIKkaYSRMo5BBXeeIiQbPiTe9IbIuQ4hfhqo/:HyVBXISRvenKCEhB/
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL
|
MD5:
7521e0afa38c09f08279539c8daf0ac3
SHA1:
ec6b8a96523f137d60af02f586f0d4a615ad0a9a
SHA256:
be1fdc4e8d4955c68ec1647a5806b54c49f4203d014b5ad76438304ca98e0faf
SSDeep:
24576:mkta/4hS3Ql8tQmW+9HFoekIKg//efwTKCF6BSX5yCroe3Jt3rCytj3//Gl:mktwgliXW+XoZIl3efe0BIMe3/CI/g
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.spyhunter
|
MD5:
7521e0afa38c09f08279539c8daf0ac3
SHA1:
ec6b8a96523f137d60af02f586f0d4a615ad0a9a
SHA256:
be1fdc4e8d4955c68ec1647a5806b54c49f4203d014b5ad76438304ca98e0faf
SSDeep:
24576:mkta/4hS3Ql8tQmW+9HFoekIKg//efwTKCF6BSX5yCroe3Jt3rCytj3//Gl:mktwgliXW+XoZIl3efe0BIMe3/CI/g
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPWEC.DLL
|
MD5:
921436b0880d059c73fb97d7bfd62e89
SHA1:
b1b3aff5138eb18a294773f6cf5ce9fa686ecc79
SHA256:
4c35551c76832e65d3c11346bf964795d7a993e37a79102f528ac8f296e4cf0c
SSDeep:
24576:AoBZfj1vepTkloWG4ohNZr7nxLNjelaJrTaogH1:A0Zfj8RkloWJoxr7nJNjelykV
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPWEC.DLL.spyhunter
|
MD5:
921436b0880d059c73fb97d7bfd62e89
SHA1:
b1b3aff5138eb18a294773f6cf5ce9fa686ecc79
SHA256:
4c35551c76832e65d3c11346bf964795d7a993e37a79102f528ac8f296e4cf0c
SSDeep:
24576:AoBZfj1vepTkloWG4ohNZr7nxLNjelaJrTaogH1:A0Zfj8RkloWJoxr7nJNjelykV
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\Services\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\Services\verisign.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\$HOWDECRYPT$.txt
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\$HOWDECRYPT$.txt
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\$HOWDECRYPT$.txt
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\ado\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\ado\adojavas.inc
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\adovbs.inc
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msader15.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msado15.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msado20.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msado21.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msado25.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msado26.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msado27.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msado28.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msadomd.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msadomd28.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msador15.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msadox.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msadox28.tlb
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\ado\msadrh15.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\DirectDB.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\en-US\wab32res.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\msadc\adcjavas.inc
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\adcvbs.inc
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\handler.reg
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\handsafe.reg
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadce.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadcer.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadcf.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadcfr.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadco.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadcor.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadcs.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msadds.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msaddsr.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msdaprsr.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msdaprst.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msdarem.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msdaremr.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\msadc\msdfmap.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\MSMAPI\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\MSMAPI\1033\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\MSMAPI\1033\MSMAPI32.DLL
|
MD5:
d2e087849c9adc9f3a579e5d15cb5314
SHA1:
8c7770de6cb52556829f604f7d88b77c113189e6
SHA256:
1b2042c4b2d886233992c1901f6bc2e31eb0f4da849b8b4ad6ba894361f59568
SSDeep:
1536:K4h6s7NOi0m+HcvjxbqrCzQ8zuPd4Q9rHUeuL:K4hx7NGmwKjx2KzS4Q9oee
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\System\MSMAPI\1033\MSMAPI32.DLL.spyhunter
|
MD5:
d2e087849c9adc9f3a579e5d15cb5314
SHA1:
8c7770de6cb52556829f604f7d88b77c113189e6
SHA256:
1b2042c4b2d886233992c1901f6bc2e31eb0f4da849b8b4ad6ba894361f59568
SSDeep:
1536:K4h6s7NOi0m+HcvjxbqrCzQ8zuPd4Q9rHUeuL:K4hx7NGmwKjx2KzS4Q9oee
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\Ole DB\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\Ole DB\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\msdaosp.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\msdaps.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\msdasql.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\msdatl3.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\msxactps.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\oledb32.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\oledb32r.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\sqloledb.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\sqloledb.rll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\Ole DB\xmlrw.dll
|
MD5:
d4139717e1f1f8b010fda2482744eed3
SHA1:
fa3082c2098010c5dbc7261c8fb2aabea3e66b4b
SHA256:
be9b02ef609c9d0b10ae31ce24199179fd1bcb3d685530defbd4637ed2d2e4bd
SSDeep:
3072:uCc4XQQQsGyXSoYDxD39C1THORd1RB0sY6bioJ5Q1Q4qswcv2pLgX5HF8Cu1c:LZFQMZYDxj9AivWoJ4nqns3XDac
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\System\Ole DB\xmlrw.dll.spyhunter
|
MD5:
d4139717e1f1f8b010fda2482744eed3
SHA1:
fa3082c2098010c5dbc7261c8fb2aabea3e66b4b
SHA256:
be9b02ef609c9d0b10ae31ce24199179fd1bcb3d685530defbd4637ed2d2e4bd
SSDeep:
3072:uCc4XQQQsGyXSoYDxD39C1THORd1RB0sY6bioJ5Q1Q4qswcv2pLgX5HF8Cu1c:LZFQMZYDxj9AivWoJ4nqns3XDac
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\Ole DB\xmlrwbin.dll
|
MD5:
a246aee820027c1b2f36ab062191190c
SHA1:
79160d412bd9402581282521afd46cbc9c727b9e
SHA256:
995f4aca144337ffc64500e2de442521a174b0bccdf1f3d81670e5fb6c01c9ac
SSDeep:
3072:rAupKe5tCCTrXX2lcJgqhEfDF/ycVO1JhLyT6Osr38Cu1o:rkoTrXX2l6ODF/ZVEZOszao
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Common Files\System\Ole DB\xmlrwbin.dll.spyhunter
|
MD5:
a246aee820027c1b2f36ab062191190c
SHA1:
79160d412bd9402581282521afd46cbc9c727b9e
SHA256:
995f4aca144337ffc64500e2de442521a174b0bccdf1f3d81670e5fb6c01c9ac
SSDeep:
3072:rAupKe5tCCTrXX2lcJgqhEfDF/ycVO1JhLyT6Osr38Cu1o:rkoTrXX2l6ODF/ZVEZOszao
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Common Files\System\wab32.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Common Files\System\wab32res.dll
|
-
|
Access
|
|
\\?\C:\Program Files\desktop.ini
|
MD5:
3f1ac35c836f27327e95480af023f0d7
SHA1:
043e71721f79897eae177c29c95098d75184f3ed
SHA256:
7cd4ad0b8778a4c1caf246f43192e205172abcec7df13b23a89535e43f606f86
SSDeep:
6:elBadgyJFfaF33NeC+uhduMAtTXrUSo6QWhO:elBadggFm33NeCnhpyQh6QWw
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\desktop.ini.spyhunter
|
MD5:
3f1ac35c836f27327e95480af023f0d7
SHA1:
043e71721f79897eae177c29c95098d75184f3ed
SHA256:
7cd4ad0b8778a4c1caf246f43192e205172abcec7df13b23a89535e43f606f86
SSDeep:
6:elBadgyJFfaF33NeC+uhduMAtTXrUSo6QWhO:elBadggFm33NeCnhpyQh6QWw
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\audiodepthconverter.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\bod_r.TTF
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\directshowtap.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\DVDMaker.exe
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\en-US\DVDMaker.exe.mui
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\en-US\OmdProject.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Eurosti.TTF
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\fieldswitch.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\offset.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\OmdBase.dll
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\OmdProject.dll
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Pipeline.dll
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\PipeTran.dll
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\rtstreamsink.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\rtstreamsource.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\SecretST.TTF
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\$HOWDECRYPT$.txt
|
-
|
Access, Write
|
|
\\?\C:\Program Files\DVD Maker\Shared\Common.fxh
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DissolveAnother.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DissolveNoise.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Read, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-previous-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\Filters.xml
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\Shared\Parity.fx
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\soniccolorconverter.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\sonicsptransform.ax
|
-
|
Access
|
|
\\?\C:\Program Files\DVD Maker\WMM2CLIP.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Internet Explorer\en-US\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Internet Explorer\en-US\hmmapi.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\iedvtool.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\ielowutil.exe.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\jsdbgui.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\jsdebuggeride.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\JSProfilerCore.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\hmmapi.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\ie8props.propdesc
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\iecompat.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\iedvtool.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\ieinstal.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\ielowutil.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\ieproxy.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\IEShims.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\iexplore.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\jsdbgui.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\jsdebuggeride.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\JSProfilerCore.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\jsprofilerui.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\msdbg2.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\pdm.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\SIGNUP\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Internet Explorer\SIGNUP\install.ins
|
MD5:
b8e82d26383c0b0c5a0360c0c4bbd0f8
SHA1:
3a895598d69adfd4c906b5c6f6a0b1a00d1111e8
SHA256:
5144d0d8e3d04b6c1e62c400ea8c3d520663f83ca1e9912f5d8261a611ac0adf
SSDeep:
12:f+ydMoOLJP6Nw1UinkROnNXUEN7YZ7mO3emTsXvezzYs:fDMoOLl6e1lnSOZUi67RiezUs
ImpHash:
None
|
Access, Read, Write
|
Modified File
|
\\?\C:\Program Files\Internet Explorer\SIGNUP\install.ins.spyhunter
|
MD5:
b8e82d26383c0b0c5a0360c0c4bbd0f8
SHA1:
3a895598d69adfd4c906b5c6f6a0b1a00d1111e8
SHA256:
5144d0d8e3d04b6c1e62c400ea8c3d520663f83ca1e9912f5d8261a611ac0adf
SSDeep:
12:f+ydMoOLJP6Nw1UinkROnNXUEN7YZ7mO3emTsXvezzYs:fDMoOLl6e1lnSOZUi67RiezUs
ImpHash:
None
|
Access
|
Dropped File
|
\\?\C:\Program Files\Internet Explorer\sqmapi.dll
|
-
|
Access
|
|
\\?\C:\Program Files\Internet Explorer\strand.exe
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\$HOWDECRYPT$.txt
|
MD5:
ca6b9b77b2b60b1f793a925522b0422a
SHA1:
a5debb35c6add4efa47d37bdb60bc76e75d2299e
SHA256:
b621a0c4d061880aebdd1c9f76e0d85d7c41fabf5abf93ed62edc1c93224eb66
SSDeep:
24:zkkRhfvix/Jd66MwCAdmoUrTaAr0rAQOGxOws4M7gwNbmTOhVJxbF9dY:zXDsdJkAm3rTaXkpGxOv4M7gmVJ9a
ImpHash:
None
|
Access, Write
|
Dropped File
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\$HOWDECRYPT$.txt
|
-
|
Access, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\$HOWDECRYPT$.txt
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\$HOWDECRYPT$.txt
|
-
|
Access, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolui100.dll
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolui100.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\$HOWDECRYPT$.txt
|
-
|
Access, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\$HOWDECRYPT$.txt
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\$HOWDECRYPT$.txt
|
-
|
Access, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF
|
-
|
Access, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00685_.WMF
|
-
|
Access, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00685_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00343_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00343_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099149.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099149.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099180.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099180.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099181.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099181.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099182.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099182.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099183.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099183.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106208.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106208.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107426.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107426.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107446.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107446.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107480.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107480.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107484.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107484.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107488.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107488.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107490.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107490.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0144773.JPG
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0144773.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145168.JPG
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145168.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145212.JPG
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145212.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145272.JPG
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145272.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0146142.JPG
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0146142.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152716.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152716.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0158477.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0158477.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0171685.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0171685.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0171847.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0171847.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0183574.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0183574.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185670.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185670.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187881.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187881.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187883.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187883.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187893.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187893.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187895.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187895.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188587.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188587.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188667.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0188667.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02386_.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02386_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03453_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03453_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00610_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00610_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00942_.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00942_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01301_.GIF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01301_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL1.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL1.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL2.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WHIRL2.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING1.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING1.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING2.WMF
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WING2.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID
|
-
|
Access, Read, Write
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02077_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02077_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02082_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02082_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02085_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02085_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02097_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02097_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02106_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02106_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02116_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02116_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02134_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02134_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02187_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02187_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02198_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02198_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02201_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02201_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02214_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02214_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02218_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02218_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Perspective.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Perspective.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Pushpin.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Pushpin.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Slipstream.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Slipstream.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Solstice.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Solstice.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Technic.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Technic.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Thatch.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Thatch.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\$HOWDECRYPT$.txt
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\$HOWDECRYPT$.txt
|
-
|
Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Trek.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Trek.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Urban.thmx
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Urban.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Verve.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Verve.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Waveform.thmx
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Document Themes 14\Waveform.thmx.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0332364.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0332364.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0335112.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0335112.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0336075.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0336075.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18256_.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18256_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18257_.WMF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18257_.WMF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14532_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14532_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14533_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14533_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14565_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14565_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14578_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14578_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14579_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14579_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14580_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14580_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14581_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14581_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14582_.GIF
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14582_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14833_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14833_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14866_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14866_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14867_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14867_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14868_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14868_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14869_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14869_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14870_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14870_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14871_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14871_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14980_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14980_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14981_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14981_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14982_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14982_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15277_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15277_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21294_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21294_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21295_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21295_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21304_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21304_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21335_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21335_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21422_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21422_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21433_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21433_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21435_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21435_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21480_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21480_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21481_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21481_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21503_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21503_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21518_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21518_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21519_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21519_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21520_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21520_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21534_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21534_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115835.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115835.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115836.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115836.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115839.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115839.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115840.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115840.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115841.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115841.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115842.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115842.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115843.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115843.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115844.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115844.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115863.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115863.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115864.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115864.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115865.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115865.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115866.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115866.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115867.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115867.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115868.GIF
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115868.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15155_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15155_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15156_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15156_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15184_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15184_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15185_.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15185_.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OIS_K_COL.HXK.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OMSINTL.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHKEY.DAT
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHKEY.DAT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHLEX.DAT
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHLEX.DAT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHLTS.DAT
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHLTS.DAT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHPHN.DAT
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHPHN.DAT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHSRN.DAT
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PSRCHSRN.DAT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\PUBCOLOR.SCM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXC.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\VISIO_COL.HXT.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\XMLSDK5.CHM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\XMLSDK5.CHM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ACEDAO.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ACEDAO.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\BCSSync.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\BCSSync.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\bdcmetadata.xsd
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\bdcmetadata.xsd.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\bdcmetadataresource.xsd
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\bdcmetadataresource.xsd.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\CNFNOT32.EXE
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\CNFNOT32.EXE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\CODEEDIT.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\CODEEDIT.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\CONTAB32.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\CONTAB32.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ContactPicker.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ContactPicker.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\FACILITY.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\FACILITY.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\FORM.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\FORM.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GANTT.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GANTT.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GFX.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GFX.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GKExcel.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GKExcel.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GKPowerPoint.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GKPowerPoint.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GKWord.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GKWord.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GRAPH.EXE
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Graph.exe.manifest
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Graph.exe.manifest.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GRAPH.EXE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GRAPH.ICO
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\GRAPH.ICO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\SignedComponents.cer
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\SignedComponents.cer.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Management.cer
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Management.cer.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\RELAY.CER
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\RELAY.CER.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Code_Signing_2001-4_CA.cer
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VS_ComponentSigningIntermediate.cer
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VS_ComponentSigningIntermediate.cer.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\RADAR.WAV
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\RADAR.WAV.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\TOOT.WAV
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\TOOT.WAV.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\VIBE.WAV
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\VIBE.WAV.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\WARN.WAV
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places\WARN.WAV.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\SPLASH.WAV
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\SPLASH.WAV.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\WHOOSH.WAV
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things\WHOOSH.WAV.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SAVE.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SAVE.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SUBMIT.JS
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SUBMIT.JS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\utilityfunctions.js
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\utilityfunctions.js.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\validation.js
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\validation.js.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.ICO
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.ICO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.JS
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.JS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.JS
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.JS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageScript.js
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageScript.js.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageStyle.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageStyle.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsImageTemplate.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsImageTemplate.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsMacroTemplate.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsMacroTemplate.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Adobe.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Adobe.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GreenTea.css
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GreenTea.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\LightSpirit.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\LightSpirit.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\OliveGreen.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\OliveGreen.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate.css
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SlateBlue.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SlateBlue.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_OFF.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_OFF.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_ON.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_ON.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_OFF.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_OFF.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_ON.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_ON.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_disable.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_disable.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTBOX.JPG
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTBOX.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTVIEW.JPG
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTVIEW.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FORM.ICO
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FORM.ICO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBlankPage.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBlankPage.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsDoNotTrust.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsDoNotTrust.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePage.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePage.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageScript.js
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageScript.js.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.JS
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.JS.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEWBY.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEWBY.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewDblClick.js
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewDblClick.js.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIconsMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIconsMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIconMask.bmp
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIconMask.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\StatusOnline.ico
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\StatusOnline.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\TOOLICON.ICO
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\TOOLICON.ICO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\WSS.ICO
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\WSS.ICO.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\WSS_DocLib.ico
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\WSS_DocLib.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\HVAC.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\HVAC.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IEAWSDC.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IEAWSDC.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IEContentService.exe
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IEContentService.exe.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMCOMMON.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMCOMMON.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMDIMP.ADD
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMDIMP.ADD.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMPMAIL.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMPMAIL.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMUTIL.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMUTIL.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMWDD.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMWDD.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMWIZ.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\IMWIZ.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\INFOPATH.EXE
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\INFOPATH.EXE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\LOGMODEL.MDL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\LOGMODEL.MDL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\MEDCAT.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\MEDCAT.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Microsoft.BusinessData.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Microsoft.BusinessData.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ONBttnOL.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ONBttnOL.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ONBttnPPT.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ONBttnPPT.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ONBttnWD.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ONBttnWD.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE.MANIFEST
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE.MANIFEST.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.HK.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.HK.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IE.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IE.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IT.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IT.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.JP.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.JP.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.NO.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.NO.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.PL.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.PL.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.SE.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.SE.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLPH.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLPH.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLRPC.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLRPC.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLVBS.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\OUTLVBS.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PE.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PE.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROJIMPT.EXE
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROJIMPT.EXE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROJMODL.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROJMODL.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROOF\MSTH7FR.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROOF\MSTH7FR.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROOF\MSTH7FR.LEX
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROOF\MSTH7FR.LEX.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROPMGR.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROPMGR.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROPRPT.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PROPRPT.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PRTF9.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PRTF9.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PSTPRX32.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PSTPRX32.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PTXT9.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PTXT9.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB9.BDR
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB9.BDR.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBCONV.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBCONV.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBTRAP.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBTRAP.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCINFO.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGCINFO.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.DPV
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.DPV.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.XML
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.XML.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\FORM98.POC
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\FORM98.POC.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\FORMCTL.POC
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\FORMCTL.POC.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDBAR98.POC
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDBAR98.POC.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\SAVWBHF.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\SAVWBHF.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\SAVWBRAS.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\SAVWBRAS.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\SSGEN.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\SSGEN.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\VISICON.EXE
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\VISICON.EXE.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Office14\XPAGE3C.DLL
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Office14\XPAGE3C.DLL.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.JPG
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.JPG
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.JPG
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.JPG.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.GIF
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.GIF.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.HTM
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.HTM.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Charitable Contributions.accdt
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Charitable Contributions.accdt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Contacts.accdt
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Contacts.accdt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Issues.accdt
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Issues.accdt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Marketing Projects.accdt
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Marketing Projects.accdt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Northwind.accdt
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Office\Templates\1033\Access\Northwind.accdt.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\SynchronizationEula.rtf
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\SynchronizationEula.rtf.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\FeedSync.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\FeedSync.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\Microsoft.Synchronization.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\Microsoft.Synchronization.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources\1033\Synchronization.rll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources\1033\Synchronization.rll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\Synchronization.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\Synchronization.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.Server.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.Server.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.SqlServerCe.dll
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.SqlServerCe.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
|
-
|
Access
|
|
\\?\C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
|
-
|
Access, Read
|
|
\\?\C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.spyhunter
|
-
|
Access
|
|
\\?\C:\Program Files\Windows Sidebar\settings.ini
|
-
|
Access, Read
|
|
\\?\C:\Program Files\Windows Sidebar\settings.ini.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security\directories.acrodata.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO.DEV.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO.DEV.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO.SHAPESHEET.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO.SHAPESHEET.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO_PRM.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO_PRM.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO_STD.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.VISIO_STD.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINPROJ.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINPROJ.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINPROJ.DEV.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINPROJ.DEV.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft Help\nslist.hxl
|
-
|
Read
|
|
\\?\C:\ProgramData\Microsoft\MF\Active.GRL
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\MF\Active.GRL.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\MF\Pending.GRL
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\MF\Pending.GRL.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\AssetLibrary.ico
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\AssetLibrary.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\DocumentRepository.ico
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\DocumentRepository.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\MySharePoints.ico
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\MySharePoints.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\MySite.ico
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\MySite.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\SharePointPortalSite.ico
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\SharePointPortalSite.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\SharePointTeamSite.ico
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\SharePointTeamSite.ico.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.DLL.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.DLL.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.REST.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.REST.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.DLL.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.DLL.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.REST.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.REST.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLSLICER.DLL.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLSLICER.DLL.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.REST.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.REST.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.DLL.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.DLL.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.REST.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.REST.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLSLICER.DLL.trx_dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLSLICER.DLL.trx_dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\User Account Pictures\guest.bmp
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\User Account Pictures\user.bmp
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\User Account Pictures\user.bmp.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasbase.vdm
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasbase.vdm.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasdlta.vdm
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasdlta.vdm.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpengine.dll
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpengine.dll.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\MpSfc.bin
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\MpSfc.bin.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\History.Log
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\History.Log.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\Unknown.Log
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\Unknown.Log.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Mozilla\logs\maintenanceservice-install.log
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Mozilla\logs\maintenanceservice-install.log.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Package Cache\42D5BEC7DDFBD49E76467529CBC2868987BF8460\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.spyhunter
|
-
|
Access
|
|
\\?\C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu
|
-
|
Access, Read
|
|
\\?\C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.spyhunter
|
-
|
Access
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\_uninstalling_.png
|
MD5:
f56765ecf5ab7a9bfbc7eee47bc4f2fd
SHA1:
d1929c16d28850f680f2d05ca425771428562366
SHA256:
e7ae93a4623dede7d1d50f06e1c3ebb0c8f525124c4ad0fe974d73839d491225
SSDeep:
12:UtoUyGw9sKRArV6rArEOgDxORTCGyOTx4M7RGwkPObfe1LPOJYSG+0sJx+R6Z3q6:UtoUrTaAr0rAQOGxOws4M7gwNbmTOhVj
ImpHash:
None
|
Access, Write
|
Dropped File
|
C:\Windows\Help\.HLP
|
-
|
Access
|
|
c:\windows\system32\.HLP
|
-
|
Access
|
|