7459000c...d70f | Grouped Behavior
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware, Wiper, Trojan

Monitored Processes

Process Overview
»
ID PID Monitor Reason Integrity Level Image Name Command Line Origin ID
#1 0x48c Analysis Target High (Elevated) chrome64.exe "C:\Users\FD1HVy\Desktop\chrome64.exe" -
#2 0x4d8 Child Process High (Elevated) cmd.exe "C:\WINDOWS\system32\cmd.exe" #1
#4 0xbfc Child Process High (Elevated) mode.com mode con cp select=1251 #2
#5 0xa5c Child Process High (Elevated) vssadmin.exe vssadmin delete shadows /all /quiet #2
#6 0xd10 Autostart Medium chrome64.exe "C:\Windows\System32\chrome64.exe" -
#7 0xd28 Autostart Medium chrome64.exe "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe" -
#8 0xd34 Autostart Medium chrome64.exe "C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe" -
#9 0xd50 Child Process Medium cmd.exe "C:\WINDOWS\system32\cmd.exe" #6
#12 0xdd4 Child Process Medium mode.com mode con cp select=1251 #9
#13 0xe54 Child Process Medium vssadmin.exe vssadmin delete shadows /all /quiet #9
#14 0xf74 Child Process High (Elevated) chrome64.exe "C:\Windows\System32\chrome64.exe" -a #6
#15 0xf98 Child Process High (Elevated) cmd.exe "C:\WINDOWS\system32\cmd.exe" #14
#17 0xfec Child Process Medium cmd.exe "C:\WINDOWS\system32\cmd.exe" #6
#19 0xb40 Child Process High (Elevated) mode.com mode con cp select=1251 #15
#20 0xb30 Child Process High (Elevated) vssadmin.exe vssadmin delete shadows /all /quiet #15

Behavior Information - Grouped by Category

Process #1: chrome64.exe
28788 0
»
Information Value
ID #1
File Name c:\users\fd1hvy\desktop\chrome64.exe
Command Line "C:\Users\FD1HVy\Desktop\chrome64.exe"
Initial Working Directory C:\Users\FD1HVy\Desktop\
Monitor Start Time: 00:00:53, Reason: Analysis Target
Unmonitor End Time: 00:01:56, Reason: Self Terminated
Monitor Duration 00:01:02
OS Process Information
»
Information Value
PID 0x48c
Parent PID 0x860 (c:\windows\explorer.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x E7C
0x 4F0
0x F38
0x D8C
0x D54
0x 39C
0x 824
0x 704
0x BE4
0x FC0
0x FB0
0x B80
0x F98
0x 6C8
0x C38
0x A78
0x 210
0x FDC
0x 2D0
Dropped Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\FD1HVy\Desktop\chrome64.exe 92.50 KB MD5: d613cd49fa1dc355665d115896374ab2
SHA1: 604fafc2c5bca966bde6343a9aa3e2d4a2c570c5
SHA256: 7459000c5cd1fd22aa03849f734131539ef5dd3f0b58dad4d011261a430ad70f
SSDeep: 1536:mBwl+KXpsqN5vlwWYyhY9S4AOMuSjlHSoU234i71NGnnHcJWGVGQ+SIFu:Qw+asqN5aW/hL0Mfum74E9Gp
False
C:\588bce7c90097ed212\1031\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 80.66 KB MD5: 868c1a32aca19b961d49ac6820439f60
SHA1: ced3e1c30f4dfd0c806339be5d3ad12c0f185262
SHA256: 623ec427c118b5c87ca34d114e92b368cd617e697fe0d09f57ab2f725cf39a2e
SSDeep: 1536:EFA/mBhWfgj0JWzW+XZ9Dtttz4ckSScRQnUF1Y9kQDY5kwHExwn0QwJ8CjnZ2lP:L/UhWwvtNkxcCU+8lHPHW8gnZ2lP
False
C:\588bce7c90097ed212\1044\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 77.69 KB MD5: 387a3b91ebacca654dff04c73e2df30b
SHA1: 1ab605706c472e99030895cd6b3acede43d55cca
SHA256: 2107bd99f947256e8ddf9c1189a7cf67750aa2f9b9f5847a11be42e50c5294a4
SSDeep: 1536:+/ZCRev1IOZDKgfgIGug2F7zzfI8xshSkebZjPo1GJ2biw+oNud3DW80+yJH:Xc1jxP4Izp1zVASkUZ10ioNYCN+eH
False
C:\588bce7c90097ed212\2052\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 59.51 KB MD5: 1ba9da0caa88daa23dd11ae4523a96ca
SHA1: 9a3fb5244c3479730bc61272594bef1df9342d9a
SHA256: 577ebee3caf7f934f1bf0a8c8620037e3bef193db7c102430842acd4a934d38e
SSDeep: 1536:ammD4J2Iu8HY+mjkbvtpX0Th9VOWz113D1SVGsPdoi74dO4t:DXrLHDQhDz113D1O6i74Q6
False
C:\588bce7c90097ed212\3076\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 59.65 KB MD5: f37c2857d77d80bd9b91ab5dacdfc7cb
SHA1: 0473b1922400ca08a1b083270fefd5c6d2bd8c5a
SHA256: 2ec9129165b5c070dd5e07d5f69b51536866d402afd2af4079bc099f98311804
SSDeep: 1536:vQ93jjZdWq+CDUBJaOpg4IRG885yJZbqz1jz:YpjZd5E8KgvG9yjb81z
False
C:\588bce7c90097ed212\Graphics\Rotate8.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: 9d0525ff64223fb9adf98ce4104a80cd
SHA1: e8046a750887933f6884384f1658b5109fb8b48f
SHA256: e278fd6c0567a28fa66a4c7dc05b53f8126c31267a24c7800d4b0ee47c8b482d
SSDeep: 24:jtBP3ilSgxW9FHugDfa3XarUefglulITzi878HfH:zilSgYOyiY0ulqzi878HfH
False
C:\588bce7c90097ed212\SetupUi.xsd.id-B4197730.[ms_13@aol.com].ms13 29.65 KB MD5: 1f5be0351921152ac91b36715935f825
SHA1: 7995080d623e93009ec7e1a8bcd26b1c892d7c4a
SHA256: 267013cd981d0412cd48df534650981f79f9d35df84bfa8c6f380949cd5f2ad3
SSDeep: 768:ps5q/1ruAK94mZmW9kpDmpz25Dy+MEVavGCCwym:UqpuAwJZm3DmpzyDJMEVav1
False
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.id-B4197730.[ms_13@aol.com].ms13 15.15 KB MD5: e559ac4cd478272e52c6b0d5e150f29a
SHA1: fba4a2bcc7f4e0d24bf18f79369044230d107561
SHA256: 5094ac77a7766e1095566122f4773ee7531d152d2f85ffccb834c5aa43b7f0a8
SSDeep: 384:YxgkpZL4V81BLFDN1DPvfPIfjhehQAsoI6rbNQJH6rOBS:CfMA9DP3chehQ3jg6JHUOBS
False
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.id-B4197730.[ms_13@aol.com].ms13 0.39 KB MD5: d54f24d678a99f1f098a0a85888351ef
SHA1: b2eab0d04bc339a17e2f5fd945c52c5162972016
SHA256: 9de53d807f8dcf3403b2afc5cdee3b47438407a965501d5d5a6db26bdfa635f2
SSDeep: 12:9ma3hU5Ma4LuMf+rMzlnUG3sciMIY1VaoI:9HakLRaUVp3KoI
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: a8f52a9f5bca871aaedb6908279d457f
SHA1: b551c0782c6a65b8654e58c717b1319f0c06aa60
SHA256: 96b20043d35284a12fa6002f1d8ff1516fdfdff0930f583e0391bca3ebba93ef
SSDeep: 24:S9TIrj+Kc8jZBoCiW78i+C1MpR2FpyN07dQuw/xY4ktwemqshLgp5p3Koy:scrjOMZ/iW2sMIy+7zuYdmqshMgoy
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 95357fbb57b874e407add83f2a4ed3da
SHA1: c7acfecdba8c9b5e0c4c6edbe833f10d32461b6a
SHA256: 2827cd37c35fd39968954a238cbeea2f689741e2f59882cf9ca97419cabfe812
SSDeep: 24:Iz83mdz4Ze35Uf5XvlQqJkQFRPSSkYHFeR1BZfQawNqOgp3Koy:Iz82dx35UfNh5BHF4jxQxYCoy
False
C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 1.07 MB MD5: 84641682344f40913951ba172895df10
SHA1: 40b268247ef3c330959a3d57aca881ac511a6ecf
SHA256: ddade15c9ebee9aa800f1314565db5f9d50d03cc42e0569b7e3fce7046aa6013
SSDeep: 24576:0Js5j7R3TJV5Um/Yd5goUNqtazZ3ky3mca6+Opcom/FczDeP/6ecN1RX:Es5j13TJTbwd5goUNqYz1r3mcaHtag8r
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.id-B4197730.[ms_13@aol.com].ms13 11.86 KB MD5: 51e6c849f5f5e13211c6fcdac627aa9d
SHA1: 3405ebe27262b47fbdcd25417728aca0697e3f84
SHA256: b502bd907fdb149fdc28aa4c9b2654c9e3a44c2c0a2ba6e8c42b2c69263c0b15
SSDeep: 192:97mkccs6AAAGh2JjtlprHQrgwQMi/gFUWy+yX6b7XyPCwaroOr+30PH8:hkaAGh2TlpcZZe+P1w+oOk0Pc
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.id-B4197730.[ms_13@aol.com].ms13 5.01 KB MD5: 5dafa463646ee98bfa7193560adc6432
SHA1: 2c297faac218f02a0e4ce59b411799c617f5191f
SHA256: 447c053f3e561a0df5b6ac0a271bdaa24ab4a8a750c6619f8e24c8e73269402d
SSDeep: 96:P/MMijen5W2s2QxyV43OLGS5yg687rb0r4ojixZz1TbYun8tsdlq0G:PUMD5Ns20eSS4O3Hoc9VPncN
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04134_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.57 KB MD5: fc81e4af326d9c003f5a2c4db9deabf0
SHA1: 4bf045a6f17a79daef3214a6d6c8c76e62cd9b42
SHA256: afde569bbf2cbbe53e819cf7e340ebc1d877980f4e9eb1331c669b0c961c5015
SSDeep: 96:zexSKbiwtXlbmxHrT+9A8q1FKLQ2zFdcYE3U:zo12wtX5GHXqg1N2zgrU
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 22.47 KB MD5: a188723c6c797bae53d33e6a16ba7c91
SHA1: 4f7c97077669f3af8d0ee2d5d0002c1e52e07bce
SHA256: b616ff51638e7ee6a7e5736a730d206c493b57397c0f0b762a0926ee95ca1720
SSDeep: 384:3/T141otDvqDfMXoLlx0LcfQEjGx54aoEvpXYX/pZmPpAmjJ3M:vT1tDvqDkY7ZfGq7X/pZ+NjJ3M
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04269_.WMF.id-B4197730.[ms_13@aol.com].ms13 2.21 KB MD5: dde6a3e44ab0d23570be6bf451ac35a5
SHA1: f158ea7d7935db17336d2fc9dd539d3a36ee5535
SHA256: 3b9b2c82b09ad20176189eb2bf001ac9793e2c2f72bcc7e1a46d4137b9726cf7
SSDeep: 48:AOpSYolx72Bpn/wNelVCdKguj+AYJK7sJ6BC4R6dYog:Ay/ol2p4N7E+DMBP6dc
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19986_.WMF.id-B4197730.[ms_13@aol.com].ms13 14.39 KB MD5: 0a53eff0fc367c0c813358b719d7805a
SHA1: 021b59dcbfed1c607a0db500c0d35402d794b663
SHA256: 9c5ffeaed952607bddbc6e6f061932dc95296a705e86849998d68bd9b760b181
SSDeep: 384:RHGqWbYspkqMHvQFiNk1UD+di5eBqHxWDq8+T4s:4qqk/vuiEUQWe0HEqVb
False
C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[ms_13@aol.com].ms13 6.14 KB MD5: 6228ef0f38bfbfe952f9c312eefef2e5
SHA1: 7d6a04ffb0217b4fb9161ff6c22854a334d11ff9
SHA256: c41e5cdcc55ddc080c1567faa973badb252ac3f0f7676c21296284cbcabdcd48
SSDeep: 96:en+LZbGu+RpBUd0mZBIqr6xlQSSzLrWkfZLPD585JrCbOA5zKAB9qCcUgsWLZdt1:K+lG1UamDI64Sb7Zaebdo2gxNsWLZdv7
False
C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[ms_13@aol.com].ms13 41.97 KB MD5: 1ced44e14307f2d203a61d946201912e
SHA1: 6350bb805a045d0604f0a75d2c5adc413f84563f
SHA256: ae1677c184312d51f2b84212c8f06d9008e74f9c35e6d07846d02c9e62cf68c5
SSDeep: 768:1RiYctrhA6ILdsv/PDedF0/CfnaoIwbXjIFinaWpGnqTct:1ihhA6ILd+3D6F0qfVS8TE
False
C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 0.37 KB MD5: 107e313182af703f2fe96eec74af6ef5
SHA1: c7ff92bf23df0a2c14d682dc0d9528d03054894d
SHA256: de741eeb161894e7096dd5d8e9fdeb40c58a56cf11555cdc573c249a2fee4040
SSDeep: 6:/PV3MQLAYv4CztV40vIpvMhtK6WC0oF4MP/VwkOY67UGR9sciMLkMZkl+CmaoJMt:FcgX40H7x6rMVROY67UG3sciMIY1Vao2
False
C:\$GetCurrent\SafeOS\GetCurrentRollback.ini.id-B4197730.[ms_13@aol.com].ms13 0.41 KB MD5: a49b826a0510ef3d30404e98a71b886a
SHA1: 7a88e741c48aa6d354fe4ba8cf8d1acfba3da50e
SHA256: ef8aa36cfb8c028478b9ea34f7d2ce62e0ee5f2e1f318318f7fdc559cfcb14e8
SSDeep: 12:pD1KTfFV89e/laqIrM4gCgUG3sciMIY1Vaoc:SvP/laq4F/wp3Koc
False
C:\$Recycle.Bin\S-1-5-18\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 0.37 KB MD5: 7f72475bf8b58915aec1b1cf7bff9031
SHA1: c5fd61e2da141c3019d3642005d2466c23c650cb
SHA256: d130d6e72d0239ea57d77ca20a3e923c178c5feaf64d7c960c7888d6dd5ea6e3
SSDeep: 6:wppJ8kTV0XHgu0A6BWY+pAuZKGENh1Ac6WC0oF4MPMn8UGR9sciMLkMZkl+Cmao2:CpbRyHi1BfwgGENh1a6rMK8UG3sciMI5
False
C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log.id-B4197730.[ms_13@aol.com].ms13 0.31 KB MD5: bdf4984936b672d6e18178f838766f37
SHA1: dbeccbcd2c6891838fcfc11a827a671e1594f80d
SHA256: f5aaeb8108a63daf2fe1eebcb37894720fca6a3e76ce1d2ba663411d110b752d
SSDeep: 6:oNwawBliUkaUel1DmRH8lD7gmoF4MPTRUGR9sciMLkMZkl+CmaoJe/n:oia8lMu1UH8lImrM7RUG3sciMIY1Vaos
False
C:\588bce7c90097ed212\1028\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 6.39 KB MD5: 2a2ce8d29b036b1494229e03db710220
SHA1: eb22cea57f9e756da54bc92625d3bbcc3ee227ed
SHA256: 586da9434c06efc33372f9280c4ea2bd96f3e672033a31e5b86a66ef1fa8cf55
SSDeep: 96:G5WA9nmrMghERmG5dsevmHoxZU+Zad/S21kg3huCGaS1JMVIh+fZCeEyc1R8faC1:wWKgDG5dN+H0U+WS21T3huCGarslsA+
False
C:\588bce7c90097ed212\1028\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 59.65 KB MD5: 729578f4ebed57f44ef6ca5b1152d7db
SHA1: fb722727d378d5bd46b868a67e3f6e097d8858c2
SHA256: 702ab2d8258a6cec9d2fa8fb39639c995ec85d0d6adb246c1dfcb2f18c12c61a
SSDeep: 1536:E0sHEkcAWpu9AlYXC4LMRgGBLlJsu/QYQdr3LCZKqO:E0I0xu9AWyRRgcLMu8nCZZO
False
C:\588bce7c90097ed212\1029\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.86 KB MD5: d44599063ef6597a6ac35a83e26d43aa
SHA1: 8e8277c5d6217f6f3d663c074727a0a9a826801d
SHA256: 9bb2390c30cfb70c735725d6f92e58c3e61f344888075a20b63842cc40b39a93
SSDeep: 96:2rby5NmtA5C4D2uDsHNhyVpzAJ1vsFXvg53l7P/or:ZXD2astapavshvy3l7P/or
False
C:\588bce7c90097ed212\1029\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 79.32 KB MD5: 82e309eaae44b7ccbfd972f21266f688
SHA1: 7f2c2b026379f7ff422fb6d8a05624a9d5dd8885
SHA256: c5321b353ea2bce32396e3e5b47d1d8d01d17c78215c60c65f2509f342c3a4b4
SSDeep: 1536:ocI55SuE4+CO3v137sBrpi99Je98+4+tZpb58PV/BCsImefYj/x4x:ocIt/+1tqrE9e8+j58PzCsAfYjJ4x
False
C:\588bce7c90097ed212\1025\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 72.72 KB MD5: 86db4ee1c4d9715fbabcc61a800d88c2
SHA1: bc08c9bc5860a6f55c5cce994ba7be1b39bb363a
SHA256: c3597f293234b0a24c09a50de413fcb448429b72d2f61c337d6704b85aeac155
SSDeep: 1536:Ug7f3IC6YW47MNuOoVBrRFBzOdM8ayt+5Ua0FUlVwhC48tpN:UwvIC6YW47ku1RlzKqVcubN
False
C:\588bce7c90097ed212\1025\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 7.61 KB MD5: 08fee4ed237110927f8a8d145d86802c
SHA1: e029cf3d3eaeba88ddda32e61d3c80aa0361027e
SHA256: d531d10aefc4ce1059beef66a174e655ae2bbb5089a0bff8e4586aa90aade2b7
SSDeep: 192:Xy3Oh+Z3ZNX5Y9/b+cr4Ke5y1x1oJWBXAjrsIZdjRx68lVJO3JqEA6rjndp+Z:Xk3fXa+crK5y/fBXAjzjfO3U16rjU
False
C:\588bce7c90097ed212\1030\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 76.18 KB MD5: c0aaa3d6a9c721d30d94a1cf7d443c2c
SHA1: 84ae527a9e43e1e62ecb8749a7a029d68486cc5f
SHA256: 0b34a8c2a0f9aca5f1ea523fdd58d9f23a47731a2b92c8d7242ec4838e9f8100
SSDeep: 1536:Eyc2ZoXjFU/+KNlegJfRitvuBzdMEuewHQ1FBJ3MejJnmdzkj4X0QbDo:E5hTyJNleg6tGBJykR5IdX0ADo
False
C:\588bce7c90097ed212\1030\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.47 KB MD5: 3f0b2de392a53315ac35761eb135bb5e
SHA1: 49d0d88057428ca06d3164ccd11765fd26a462ff
SHA256: 1901e3c81b22737103fd85d1ecfe476924ab1c162a4bb194e565c2e4a834fb50
SSDeep: 96:XBeU4zZulk5+itMXlVU7oBb+H7Nz+OitmK4W1A:Ryui5xt4+hJK91A
False
C:\588bce7c90097ed212\1031\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.57 KB MD5: ea496ae4aa5a54feeab9a038963921ea
SHA1: 3fc32d4888df641c66c9f60ae3a592dad1193d76
SHA256: 96611c6eed36d364c993362848707e2567d94d37c4cb57eb4f06d36a72751001
SSDeep: 96:ZHGxNJO3zEfZm3H/pFZLG8cVHPoE6n5gI5Qfzk4p5xW:V8NA3zEfZm3hFBG8cBqQbkyTW
False
C:\588bce7c90097ed212\1032\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 8.89 KB MD5: 8e0c0c2fcff7c721036132e6f7f3b983
SHA1: e8a3389028a2d96a893541128e279a3fe71b0918
SHA256: 2d315a52f22952e4d9c585597c4fd64946e3857f0006f3e3acc854760a10e4b7
SSDeep: 192:IX3u5YXxROlaucvbGHjkKxgPeAabuXDfEYkRR9NH9ot9W:/qxklaucDywKy7aOfTkVNHgW
False
C:\588bce7c90097ed212\1032\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 84.51 KB MD5: 47f6df32b3c84eeb9e4cd8985b7a9b84
SHA1: c01bb428590d4a6c928e9daabfe5cabdc776a4a4
SHA256: 3fbb7fce0609069f433a0d061a618ff0ad241290ee0f0fe511d888bcab17fb50
SSDeep: 1536:WsQvWDOkM3EVSGSs8JT8+rebV5oVx+bk2fcLJgsi6zGNnahQAUdM2VvtxzZg:WCu3KSGSs8WAebV5oGk93i2GNahQ5W2E
False
C:\588bce7c90097ed212\1033\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.35 KB MD5: 0d9450cbe57b721129ea5359d052547e
SHA1: fcee855f009174236c7b94aafa7ec517528e447b
SHA256: c51f70e1875424f2eb3347b623fd4fd422ee1d847e91f5b8bb7b47f4fe3bfedf
SSDeep: 48:DbG72d82gDq6ZcTjD/ObI1mJXqwDcHz0zusG4VVrQAXNrXqea0/28/y0kjN3Qo4:e72d82koj7OkE1jfG+WAXlqe1eV5jJ8
False
C:\588bce7c90097ed212\1033\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 75.68 KB MD5: 155d742d7ec19043f02b1da499e5f936
SHA1: 86267699141c3cda9209a2836d977127c3eea776
SHA256: 3e792a59bdf2644e13da39afd4f32ad4cad3255abf2ca24d9093d1a287977af2
SSDeep: 1536:tJgtA2QdTF1f28mUN6QkNfgxKzBsK0MHPHkFnoB+txzUxhiGgLy+HE:tOty9EQkNIQzBsGPEdo03dyt
False
C:\588bce7c90097ed212\1036\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.68 KB MD5: 213a29ceb62501e6fd163ed7cba21a74
SHA1: e60af7d28c0d63404af084a2a556e0e89327e9f5
SHA256: 024ec028fe751cdc632dab77b844d60a6200cf8f1414f7f04a1993efd992a474
SSDeep: 96:fyJ0/SPq1HHXwphLmvOoF+V7uQtP0wo60U/:fyOq+wPLmvOoO7um8wo6f/
False
C:\588bce7c90097ed212\1036\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 81.27 KB MD5: c4151020b58c81cdceea68ae5a1db0be
SHA1: 42cb656f13ad47ec8864bdf30c0a8eddd6185f8a
SHA256: 4078d02fde117129d17c6a7904503e0a674b0926cc8bceb615229937671ca789
SSDeep: 1536:KgUwFIGiszPx/zepuGPA+WvJi8qKh3YX4FX0QTnsuI2i+8LetFo+Ec:KgFyszhze5/6hIX4FEl2iHSo+Ec
False
C:\588bce7c90097ed212\1037\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 6.93 KB MD5: 0442fac47f8b706c88a7571b70babe8d
SHA1: 141ba1d821a2fb3ca11e2ac5bb5ea801e7534e36
SHA256: 7a9f036afe8e90014646222dbdf94018cf1e93f41d76764f9e5098c1acf30486
SSDeep: 192:QcHv+yUnV/d8Kxtl1NozQt95IYZU3Vd2tSo:QcHmyuRdZbOzQdZWz2
False
C:\588bce7c90097ed212\1035\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 75.46 KB MD5: cbf1c6a94dcda82738f1a62d266b3f8c
SHA1: ba96d1a9c541419d035a0b71a4202279d92a360f
SHA256: a240e7553111f7fce1a68ef1195e055ddf5df3dadd6431bc26a5b425b74fbdaa
SSDeep: 1536:UERTKJBwd1sQh3MPjIe43QSwGYQ6AmfLVhhjqvHhn1QCAYLkYvNk4cAbMGUVU:UuG4d1th36jIB3QOYQWBhhjqvHhn1QC1
False
C:\$GetCurrent\SafeOS\GetCurrentOOBE.dll.id-B4197730.[ms_13@aol.com].ms13 140.95 KB MD5: 68fb532d3a20c8ecf4c767263d18483f
SHA1: 9a7b3ca09bccac9f9ff41b388565f7c2a8ae0950
SHA256: 68de4aabecdaa4f9d84d90d2cc662858b5ae2ba1149ff733bf4b9a7977482198
SSDeep: 3072:lj5LuctE80vL68rpi5MgxhWVDzAClRPYGA+KA1RLi1Dklw4pFsF:lJQ8ULFij6YGZZi1olwC0
False
C:\$GetCurrent\SafeOS\PartnerSetupComplete.cmd.id-B4197730.[ms_13@aol.com].ms13 0.83 KB MD5: 798353d0ccb38e7767162eaffba4ab61
SHA1: 1a9d39c1626fd15996258bdfcf9f3756ddc3ac3a
SHA256: c42a7f63905a8f6d1d3588f56fe18fe53dab99468c005c238114317617bfcd50
SSDeep: 24:FASdPQBGJ/wiBdcwNLtUUeH8lzE0cAdHfV:LPQBWprcwXUX8lzE+dHfV
False
C:\$GetCurrent\SafeOS\preoobe.cmd.id-B4197730.[ms_13@aol.com].ms13 0.31 KB MD5: 3e2ba2a8e6a2b940a9cbc2376344dee1
SHA1: 06526548c4926394dd83c498a1b4b03552ed4e0b
SHA256: a71532fd8b034e4f913f5b41a32812331f471b1d0b928ca6f8cbda785aac8492
SSDeep: 6:eJIeqpygVr3cQlSaBMoF4MP5Z+PtbEPBszmwcy618KfFH:o6y2AaBMrMhZWtIB718cH
False
C:\588bce7c90097ed212\1025\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 17.09 KB MD5: 7a5983604edad116b792c301d7b3ada1
SHA1: 8f97b2fc95641d99ec6c88e44ce6204b85af942b
SHA256: 14fe7cfcae60df0529736378ea37dc8010c24391b53771d8bc968aff6484578f
SSDeep: 384:d29ecy9v5BTtoP7jF8QycXmYALmC/+KgQyiXVjooz5OZt9+fEEbv:Qmdrq7jvTgsnKXVjVp
False
C:\588bce7c90097ed212\1035\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.85 KB MD5: 6fdb2af73f64dd011defba931c7b7371
SHA1: f43d234cd16518c40bd2fc6e1fd4e8e6046119d2
SHA256: 63fce73269729c86eb855514e289d0d8c806d8294df6441726ffaba7ba738a30
SSDeep: 96:IBIuAYJ+ZIw2XpM6UwDLlbN/lqjAP116Gkx:FHiikXpM6UcbNdqEeGkx
False
C:\$GetCurrent\SafeOS\SetupComplete.cmd.id-B4197730.[ms_13@aol.com].ms13 0.55 KB MD5: 9f7aa7c1cccedb508eaff172cf664007
SHA1: ad6cb5adbfa2f1dcaba6642c44e4dcbcaee70e1a
SHA256: e7456d07e5d8c8e988ed5717f5f711ca11bac43f3c37e88fb1774240bd672e8e
SSDeep: 12:xKuOAapjWEyCpL793sJGI9jsAFH8lzMrMNxHNtIB718cj:YXpaYnFsJGI9jhFH8lzEdHfj
False
C:\588bce7c90097ed212\1038\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 4.38 KB MD5: 88779f01cc06e8f12510c0fdf368d8d2
SHA1: c49ba362a71f712685896ef80dbe9c981022e34d
SHA256: 44496de572fc98c2eb9b8140590c6c46c2ebffaf6f00d99ca5b4c7fb90021d79
SSDeep: 96:rW7vcebeKei+uRdjfrNv6LgS1xP+py3a4JD0Uw6jb+wAWJq8UQs/sB:rW70ebeotgLgCx2py35F0Uj3+MJi/sB
False
C:\588bce7c90097ed212\1038\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 84.66 KB MD5: 5a01df07544d13e6f5aded7dee47f486
SHA1: 4c2022a3c0ecef68eaf09276c877d7cab981a149
SHA256: e8cc3be3dca2ec617d8d68af81bd800c5122bf05d1492a2acfd9dd8b3712fed7
SSDeep: 1536:OFRvMzonfXtIZ4hnDoZfuHti0rkKC+PVcxEBiXrhYx09ax7rahzLlIob:OFR0kfXJJooH/kfKmrSW9axSh9Fb
False
C:\588bce7c90097ed212\1029\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.09 KB MD5: a51f644b384bfe9621fef8165d0be4c9
SHA1: 6ad281801de22de939838e27b6cafa835b289d59
SHA256: df1c51b6e2d8eb1285a4e407ffa09d2c59a238eec190b963aa98eca9dbca96f3
SSDeep: 384:TVCUv9mgdZsKV763R7ZGWlIKgTbxwioClnhGIzxu4iVSrCHgSX:TVCrg35ULGWKX2Gw4iVSrHk
False
C:\588bce7c90097ed212\1041\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 10.11 KB MD5: e0255804fcba2982ed4e3fe896434b89
SHA1: a5034b0631d6d59826608de7d83e2b1523f8161c
SHA256: 4bd22e17a1750f1033d5175ed6449cd58d45fa6e3ae36b949d3eeb15a09909a9
SSDeep: 192:D3Avbu8nayk+f1wDa3Q0KhAxgIrJJJPTAF+TnMXNPEMu92FjhQntHNVXV8WC16Rq:LybuozqDa3vNxNNJBdTMOzuAtrE16Rq
False
C:\588bce7c90097ed212\1030\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.09 KB MD5: 73e373898ba82b2cdd26ffb46e6f245b
SHA1: b6ad494e47542e29baa49b3397000b643e0657e1
SHA256: b51f113d7aa241e30e84941357328d4ef9e3adfe48201338b47b7b372fd67f2b
SSDeep: 384:hEqP3fugvnteLWVkrXwqqVgrJmotKOfnQ41R7MOKsbD7nTKVp/EjoEN:Ce327qV23qVaJm+JfQqHKc7nTog
False
C:\588bce7c90097ed212\1028\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 14.09 KB MD5: 714773d41f454a3dd97f5364d016187e
SHA1: 62daae05fccd811cbb2eeacb66dff13c9a99cb09
SHA256: dd3262426f3acdf7531f3194852a89031923e871c6da8f825f127b7b3d44a9ee
SSDeep: 384:6KkO38RTjb77iJq+b4iU6NKhUf6DA/WaTArJ+gZqTbW:fB38x77ex4iHK1oWaTArUgmC
False
C:\588bce7c90097ed212\1041\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 66.88 KB MD5: eed9ea86a33e7995d456b6d35fbc6cf0
SHA1: 792385797ba7e7cb92778786a19827facc7a8273
SHA256: 2b18ca2a2fbea9f27544b908ce607490b12491cc5137b2e7ad0907ac2e13fd40
SSDeep: 1536:bi0GEZBozdE89x2Lq1ZsyX+29wLN+0r0NCZnz74TnK:LLoxtjxOLNJrQWz70K
False
C:\588bce7c90097ed212\1031\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.59 KB MD5: e6b7e608048f02ce93585c84f2f30dc5
SHA1: 9ee0bd24c337dd20c696818ab5316ccab2b46dad
SHA256: 1e51d6266d92c06966421edf9069dff36b969c54d19758a22dada61fc703fc47
SSDeep: 384:UBqMtiwNT3CVfPJrJbvaNVR6BlJAPJaV15ALr00cNgBy1J5sdbO/QwGiF:uhZNT3k4nqJI4rALrMgBEJEppy
False
C:\588bce7c90097ed212\1032\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 19.09 KB MD5: 291338c4874e95bb643932d6b3e4f420
SHA1: 82b5da6b63a23167f2b23675dac7514f107d0a04
SHA256: cbf64f0bede0f894923e376efb8bd251dae5f6554cbfaea2bba669398c4c2078
SSDeep: 384:LJm5I23fnDj1V3VP9Gs7qleuEIh76sv/zk+n3Vx3lg7poCJiNiuY:LJxGfnDxj8EqfZ3/ixJ8if
False
C:\588bce7c90097ed212\1040\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 78.43 KB MD5: 48244322e7021a3c6604aa9bbea11f66
SHA1: 354e3108b059657bc31d7088976da92ed038f99a
SHA256: 2434e2b275ae188fb7f958a7accf397c8ea97cd4f6758e12220fdac9b26c45f0
SSDeep: 1536:jkvz1jbpi6UpErTtxv9rvAlE0+NiMCgh5DoWs+1dQpwm7HaXhGvgMBF7MO:jkvzyLEPtnrQ4N715a+4fGoFIO
False
C:\588bce7c90097ed212\1040\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.79 KB MD5: b824ff9a431c13013403fb693be7a65f
SHA1: b1e3a81190c5b19f9caf9fc8d5463523b17c5ed8
SHA256: 8f1ab9dd81d33731b880f8ae6dac35b78356e2a6cc4430cb2cea6bbff2a57ac9
SSDeep: 48:gs908jzS6Zyp63Oh+TdPiGDxH/HBwFZZK1CECE9iemM8PfUBE7Q17MD9b3ipo4:/euzSjrSfHBACC4IiCiilx7O
False
C:\588bce7c90097ed212\1033\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 17.09 KB MD5: e77c85c977dac797ecc0780612eff41f
SHA1: 4994c60f6a8205445c2d9b320c6b809cb7348c52
SHA256: bbdc797a81d6561be94eb1e57ad984bcf0a8838689bbaf5120a13c27934e932a
SSDeep: 384:RVTIJMOzCNTgG5BaAm5Qg5D5t2zQEaxH0958cd09t5xcev4v5:R0MOuxgZKgFuDaxH0fXC9pcE4h
False
C:\588bce7c90097ed212\1036\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.59 KB MD5: d5884446550c86970fdf3da36d73d80b
SHA1: ab7b9c0eca6c4614c1cf9be61cca376c75324927
SHA256: a2c49f64bfc2a1742ad682359d344b91c1f14fa9de74b98c920b573b31a78032
SSDeep: 384:NChda+0YXUAEm16d0oV+jJvrxGBj3syt0/+PpwQpfZSYuZexcMi:y10YXhXgd/V+jJvrxschPYPy
False
C:\588bce7c90097ed212\1043\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.69 KB MD5: 0a5f80c1d3ea8c0e1feec572015cf9bd
SHA1: fb5767b62284de9f84b01c17502df8382ab4e75f
SHA256: 3a0f025f08881857f510e0de27d1375d18cc8d867449494c567a5823b348c96f
SSDeep: 96:22/QEqPCPccZMwS/qNyuHXWjMJ2+cOFoqr:27ECH03WIYdOOqr
False
C:\588bce7c90097ed212\1038\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.59 KB MD5: ab71ef7f689b2f1db1c64600fcae9fbe
SHA1: d2712273837dfa26d31438b2e0809fb5e0e5da05
SHA256: de61436105b4011b00385410d1fc6f51f132787f863392769cde684b4200ed89
SSDeep: 384:GDFDu66ay8rEhy8j04siEcmIMOFuU9hLrkyrHGhV5hD95CCJ3utahk42:6DRty8g/eNj+9hLQyrHGhd95vIahG
False
C:\588bce7c90097ed212\1042\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 63.96 KB MD5: 56dfe048a9ef45ea67f2d9e3a6e92140
SHA1: 25abf0a328c7dd205e7af67ba28e9f0332667324
SHA256: 742adff31c2d887315221aa67f62d2ede9f47023ea1f345e08c5660caa680ae5
SSDeep: 768:TPm7AO4hf9fPjBNUKBVyGxhG7Edvwe0SjwhTvrNJ+ZbyV43z6OVEGaMiY30wEaBe:SgpnZHoKRmhTZ8uyOwGY30wEaE
False
C:\588bce7c90097ed212\1042\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 12.61 KB MD5: e77e7afb01fa8291151d02afde36f0cb
SHA1: 468efe8ed46214118a8a99e30e036afe305fd088
SHA256: 201f82fbcce28daa68f1f7b04b939b330fbc3dcfc9e9ea25bf5fd810ae3c5fca
SSDeep: 384:QNhyFpj0sO8UFzXkSB00fGanbil/6uARANXppPinFq5os:ChkptArka0eipDACv6Fq5L
False
C:\588bce7c90097ed212\1035\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.09 KB MD5: cf6892ad0c5222d8bf0db74496516c9a
SHA1: 5561e61abc3c5842db4bd4bb843592665bce2780
SHA256: 99e56c42bd4c6031d09893f2b43db201cc8db64d8abc0d2e0140d884e58e2755
SSDeep: 384:m9RiMZ7VnEOiWAXI/tuyeYhj5LS4rb1uyChVh3ULMCgJhlOn:m9AOiWAXGuNYjLS4rb1uyC5UQjlM
False
C:\588bce7c90097ed212\1044\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.21 KB MD5: 2586e95fbed10934b82088a3f1856c9f
SHA1: 1bfcc1d2030e7a3375ccc74e6bf9ab1fc9634136
SHA256: bd3f23d30a410645b270eac42f56f20beedb047c5beebade73e72f0fcadcf748
SSDeep: 96:XENxQk4LAbUosh/1E4PYFWAVs15SRHxnA:4xQkrS/1UWAVs15YxnA
False
C:\588bce7c90097ed212\1043\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 78.02 KB MD5: 41aca7bc26f44731d14187ed88be267e
SHA1: 0dfb4b8840df352c02206c0e6002e0b55b49f296
SHA256: 9d138b738ed32969ccf6bf6eb4b3dd58321d6e658124d1a8265b9b68c6cb5dee
SSDeep: 1536:4TWF4XtJvNxvDfNVMKnIQAJG4q0bsBnn49DHbXIlp1H7TJdaQAcdkUxTz:WljDfNV/7AJGMbCnyHbKX7NMKz
False
C:\588bce7c90097ed212\1040\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.09 KB MD5: 60e99714af375d9be11f0525c81bde26
SHA1: 2cd1412b15df24167b43468150e9ca6f7f303c40
SHA256: 175283098725ef56629469353217b51bedf3b4f7c5e754fee4fce7e7b86dd9ee
SSDeep: 384:gzkMJi5qpmjK4GOWIek6Odsve0S3B/papuF:gz3ib+Lk6ysve0S3B/paK
False
C:\588bce7c90097ed212\1041\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 15.59 KB MD5: 2cec14f56b687ed0f29411946089747f
SHA1: 461f53789d6ae3a64094bdbe61d3e514d2b1d71d
SHA256: 4a00dd707ba8588caceb29de90367ab75a85d860c2ad29dcc326da3643710432
SSDeep: 384:c45TWZVok77bjywmkhEHzFVtLeebLH7bshHHHdOnD6NudP4mAUZwN:c4UXB7bjBhSZLeKbYlH8BgmA6M
False
C:\588bce7c90097ed212\1042\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 15.09 KB MD5: 83444ab3cdf2457fd746b40438e77dd2
SHA1: f5fccfa25b589df389947ea9b9c9e3a95fac5be3
SHA256: b29f2eb2b76e65c3e2145c2a344580a72cb5945d8007e6899e5dc3609ccea54d
SSDeep: 384:JD7qDR0GlRbGZh0qweLxkLIikRMi5Ci8Arq1pzcpl:J7q90k8ZCxeNIiLs4
False
C:\588bce7c90097ed212\1043\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 19.09 KB MD5: e83736f0c3eff13056fe711a028df46a
SHA1: 5797b94cade156580e5a1350837b6a432a96f38e
SHA256: 99335e2a6b7211ea46f14366b33125e6399dc479e1224dbf06ce95dde9f83f41
SSDeep: 384:mGRYnicoVWQI6y1wGNu2QMPNWJUyEYByT+fIf5bZWDOzdQBxUN72EnS:mGyniGGNqyEYBE+fSW1j
False
C:\588bce7c90097ed212\1044\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 17.59 KB MD5: bfee3b74ca6da42cdb77dfca0bf874bb
SHA1: 0a6ba6474f4570624816a1792a330617a9853e1d
SHA256: a1db1428a7dd8be9098ca0f6a9c96d99968c506f6901fa66bc74e46b0893804c
SSDeep: 384:/cLEJDUebhZyUqLtPJGkLJgFhldRVAed+k1bllxBPsTbQW:kGUe3xiGklKhTRTdJB/7W
False
C:\588bce7c90097ed212\1045\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 80.69 KB MD5: 59eeb851bba2677e29c6f138ecc36d2b
SHA1: 832425d1797a5606106a3b8d86db8a258020039c
SHA256: 68799c44e2eb8afbcf6432b4a0bc8e7fc0ef07ff790a350f3939b8eab769e11a
SSDeep: 1536:TmS1uNTjtP95GcE9I7yVQgiL8vtbcowm9oU0AVZYzPBc9DN2AcLDUsVq+WU:SS1wH5NOQLqjwM0Akzy0LDUsVq+WU
False
C:\588bce7c90097ed212\1037\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 70.63 KB MD5: 61ef18eb3390d6822de0585dc11a3e34
SHA1: 09bfda2778b29f58a496c6fc5f2a0a5ec2d44938
SHA256: b7a61c05309feeecfea15f0cd9a62ba0bfff2c99e2c727b5d6b82a839bdf9526
SSDeep: 1536:V8V9cDpf5Wl06fybpGsor3gJVmOkAzVKKh/1TDf8/4qkU6jZ2:wZZfB5bgJVmvUx/1TDSpgw
False
C:\588bce7c90097ed212\1045\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.09 KB MD5: 108901a435f46346242cef71abcfd110
SHA1: a6400cab4940cbe6413e10aafc6addb255e872cc
SHA256: dee71a11a255f1bee9344873ba32c3a3ba94d9b8b2eca57857dfdf062b48ced3
SSDeep: 384:Gg1zjkNXpkdskC+BkesOyYyZbTS322ff0KhYS7zJh/O2flu7Wd/:x1zYkC+BketWS322fsLSXJh/ZaW1
False
C:\588bce7c90097ed212\1049\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.09 KB MD5: 6bfed5edea37057ef3be577fab8e46c0
SHA1: 99f212f7a8876e0e73357de6a34676457eebe437
SHA256: d2c67786c9d63c4ffe99a8278d45f99fa7b4df79184f0b8c2534d97cbfff0203
SSDeep: 384:pqdLcawgi59J1RXw/V0VfU61YDYRGNCAV9sV6b0QSZ4f+spjd:r9Vg/V0b1YDYRGNIqOZ4Zr
False
C:\588bce7c90097ed212\1046\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.83 KB MD5: 1bb251c02100f8071213a182770c6b16
SHA1: df55217833b7d8031935b1355029dcbac1acf2c9
SHA256: ffe8f41660e80610537a0c183a45b2d7967d24014944ed71aa0da3d6755aead2
SSDeep: 96:1GnOeODEnd+nkWYI/GfOvSPh98FFcavtJs/w2xDiyHCgkPdEBV9m:1xjjYKGWo7EFcyzs/wWeyHCgklEBV9m
False
C:\588bce7c90097ed212\1046\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.09 KB MD5: 92ab6e03bb87c2c550b5dc6a41a1fa1e
SHA1: 581a0b12cec9290460f3250e4131bdd93c1a74b5
SHA256: 4e96211c3047c4ece40995f5670e879ae3ceb2cdd46d45ee1b3293914a96f549
SSDeep: 384:/cG18beMtXkpYDM77RxKsddP+gVSPCRdXhyPifltk0:/rI9tXk287asddPNVSPCRRWidtp
False
C:\588bce7c90097ed212\1046\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 79.10 KB MD5: 103ac805d112328a468f927da8e0f0a6
SHA1: 5e52a3f70f5d6d8bd841059dc87dcbe0f3897753
SHA256: b779422b188c5aedfa620c0b8286b6b042238bd2009e75e56e29cc8ffc4c8042
SSDeep: 1536:H6ussyhbuHiKYtd78cMiDpni3JtlIPXD+lzf9iBDrQgOjdRU:lmbztNSiDpnaaPqZfQlrQvj4
False
C:\588bce7c90097ed212\1053\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 4.00 KB MD5: 1bc408155550bf47fe2b526af622c861
SHA1: 7383e785b42a7514aef82a06f2163f98a06bd084
SHA256: 2c47ac3193d55e24f0525256e87a6344c2cf300a5433152f617a87a977b277e9
SSDeep: 96:yUApMCp9fTLdSeTpLT3E9zY3QVhpSaOBFMd643H:yNT7TpLLE9gKCa8qY43H
False
C:\588bce7c90097ed212\1053\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 17.59 KB MD5: aec5eb5c77c35fe4ecffd5575f5a42f4
SHA1: 2eb8e335d3f1542102b7b67ca67cfb8a2f76ea92
SHA256: bad4779aab8c7ab1ba3529ef756c6c4e5b498d833bfcfd417860f3f4fdb87724
SSDeep: 384:Nl9ZK5i2oHHxNdE+MXXBPxKmHNuji+f/87UAAXUW263Ym:N7ZK5i2oHHxk+MHjdNujB8nAXUWt/
False
C:\588bce7c90097ed212\1049\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 79.82 KB MD5: e90c559a106bc5ff3be537cd9d66c679
SHA1: e1004fbbe4f8f587a85f7d07819336c8e5bc6b9e
SHA256: b6c511f582fb7ec93b6ea07e43cb8a1169d69e22cdd363a074d1b2b3eef1a4b8
SSDeep: 1536:OVuvoUm327r4zPJD7NimuABZWYVoFY7wqVWW4GdLNjE8wBen/lxcFgZwMQEjscfZ:OHJ344DnZWYVa4F4oJ4nB0QaZ6EjW/s
False
C:\588bce7c90097ed212\1049\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 53.41 KB MD5: 13d9a708050fc7bb1eb61d332e83c5f8
SHA1: 043d98e2af4629015811d5c2b94770b702a191ec
SHA256: d2561343ace93224dc36408cf49c24b01884f1cc8b822f339530581442a882eb
SSDeep: 768:ckSGj9k+Z94JdZUe61F9o9TqLj//3kofXFkabJ12hMo2gcOs5kzt0TW1YpsYJRpD:f++/4uPITqLjEoPF/JocXxSK79Df
False
C:\588bce7c90097ed212\1053\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 76.12 KB MD5: f8411f3cfa016899a40fcb73479d401c
SHA1: a73898646c9dd6e96f2a1ca4f1ee1aae90982ee0
SHA256: b9c326d52ace350c206c34057dbe13595ac47146a502df5d50c117942a2d1310
SSDeep: 1536:XtTMJwaota0lLWQAG1dbu1obQGigVLQKcNtjFNBjLUi9fz:Xyoth1WBG1RuyQUyKetXBj9r
False
C:\588bce7c90097ed212\2070\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.59 KB MD5: 2a5cdf156f6353e84838d6162fd26f8d
SHA1: 77d45ec8ee5cce59ee74bd1fd2b9065b827f822f
SHA256: d8222c0547a1a907c2ebf4c1aed2fb13cf54aab0223f25aa9689ea310222ac22
SSDeep: 384:9eJHE7t3Lc+/a34psgcggiZegP/Mmt/cI5d3GNzkQmONgN3OUf5Vbg:9epENctysAnFckB55G9RmqU5+
False
C:\588bce7c90097ed212\2052\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 14.09 KB MD5: c1ab0a77cc1115fb1888e1e914ceec6e
SHA1: b64a4f66a4647140840449564848cdc36640662b
SHA256: 00b53c3f53d5c28727e9883c873c3b0c62b505eb035b870ef4f7c2c9b403e515
SSDeep: 384:Og489lliJ2HUuJ4T7UqCVmpiUE609rwmJpYYdxLfa:Og42wJ06XULgzE6eNzYYdg
False
C:\588bce7c90097ed212\1055\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 75.27 KB MD5: 189ba4939ab439b2bcd17da06a6384f8
SHA1: c7894b96b87df358524a2e20c604cd84a682dd8a
SHA256: 8ba44b125a507680e91d27f2273ea113daad76f70c86479b4bd134e15479ff20
SSDeep: 1536:Nos/bBJOPcnUFJcWbUxkkqSvW62AQ+MEmWuCcp5bq:No5cKZM9vdQE7uCcp5bq
False
C:\588bce7c90097ed212\1055\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 4.00 KB MD5: db6c1f547775c33e2a3b42600914d92d
SHA1: 1528dff1d444a75e358e9d37ea4de759644b0269
SHA256: 7250bebad89044dce41a1701e11b1a6018ef142f9b348395cfbb62f321de2a9a
SSDeep: 96:zezzFdAOp6yvpFqwGWWjFgzFtpn/sXC25g9CCGVyYb3:SzPXU2jqwGjWJtp/sLg9CCYb3
False
C:\588bce7c90097ed212\1045\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 4.18 KB MD5: 0c32ff85f214cb6a3317820f6eb91a7c
SHA1: 23d70872cacd9c21fe3e067600569a8a69cc827a
SHA256: 06f5fe630fb13b9790e88e92149e81a649ad0d63e3bf76a409ff2a85f7e755ab
SSDeep: 96:g5xd7pxhlpxVz/fsAsOzJVIC+mYLWfiAkPmVW9on6zV4NmXI/:g5xdXhlp7skOeWmA2y4Nm4/
False
C:\588bce7c90097ed212\1037\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 16.59 KB MD5: eddadc2b9addb5d30a47cee16e4ed3e3
SHA1: 731bf91e85a533658914becf6c5e451b9d67551b
SHA256: d237a3043bec4df479768e0ec96baa1611f39de02902fadf2a3c8ff420dce284
SSDeep: 384:BRsbzM/LQDkJvztOcjXQjHycljNuAsvc7h3pA:DsbA/LQcIlD5YAs07t6
False
C:\588bce7c90097ed212\3076\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 14.09 KB MD5: c892bfc12df9f4f3e5efacfbca471da6
SHA1: b18c089eb4a05d43dae0028513b3840e2caa47c5
SHA256: ddb037ffa6e3e2d5ea988ca63823b97aa620c5579aac556646a09f7f939523aa
SSDeep: 384:SeluOnnUOnriftSN+qFsX/RXJRS/BNOr16QG738N:RXnUOmf0N+RA083w
False
C:\588bce7c90097ed212\2070\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 4.14 KB MD5: 0161c87247bffabe296036189ba602f8
SHA1: 958598d33fbdc309098171dd29ff03262e2b7583
SHA256: 75cc2f127a45d98abb6aebf68b3389ba7945f251e9db6057723ad776b0a9f80e
SSDeep: 96:qA+Yki3pT4/F4ILrRQ8+tOKh+qjpdipqxur89cq:83v4ILVQ14LUprA8aq
False
C:\588bce7c90097ed212\3082\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 18.59 KB MD5: d1e746c1634638a855789da1a819e1c6
SHA1: d67a07c9edc448182b002f2c569987dbdf90b7dd
SHA256: d299c0bb9582129c123403fef6f4522b08ba84f1b5b52e0ebfe982a3f43c2713
SSDeep: 384:SnhUzbZZbPhSbbRf2BrNbw9rImV2Z+o2yioFRSM2zFZdmjhbamkgBl9ciKA/:2+zLrobybwymV48y0ViWhcLck/
False
C:\588bce7c90097ed212\Graphics\Print.ico.id-B4197730.[ms_13@aol.com].ms13 1.35 KB MD5: 47d0a63b83830c68635772f0d6e96156
SHA1: 4f734c867a24efc1bf0ec9d4d8a48929841b27c4
SHA256: 7317363ba218d6110986ae5d80736f067fd0b3cb3a2c81ea991f32a94c806579
SSDeep: 24:cZ3zLZjnLzg2QfA6nAbTqpzeY9HZBhZ806pZ6PJ9UJQmjf5Zw8imjcBHfhl:EjdjLVQPnAbTk5pDV6p2uQmzfZikgHfz
False
C:\588bce7c90097ed212\Graphics\Rotate1.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: 9b04bffa3954b13da6b25a1dea56a875
SHA1: e87efbb91d05a03489a5bacfb882e8d837a483ad
SHA256: 2594ed8d24885a66464bdb32d4528af14b4c5b06260a93a5d97de36af81cfb6b
SSDeep: 24:J4SwwyN4Q4837RStY3JJDCkWER6uX7ljXIGbdYep0f/HfH:Chxq8BDCkWCdXLOe0/HfH
False
C:\588bce7c90097ed212\Graphics\Rotate3.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: a014d1d8fa01e1126e5ef79bc2f6638c
SHA1: 3d93c58c19d15ccd0746e9ac41d543a313e63caf
SHA256: 91d66d59987a893ba9d083ec82bee2bef7d4cab13fdfdac0381000219d51bcd0
SSDeep: 24:J2P33RJNunm3E1IeiQV91MIBAaeQwvsK74B247cHfH:JUrOnMcApvs3A47cHfH
False
C:\588bce7c90097ed212\Graphics\Rotate4.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: 1d5700643d63c30f7b219bcf5a733821
SHA1: 6c5aee7aadceaf1072fc259ccc25b05abfb52aae
SHA256: d2887b1b51a40eabf5995789e61146703287196b60658622b64e3bb7b230720f
SSDeep: 24:mK2Gy6XL9vtLbzlOSc3Sab7abCmOh7tEOHat61cnSAGeRQg54HfH:R236577NaPatOh7tEoe6wS/eRQg54HfH
False
C:\588bce7c90097ed212\Graphics\Rotate2.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: b874f4f9f33cbf139a687a749efd33af
SHA1: f3aaac6d2acf74dd1de534a643a7f677f99f2922
SHA256: 01d2f8b94c751a9c0acf398e5b094717f69bff995edda3d81d51a308a8f0c042
SSDeep: 24:cjOCVUZhT4WXOpGN2QmZyHi8V+1uRXJU2pAcUcLX5GOHfH:W1qZVfgQmh7uJJU2pA4LX5GOHfH
False
C:\588bce7c90097ed212\DisplayIcon.ico.id-B4197730.[ms_13@aol.com].ms13 86.71 KB MD5: bf38d65c62c216e8a2b478872988391d
SHA1: 459f783ba28e0493246ed19eaca1d9f1e846e84c
SHA256: d8139f3848c645906d3d3597c46f5b6632af661f1ad1f580813cc81034be9a09
SSDeep: 1536:WdPht5GW2Cpb3SBYiE7g9kCrHSz0vcwZuRocA70prdtJh7sbhLCHDCgs:WdPjcW24eiiEUcmw/7sbhLCHBs
False
C:\588bce7c90097ed212\2070\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 78.62 KB MD5: e6a373e1fb99f838caed744674ca5377
SHA1: 2e6a544d3d4b0cc41c5ff04c0df985da15a8eb06
SHA256: 0e4a4ea38b7432a27326646c518aab1a5256a81c858ed696c27b57cab986eae5
SSDeep: 1536:eNbvoISJHcVLUSYErqtMcPIBQunrkHqepxA6snq00y0DQx6lTa2:I7fiHcVwE6Bn6rYpxA6snqxBk8a2
False
C:\588bce7c90097ed212\1055\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 17.59 KB MD5: f97b9595e306393a657816bc6064ab6f
SHA1: 946660c86bd4f93c8ddf0e5e7c5f194934fe31ce
SHA256: 7a7d9fe88ffcaaf6249e261646e1cffe3a26cc16a03ba738a2d2b9a9ca3cc64f
SSDeep: 384:Ocj54AEjjwh3G1X8HHjT+WgXjOLOIMZxXw7CRwrGh+BsbAW:OcN4lHwg1XXjE6ZxA7CGrGh+K3
False
C:\588bce7c90097ed212\Graphics\Rotate5.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: 4e8ec157646b63a1de5fd6879d7011b5
SHA1: d1cfe07947b584f5365b8a41672a86892cdcf8d8
SHA256: b54aa47aeaa305d6c0917fdc9cd481f54ba7e66a95c663a7c6ab453b2a30d7d7
SSDeep: 24:o+UOp01EJtMDXgPdy5QaXLdQyferqNscQX7vGcHfH:2OpKEJyDXu8ZWZqNscQrvGcHfH
False
C:\588bce7c90097ed212\3076\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 6.39 KB MD5: 7bf12e1b5718c4b3c6c9805018077fc1
SHA1: 6670302f97c0f9834b87dfb4bb0b59483388427f
SHA256: 07c8e8cb31a1367ff8c5fe3befab86eb5736c53e727e35be374bc9a81a424125
SSDeep: 192:71RuBaIhCk0vIy2Q8ewvAM/0V0lH9q7SQ+9dLWAl7klof:pkHjeeAMcyq7SQ+DyAlQq
False
C:\588bce7c90097ed212\2052\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 5.93 KB MD5: ec3096a2eae34cbb68a67055bb37efd8
SHA1: 12da6a778c25e5885f946d071cf619c9bf77233b
SHA256: e36a4cb961aad139142dd71c4f86aa60facfd94188f6237dabf3e89861039d3d
SSDeep: 96:JKZni79zu7pvmIaCAcB5RWE60QnAF7lNWU8CCGc6HnOeycrxA1ao2KJdNslW:JKZi7Y7pOBCAcBrWvAtBnClUnOe1AH3j
False
C:\588bce7c90097ed212\Graphics\Rotate6.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: c2ea726f14a478e566431aa2fbfc494b
SHA1: 4c233babd4614a142065fa3861a098f16e8bdcc9
SHA256: a92acfc26b4cb858a36bf43271a0cc2aa67b7c46f832f1112dd24341c184d010
SSDeep: 24:L1M3TISQVOhGEyVPKiLRY3oUDx31cTVTMwHfH:L1Mjxhby7VzUDxSTMwHfH
False
C:\588bce7c90097ed212\Graphics\Rotate7.ico.id-B4197730.[ms_13@aol.com].ms13 1.10 KB MD5: a75089e372bcaacd5b4b90a3987792d9
SHA1: 2f49fcfd19dc8f3247559c69240dd21cae5b7747
SHA256: bac8eb2817d1eb56d2dd8367c2f7b5e741b40bfe36af1546290940163921de56
SSDeep: 24:ZXk/mrheo7Mn1qqIWDWlVwJ21plLzJDNTEHfH:Rk/YheTjILlF9vPTEHfH
False
C:\588bce7c90097ed212\Graphics\Setup.ico.id-B4197730.[ms_13@aol.com].ms13 36.08 KB MD5: 0a90155474a4a59e4fab07c5f176629c
SHA1: 62b578e145f9b0ad3dec9643cf9ba23b9c3db3cf
SHA256: 3c58ab38fab961198a070c136fa3338a3a372c6d9776404736feb20e5055b183
SSDeep: 768:8S4k2Jsuc4FB5V/PT0Su6M3EjWQc8HbSJa99Wj1HKPmRs4dgvY:DVUBT72P0Q8H6aw1k4s4dgvY
False
C:\588bce7c90097ed212\Graphics\Save.ico.id-B4197730.[ms_13@aol.com].ms13 1.35 KB MD5: 95e22d7587353032cc7bc95bfb33a97d
SHA1: 64658a5c09f654a516551a4b6524b855f2321ca8
SHA256: de38022da17b71e72b5de1e7b2a8d3eaa06d140f3246098be984043771497f86
SSDeep: 24:6/fqe0FtmKvoOCLq3Kek3sTizWN/fXdhbVQG+iNvKZGhltdVs7vdWhtK/xsRdoVK:A6bmpOCXe8yYWdjhtPZ5TVsxWHUxsRdT
False
C:\588bce7c90097ed212\3082\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 3.22 KB MD5: 8ddff0f1d09ca9daa4d9ce79484d622b
SHA1: f3ffb3adf477b04f06fff8c130c7c72f9df0f334
SHA256: f5db4cfb69146cf1cb6f03401ba31b3b42077b9f348ed41a3b261c0f7ee05bdc
SSDeep: 96:9OaiuzHXjUbvk00M51ODxyaymnBwH3VCQ:8avek00MOxBwXIQ
False
C:\588bce7c90097ed212\Graphics\stop.ico.id-B4197730.[ms_13@aol.com].ms13 10.13 KB MD5: 982f835a97d3d50507bdc5b7c910ef78
SHA1: 4f6c5292cccc5360254760054df66ee5f1ad1a24
SHA256: 1e5c68c2e8bedd53af73c403c7486f3fe2e2ad6838bdcc40a9ffc659ddacfa4e
SSDeep: 192:D+a+aqknIeFBKIhIqfJd8psweOKzz5qWRmKZtV19IVqidBqcA3d/1:DMkIQBKgIu8yw0zBmKZgPAcs
False
C:\588bce7c90097ed212\Graphics\SysReqMet.ico.id-B4197730.[ms_13@aol.com].ms13 1.36 KB MD5: 609412ef1f44d1f9e7f84b47f00097ea
SHA1: 95e320ba895265a64f2f1b78e53d06fa48f2221e
SHA256: 70ae867e06f8a2edb79726a27f415a36a573989ab7e550147f9856c76597e3a6
SSDeep: 24:/XVRnks2WcPtUEHEqU8p2/lE/tRlF+tcTAaDeze/+fcq65/0ReBYf0hFsF+E5G38:/VJkDLTkOp0ojlAgAaDePcq6F0wTiVbj
False
C:\588bce7c90097ed212\3082\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 78.37 KB MD5: a0899ada1368a635721747e7c7391be2
SHA1: dcb71cdc7e49ec6ea44036fd0caf28b8c04afdee
SHA256: 09f6a6ec97685faf9ae4ddd67c17c046d95fd1fc2f71805123beaddf6e3580dc
SSDeep: 1536:dpbpmue6ErlJy71lZE3GkQX+LEuu/d4g+Ei5i5U/GAL8AKW:dZc/6OaXZE3Gqq/T+riDAVKW
False
C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico.id-B4197730.[ms_13@aol.com].ms13 1.36 KB MD5: d724ddd3d4d31d14a665633a457743a0
SHA1: 672097999e5801ea69fb7325b66ed9cfb655ca18
SHA256: b3bba919a34a6c919ca783feab47a374c0af6a3d351a54568ccb4ae61a279e5b
SSDeep: 24:mKvbgjdBccmSRW9kkbvUCgun7uncmyAi9B79EKeskDdts2Hfl:7UEBSRW9kIJ3CcmGT79jFKde2Hfl
False
C:\588bce7c90097ed212\Graphics\warn.ico.id-B4197730.[ms_13@aol.com].ms13 10.13 KB MD5: c88b25494feba72791def453ef62215a
SHA1: ea5b9544e8a405f7007a724c0792b20d69b67630
SHA256: 13019c2488683f1adefb1eec1bbd30201c367e3c00acfa853cbd3120e283c970
SSDeep: 192:uzaAqzBWnIP+8P/3ttfd7iTBYg3424WlACwuZ6/OUt5oqexWqda/1:uzaAZIP+8PPPfduTrZ4W6C6/OUtKxk
False
C:\588bce7c90097ed212\Client\Parameterinfo.xml.id-B4197730.[ms_13@aol.com].ms13 197.32 KB MD5: a477a8f5139d25bd07dd801e2ef53b41
SHA1: fd80ec70f7413b29297835c93f3679d26ce9e89a
SHA256: bbe2b6a2cad2cd6eec45268b4a1ad1a345c95f5633a234b4baa785d518f25832
SSDeep: 3072:mU0QgGqDiM/2vf+hMNl40BTzqEgoay4pvW5lvbHBC2iqsWTsr8woC1JgWWS:mU0QgHDcTyEQnpgbM2iwKJgWB
False
C:\588bce7c90097ed212\DHtmlHeader.html.id-B4197730.[ms_13@aol.com].ms13 15.99 KB MD5: afd96e244061a238c1ee041749f1bf5f
SHA1: 75b813a4192d5d2376595a82ac59a7e2d37f19bb
SHA256: bdf919c71f53e118c69d3cd2cd3bc0be448474d09ec047a44e79e4ceb69ed58b
SSDeep: 384:SP3iYRGQ+XxHvx6ld3+H8lFuRvc+lxATHf/zgTkBhS9OH:IlRGQ+XlQbyvc+LAbfLwknS9C
False
C:\588bce7c90097ed212\Extended\UiInfo.xml.id-B4197730.[ms_13@aol.com].ms13 38.37 KB MD5: 73e4c1c94a96654e8613bd39eaf838ea
SHA1: 0d350e8c6fd57ac11fc47b345798ce4e0e11d432
SHA256: a90ea55f4bf5acf6f04b199a8d8e643ccc577467c28ed26c9a9b996b6741432a
SSDeep: 768:teRZt7fr4LbQsBAym0K8rlS3lO1tBLKReKDZr3Jh1yRGsTUzutjra+:teRZxT4fQaIex1vKR/DJz2fT0+
False
C:\588bce7c90097ed212\header.bmp.id-B4197730.[ms_13@aol.com].ms13 3.77 KB MD5: cd84fe0c3952ab3e92065b38d69e5273
SHA1: 4579fa2f76f8b10d27cff3396c69caa60d0118f7
SHA256: b6ee191869a38ec9381cb602722cc7f3042003110f89912fe7bc8c90230ab085
SSDeep: 96:27mYHaOHLK6PQtpTPtBZTSl00TBrMRBaRXZmbncOzV+Shbc7LDS:OHaOHO66X5g98BkZmzV+Qbc7PS
False
C:\588bce7c90097ed212\ParameterInfo.xml.id-B4197730.[ms_13@aol.com].ms13 265.91 KB MD5: d8909459cfe30b40ba34a1827b5cb815
SHA1: fed08cfa352f5e5fa6ee48092bfd78716a718a37
SHA256: cda8be84a6579d4213b91e6fa1a23d60e6af424013a817a5dc82b38770641705
SSDeep: 6144:YtKwq0T9IbcUXSskglXGZSqk38DVNbbsfPLrF+Ke9BxJur:8ubcUCskQHqtlofnF+JL0r
False
C:\588bce7c90097ed212\Client\UiInfo.xml.id-B4197730.[ms_13@aol.com].ms13 38.37 KB MD5: 060708aeca490a36c75540605f23667e
SHA1: 218cf77d6b10d9271d951640583a7cb963467165
SHA256: d5dd7fab68c16c778657915cc2e299dd0b7f1b9c0cb23eada40ae08fbf6e0195
SSDeep: 768:pdLzXIZvLNhYQizPwUbG+9+jcWGL5bQ86aLFZ1ccAgo+Z5zkay+6:494zbyTqVbQe1uRj
False
C:\588bce7c90097ed212\Extended\Parameterinfo.xml.id-B4197730.[ms_13@aol.com].ms13 91.38 KB MD5: 8e3b29db17b15562ccd3172c253c8122
SHA1: e067e47833a2e5131e40996d93b66f6fcb748e2f
SHA256: ec4c879d63831d251effec0b09b6f1067ff0a7ebe991a5b8c634f10d903100a3
SSDeep: 1536:MZeCM4G33zLNBEPO0zxd8D0ZalLU2LotpvSGHQI5PCPD3i4eMQKVOCg/x/Zp:8JGHz3qxd8dRnLap+3i4eMyCg/x/Zp
False
C:\588bce7c90097ed212\UiInfo.xml.id-B4197730.[ms_13@aol.com].ms13 38.23 KB MD5: 165aedea2598fcdf9ffdbc94db1ca3d8
SHA1: ed989c99a086686b5be9a8db8f8ea3735234e132
SHA256: d38ec30c5d01d5592a4e97cd02aef79dafdaf8fe34854466bd8a7923e1e88960
SSDeep: 768:7w6ojBZtCh8FlPebn8NoOy7mJODySEFsIzt14KqM4:86YBPmlQNoO1UWSE2IT4F
False
C:\588bce7c90097ed212\Strings.xml.id-B4197730.[ms_13@aol.com].ms13 13.99 KB MD5: b8cd618dad9c35c382370811f9348f60
SHA1: 2279695e52bdcb4c9321dbe1786cd045bba22928
SHA256: 71f5d06a342814c10419693b31abf18bd0794642ee9786606fbbe18d9a330632
SSDeep: 192:dLwGQmnZEohOAVfwuPLkYiV6/8YC/HjpIDHvKjg05DKyfEQALgdnctAPqfF7FJF3:VxhZRf5C5YCP2DSjfmyfEHeUAPITrL
False
C:\588bce7c90097ed212\watermark.bmp.id-B4197730.[ms_13@aol.com].ms13 101.87 KB MD5: 5c173eca3ac75b01cf4934b53e95df69
SHA1: 2af6644414c0c25b856819f867ae86749a06800b
SHA256: a39bb09c0319b277af67b0ac35a221cca45d50b780b5f74ed69f56b56857c1ea
SSDeep: 1536:v5/2bMyxkNieyok8ZAieWrevnIkZuuNECDfhCQIPKop0xfTQ2Lx/5T8NuGgFFmVr:vh2oyiyodBeWCDeCbhZs50H5N8GFmszM
False
C:\588bce7c90097ed212\netfx_Core_x64.msi.id-B4197730.[ms_13@aol.com].ms13 2.56 MB MD5: 11a9b08f5f9b2208372a9f0ff87cff2a
SHA1: 9393520c815a1ed4c2737c0a631ba961c72b8f44
SHA256: 3a7fc1ec467c7628d8e1d40e7b7fe4d37c8de43ea663c993454668d0ef1216cd
SSDeep: 24576:nc+BQbPyxbs4rONS5voMfjhOGxHNcTJHKoAX7aNvvbuPxHrVLPsVlfglN9BVB:ncxisfQxoMLDN2JH04HbwHRLPsVqHFB
False
C:\588bce7c90097ed212\netfx_Core.mzz.id-B4197730.[ms_13@aol.com].ms13 173.83 MB MD5: cc75e7bda8993fedfe1a6badcf08dce7
SHA1: 9f7920f930c3874402c2d3c14535e2bdd1fe4eed
SHA256: e104262286e666244be9b1244b073d074f316420ff783d93d664a93ea8c7c99c
SSDeep: 196608:GV04YyKSBXZ35w+KBK2KJKDcloT46ooP8ZNoz+hK12RP1O7lT:z4Y7qZ3CwFISoT46ooP8Zyz+hm6Mp
False
C:\588bce7c90097ed212\SplashScreen.bmp.id-B4197730.[ms_13@aol.com].ms13 40.36 KB MD5: c02f29672290a11870420a8d1ae97590
SHA1: 2ebe276c6270b3da9f90ba01936b73a079dcd27b
SHA256: 6ba8566451b32ab5c0c225b179557a5686ae6535690dadb4123654d638e800e8
SSDeep: 768:g9rR8oM46/DDaiXIhkq6uHoY0CN874RiSeQVBXQoELGEwnDW+dv:gHM4Uap/65CC4VhDXQxPwD1
False
C:\Boot\BOOTSTAT.DAT.id-B4197730.[ms_13@aol.com].ms13 64.25 KB MD5: 196eed7b0318ddbb520d5d5aaf7db3d7
SHA1: 66ae191e396b5e493890ce9a6d77545ae793b242
SHA256: e75698fbbc8cf11dce094b42ff77bf46a208371fb52961f8a90a25a27d3fc9e4
SSDeep: 1536:K77yvb5C6i+Lsk7fwknJYp4oxcUKYKH9TGUJbws:KXu5C6jLDTwknJXOazHdGaEs
False
C:\BOOTSECT.BAK.id-B4197730.[ms_13@aol.com].ms13 8.25 KB MD5: 63a80110b66f96b37ee87beaca03a90a
SHA1: fd9727656ed07469c9255eba4f9e911443f8a0f0
SHA256: 96f22576c392ea92e40967748a6582685c983e5dc8de53784175972cba5a7198
SSDeep: 192:IELNEgWmrVHsUZjuLc5SAyC2fhDnZ4vvaZOpLPzIJCZ64rN0G/H/n17:NEgWmrDZjalCexECOTZ64hbfn1
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 4.62 KB MD5: b72125c60358e2181a9a0944289eca72
SHA1: 7b521db620d7cd172574cd2dbb726a0e1bc78f92
SHA256: af463bcb815fc3ebb23a9ad4ccaf64c093ecd180162cfec2b1c9c14acad1120b
SSDeep: 96:qhn0BjfBIPX63JLvCg/Fqiy1HDmfYVYKo99cgH9wpVSg0bjEM:q2BjfBsX65LYiKjmfYVYz9hH9+EgGjEM
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml.id-B4197730.[ms_13@aol.com].ms13 4.30 KB MD5: d171522ca259c7b1c5b4f2d690a770fc
SHA1: f90d710740b4bb45b8525e13daa06233cc0b3299
SHA256: f04146ceb126d4a63a6209afc4deb18cc9bfb44aeeb55f1f7d2e78987915ba06
SSDeep: 96:Og8wjfMUO9O0cPKccbaI7aQKDKvWWlTWdvMPrwd7k6jiS0Cn82GPk:v3MXTAKTWI7a8FJjS7k6jTXJok
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeUpdateSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 4.93 KB MD5: 8e74cb350020437097195ce8139addbd
SHA1: ee00f639cc581518098c2072008dcbd9d20179f3
SHA256: 23fe0fcea45ce367d99d313153683c530b44a7fdef6d6696e82065fa1cae4aed
SSDeep: 96:B1bI0fqx6KzwqhytzvoOdt8INRuVbTlpc1m6QzI8x2YiVlmczkHMvlukhYHPEi:BBe6KzwqhuzvTIfpcLNc23mczcMxeHPJ
False
C:\588bce7c90097ed212\netfx_Core_x86.msi.id-B4197730.[ms_13@aol.com].ms13 1.11 MB MD5: 60f21aa68a0cd57c55aa745aa61ecaf9
SHA1: bc0ac94c146f81fa8d7a6872db42fde7efb17787
SHA256: 27b92637e487fb27e8e3c991c09858a68bd573a8204f0d13e123a154be042a08
SSDeep: 24576:71XFMj3ZsjGv4j4aH8DOn0nevgW/+G1tWEz87vc7:BajJTo+DIxF1kW87E7
False
C:\588bce7c90097ed212\netfx_Extended_x64.msi.id-B4197730.[ms_13@aol.com].ms13 852.27 KB MD5: 112a07a9bcb80ac5cb8fb84302b0768a
SHA1: 667b92b57669967b0d932e678fd62c63fed565ad
SHA256: bf6235ccf32499ee73a9557924b7bc680e6b95dcbd4cb55ea09a1b4e537ec6ab
SSDeep: 12288:qgAYvaQSxwxWBWxQpUcnbxb/zj11TYYj//e6zWSd5KZw0wFR7JfdyEjjHr9a++y7:qglEPWx8NHv//eoHAmJfdHnHhvj3
False
C:\588bce7c90097ed212\RGB9RAST_x64.msi.id-B4197730.[ms_13@aol.com].ms13 180.75 KB MD5: ff61607770f80306624270cee43eac29
SHA1: 754fe00e4c31a091a122167e398d8fad12aca3cf
SHA256: fea224e0f7bc30b9f460bd6c1f17af8d1af90ebcfce298efe36bb89cc5292530
SSDeep: 3072:6hmMHtQnreqyW17y7E6WMnXq7oEQGRgqqRR99MtVYHeT8IUEee32gG3A8tuA3Z1I:CHtweql17y7E6WMnXq8EnC9Jz+T6/AxJ
False
C:\588bce7c90097ed212\RGB9Rast_x86.msi.id-B4197730.[ms_13@aol.com].ms13 92.75 KB MD5: 21b2e6bfa4c27ca1ac9098fad449116f
SHA1: 09a9eea788d25a47bd9f41487e18b1710a441d27
SHA256: 12977a718dbe0de71e0f4145d760a70d411fc12c92994c7520d0b2a8ec523c19
SSDeep: 1536:jhmD9ewlcDxladXHEnw9eZosmdm52M6NZyx9t03Yd1wwmDisYUeO+NTUk:jo9QlMXH31swm52/ZI9BmDwUQNTV
False
C:\588bce7c90097ed212\netfx_Extended_x86.msi.id-B4197730.[ms_13@aol.com].ms13 484.27 KB MD5: bf9bac6217ce81af1b906a1d367d03d2
SHA1: e2f3d0d1c0b9aaa3e6662393ea7a79bc3bb8ad89
SHA256: 9ab5ec9494e4e48a20ef642e610f0c899f32e565bf64e1ea0f7ccb8a260d3223
SSDeep: 12288:1laKvm+DNIq0+mB9jI6AdxvTINsa4uH17J5Frh5R:1laALxIDF9GgsZg7JHrh7
False
C:\588bce7c90097ed212\Setup.exe.id-B4197730.[ms_13@aol.com].ms13 76.55 KB MD5: 883242d7770f4c957c907f02e0e39a2c
SHA1: 20634b0d54f1fa1d31684f48848b2195fa4b8982
SHA256: 93c0834abb7069c38b13d14e9d4aef82d2337e489e33b98862625fc3b236d408
SSDeep: 1536:2T1+YHokITVZv0kBxBjhDfsuY43+0pR94yQmIQtkkm/NG:N8okIT7BjxfsEDZIQtkkR
False
C:\588bce7c90097ed212\SetupUtility.exe.id-B4197730.[ms_13@aol.com].ms13 94.08 KB MD5: 8891e3fa19e30e11258d8c5542f945c0
SHA1: fee7a9e1449d4e83b7e45a72772b40bdf0975bbc
SHA256: d08b42bd9d304db5dd7fedfc3f1bf5f585070396f064c0419155f38e4c2b0083
SSDeep: 1536:dQEChO2QXH38LUFL8pGjRoIqZqKT5H5Zzw8oo7xS0jYBcTKZQcUZ1h:dQEJsEopuAZ55zjlZcC7T1h
False
C:\588bce7c90097ed212\SetupUi.dll.id-B4197730.[ms_13@aol.com].ms13 288.57 KB MD5: 35442adf47216383ccfdba675e69c1c9
SHA1: 399342b21c3e71243a6809cc605d4078f6f08dd3
SHA256: 257f880e9d59c166ddfe34bcd74b744ad6fd1a75b9633ece5cae082c96af3bc9
SSDeep: 6144:hxLJCmy9hgz5Sm3mAPLJbEpSbY0YkGqxZpRqGiGZI8QW/h1tg:hxLwmy94zb4pRnMpRqGiwJhI
False
C:\588bce7c90097ed212\SetupEngine.dll.id-B4197730.[ms_13@aol.com].ms13 788.58 KB MD5: 6a2079fd7face4d247904191d5c0efb3
SHA1: dfe816787d198270738eeb20466d603e05348298
SHA256: 1e86eea50e2ff55c5fa64979490fd51c3e59539fc1b36f054c190b3acfb57381
SSDeep: 12288:2m4u8Bd2CVll+YhUnMVhzfqrti0HNtfC7hxLssPKblFhrMlddOxfUleW3Bgwb9hY:+zBn7JVhzfqreXsjbjhMlH8fUBn9S
False
C:\588bce7c90097ed212\sqmapi.dll.id-B4197730.[ms_13@aol.com].ms13 141.27 KB MD5: 9e3010cfec375553fc6a5cac9fd6340d
SHA1: cc962ab91168196fbfd40052ac42b61b56c37197
SHA256: 31e0fde6a07f693e640d97ca09759ca344d1df704ebffb7f62090a6a657f9303
SSDeep: 3072:8gK5ihOi2RObqPV4bdRzpzDPfdWYrfI8AI6eHiybZPGrOSG4bSLRL7cx:8gU/i2MbqPa/z1lWUI8D3iylOSyb+7a
False
C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini.id-B4197730.[ms_13@aol.com].ms13 0.87 KB MD5: d15e4d87f4037ff506a546df13846651
SHA1: c1073a6ed600b261a9b951beb195b9fc55154826
SHA256: 03172be2a543f2564517b569bf03a11223669ed3bf581028473da91ec183eda8
SSDeep: 24:nTN3Oc8lNt2k7zNoEoT7eJZ1v/2h2Gsp3Koit:nTcc8lNVNoyJzv/nwoit
False
C:\Program Files\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 0.40 KB MD5: c2cd7209a2159e722585bc0fe1df557f
SHA1: 3607c391e1c4d82fe9529e9ea37e65d02c343144
SHA256: e53a8f4ae57cdf212fb475a41ec8f58cc9dec6293da533957590f2950c613f15
SSDeep: 12:aOimAsQ/mX5HVf9s6rMVqhUG3sciMIY1Vaoit:axmX51f9Fpp3Koit
False
C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.id-B4197730.[ms_13@aol.com].ms13 1.62 KB MD5: ca1fa1415cfd1353c698d25b2de89dff
SHA1: 5cb9bc27e3ca8ea3277e0852d4a8f6accee5ec56
SHA256: d72b47edb87e2da8efa6b600bfe8f943fea579b0d3e4f4f6c99533669a1b4f54
SSDeep: 24:/DPg+SFzoCGpHccz7nis9u/394QHILOtNIwkdPMZGA6RpyrizOzFXD0Uhdopp3Kh:/81KCGGGni0c3fHZt2PMgb+nZ0UUOok
False
C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.id-B4197730.[ms_13@aol.com].ms13 14.06 KB MD5: a03a2df7e104717e2713e4ca09ede145
SHA1: c03ad6d8e6f55b01938917b344f51f81ac816fc3
SHA256: 192f6625f24864b8a147f844816e750022686c31ade331124712723da52f1764
SSDeep: 384:GX0i6hAqJ0fDCW8KlWjC+05r+koVvTbHu1Y:K0aqJ0r8KlUK5yki
False
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.id-B4197730.[ms_13@aol.com].ms13 8.62 KB MD5: db717dca309e02c7321cfb2397bdaedf
SHA1: 6dd69dedd1a733235b1ea10a3ab8aaa10bebc1c4
SHA256: b5634baa797b9ed25744a30ea03a304fa82b14d6695a934ba49bce917875d535
SSDeep: 192:2shlz4ioMmcS+puPtYtm6gt0/PeK5YY9qKDRyj9phGaRSrL8c:2nQSsEtThJFYz0RpAaRM
False
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.id-B4197730.[ms_13@aol.com].ms13 7.87 KB MD5: 0753418b8d297f36031a533adff2cbc8
SHA1: c30325299d765fdd02479eb715a85c24857951d5
SHA256: 483646bdbc5d91968d322ab5201d6822932d38942ecaaa21ca19890338d5d2a4
SSDeep: 192:DgE2QWAveduvN3kh7I/t8nBOkO/ibCxgu+Yw1pNYLnBao:DgERWLdG3Z8NRCx4VnOLnD
False
C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.id-B4197730.[ms_13@aol.com].ms13 12.21 KB MD5: 337ebc867673ef544093796cf2cd49a6
SHA1: 1bb2441da0b5d791e2e262db5da58f0376ca825e
SHA256: 4eb84b4340af4bc1f4967974ce7ac8b62151d516aa39dac0ea8af42d1f585942
SSDeep: 192:ACshQj5uyn4eOFQOXA8cmhsbskSypmGFFkYmNGc6uavpH4YNqpWDLfGnzaUtM:ACAQjI04xFFX6mhsbgyVmN32rQpW3+zG
False
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 0.42 KB MD5: 4907cb87f77c787d2f0ba6843993858f
SHA1: 975fac146da2723e65f912a5196c0ba699c1a3a6
SHA256: 6754d2242a820978d7a1a1cfbbf592cf2244014a665094fdec151d4c822de5d3
SSDeep: 12:DtlzY74BOi9Mh3O+rMjGeJUG3sciMIY1Vao+/:wWps9+p3Kou
False
C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[ms_13@aol.com].ms13 5.71 MB MD5: dd2d5ee8388e440c82b3f056ebe8de06
SHA1: ce10cd6dd236d10cb237624ccab601a0bd6f5f43
SHA256: 1f7b898018d56995dcdf656b67c796469be1121befdbadfafb2692966ed0dbbd
SSDeep: 98304:uuEAUjb7BkOKxUKnat45mFe4H5+Ju4JKUYc93iKlOKafCoQ:e3PBkOK2Knq45mY4H5OMKkKY9Q
False
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 0.41 KB MD5: 2d3f0088106f76f663f60df498a981f9
SHA1: ec37bf4861dd1f55869012037d99f7d99799cd29
SHA256: d44da950f31d5be9baaadf4203d5593a2c0eaefe6f536db989b797192a04a38c
SSDeep: 12:YBxEqa7gQED9q3H5+rMjYnUG3sciMIY1VaoK/:YBxPQE5gEsYVp3KoK/
False
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 0.42 KB MD5: f0f3daa00662df3b987b8e97389e1c56
SHA1: ee5999d43810fda99b1bbf103ee55160539d95dd
SHA256: 5450eda53d897ca1bee92f17c35df26ed2b4aa0ef270fe6c1a5a50f1b5e79b29
SSDeep: 12:Dk2zNRAhgx8TxqiBJ1oq30a+rM1kRUG3sciMIY1Vao+/:Q2zjHEUpyk/p3Kou
False
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 0.41 KB MD5: 657d665a719708dd8c859e7eaffa6371
SHA1: 9be1f10c20c4d3e3c637a1000e309b977f4088dc
SHA256: d5f6f6380843f9c97c77e411434be434bc5c7660cbe04d7ad04ea6a399f644cf
SSDeep: 12:Z5u6b8KqJNf3JeJ5La30b5+rMmMnUG3sciMIY1VaoK/:ZR8KoNInLHEGVp3KoK/
False
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 0.41 KB MD5: 6d84496b8270df099d0754b3deaf051e
SHA1: 5e3bbc8e7f449ba1abfbaea71789bf4775d58ae5
SHA256: 63e03ca1dc24950a015008be1af7470869aa69c1c0548ec1231f52fbb2de4394
SSDeep: 12:0wXSFsVATi//Pfm3q+rMJ0E/UG3sciMIY1Vao+/:0wXoRiXo52p3Kou
False
C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 0.41 KB MD5: 347e43b65c29a90fa2df245a494319da
SHA1: d2801850e9f05f8abf6a76d54f8694344d581fa4
SHA256: eac93729e06c9221c488c8543e0573ff770a62d11056737f83e1dcebb2797f34
SSDeep: 12:OEpSPUorfu3vT5+rMwGgw4nUG3sciMIY1VaoK/:OPMgAEfGZ4Vp3KoK/
False
C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[ms_13@aol.com].ms13 5.61 MB MD5: 001e9c306a95f481394ecd875924b925
SHA1: f12c4bf1176616997a70527037199a6a6b61d576
SHA256: da75cbc5e8ebfdeb3ec3e1570cbe12d373f618b763bbb435ee6f50a96f595d65
SSDeep: 98304:Ef0pKGBHTKYzKXH54UuFe1kBpHua/KUKcs3DKVDKUdJ9V:27GBHTK8KXZ4UuY1kB1iKFKu
False
C:\Program Files\Java\jre1.8.0_144\README.txt.id-B4197730.[ms_13@aol.com].ms13 0.27 KB MD5: 9d9064a6d1f13ea60d298a60ccecff82
SHA1: 0da698df2937a455d75384126274ff5c947bf510
SHA256: 7d0844f754ae4227742be0d13b4f1143d5b40a3d5505a33a1761627abba9b246
SSDeep: 6:59dpyQyFl/cprzoF4MPxbu97UGR9sciMLkMZkl+CmaoJCt:lpyQgSvrMxu97UG3sciMIY1Vaok
False
C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.id-B4197730.[ms_13@aol.com].ms13 103.25 KB MD5: e921bcb3fb9cfa8f26cc84fff8e936d5
SHA1: 871e6525ef53f66c0e3137247f5634fad007c037
SHA256: 31c88964ce3a8637db3e9c7a13407d7c062a637cc127d15ad0f6332b711dd367
SSDeep: 3072:/MdPSVovB5XdcjKNmDSvhWhKgs74VTiFATFJwD:kdaVo/SSWfsYuAP8
False
C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.id-B4197730.[ms_13@aol.com].ms13 142.04 KB MD5: 414296465da5e9866cfc5f0912a9e8a6
SHA1: f0e23de0f2841f992ac7b99eaf6065e68c2a0c8a
SHA256: cba24f10a57a71016072b800ba6d4979709f199fc53881625b93f6a2cfe93e5f
SSDeep: 3072:nC3JfvmhPllDCwJjtsU4jBPoUjckaZMPvg24G94dGvXgDipF:2fvsPOCCU4FPpjfo24OIGvQDipF
False
C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.id-B4197730.[ms_13@aol.com].ms13 4.37 KB MD5: 3186f7e9e130ba8bbf41f6e36bf6587a
SHA1: b983bc319267ddfb65bf99161ea30dd26db6b086
SHA256: 612588d61ad1c233770b3b013744898d6481c8e515cec898f44564d93114163c
SSDeep: 96:xJz3Fn9VO0tRP3tSI9VvadYxCDxlE37/QM:xJt9VVRvIYk8slubQM
False
C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[ms_13@aol.com].ms13 62.71 KB MD5: 48feb74684a5b2099c969a57b8602e36
SHA1: 79725ad272289b954abc09216502002551201fc3
SHA256: 693ae507af0548ae50985e7cc639a68b5992fc1d009e3690c74437b732ad46db
SSDeep: 768:SnXav50NcImIyl1OdVk50aHxDeXKnUwsyiGtFzinlhylRlfbg0tPsjAZZhhBsN8i:b5+4lMEtRitGtFznflzgljANg889l
False
C:\Program Files\Java\jre1.8.0_144\Welcome.html.id-B4197730.[ms_13@aol.com].ms13 1.17 KB MD5: 6e24fcd0ba86354089b3e2a8837b6ab9
SHA1: 1e9cc2b3ba6fdb77741a5c91f1bc7881e12693e0
SHA256: de66e33e9b129d8b840e6020e801ed9a69526c577b5acea988e9600fd57dd5f7
SSDeep: 24:lX3gt0iakIU3wlN00ncrU/Ln59fFesfWtKVuZ4fUbz1fYx3p3Kog:RwJxIU3wnnncGbotKVkHzdUsog
False
C:\Program Files\Microsoft Office\FileSystemMetadata.xml.id-B4197730.[ms_13@aol.com].ms13 0.53 KB MD5: 5b4156fad2f986da3d35c111390252df
SHA1: f7446d8ffc605d75451ed77ce064b32d56212abc
SHA256: e6c4f3d0df4d8791540552a517ba2c90e3945d8946902288ddf95425be9c7d71
SSDeep: 12:k0TYXcbzvyiVxvNYk4swKnLIG0/R86hO5Zql6VFjc1jIR3rMJnUG3sciMIY1Vaoc:jYX7iVxikjnLj0586CZq3k5UVp3Koc
False
C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[ms_13@aol.com].ms13 2.84 MB MD5: 84d08751c07307127abd51bc24a653d1
SHA1: a56c643a26bf14f8257bbbcf0fb5b3cab8073573
SHA256: 9fc113cba029a555a00d47c4b40d723987467e1a83799568cf4971393c4bd544
SSDeep: 49152:WV4YaGoDumT1r7AdXZy9KU2KUYxs35DKZ3OIKlRSY+j6bXSB5:WV4Yab1PAdXZzKUYxs3pKZnKlRw6eB5
False
C:\Program Files\Microsoft Office\AppXManifest.xml.id-B4197730.[ms_13@aol.com].ms13 6.42 MB MD5: 016b34ea921ef393f2396e51d0cf5028
SHA1: 68e30b1bf134fbc9be5a06ce16e4829b66de633d
SHA256: 37c681d7f254069cb9be147e5b7694aecee6803da0244b1479edb278f3e3fad4
SSDeep: 24576:54vzz1Y5Zj9Y6AOwaWVNWWHHzRu1k/L9chbUF/Tx7mWqn3gVtiBwGFwRusBwlNSb:5qk3NIX3NIIakzigcHOoNHNsv7P
False
C:\Program Files\Microsoft Office\Office16\SLERROR.XML.id-B4197730.[ms_13@aol.com].ms13 35.73 KB MD5: 9e8284b0dc22fe439ee40307ccb0717a
SHA1: 00f64485a0118abc7ae95da592888c41717b19b3
SHA256: 8500a45578e18ff13259ece14b7492a78538fb459a42ad82ae1b6d8615145a95
SSDeep: 768:mhVkI7kicFp38gkT8kVGfl3out6NGe9WW5t6nbDoKDL:mhVPk7sDWl3oDFLAoKn
False
C:\Program Files\Microsoft Office\Office16\OSPP.VBS.id-B4197730.[ms_13@aol.com].ms13 92.49 KB MD5: 3663a3bb313a2b942228d19570095a69
SHA1: c8d9224918e5ef21792066fb413dff0e5c8cf577
SHA256: 368a61b6687c86fa758591db3e3c64ecda0f7c2cdfbb2cd023dad7e8b95a8f5d
SSDeep: 1536:3YP/dPi019+btnMoCuNQzwtulgvZYzolevERSkWydEWWC9SwxjWN5vOllDG887:3qFqM+bNM9uQqPoMT325vIGj7
False
C:\Program Files\Microsoft Office\Office16\OSPP.HTM.id-B4197730.[ms_13@aol.com].ms13 170.68 KB MD5: 1cb52683131baef85919f299a3bd8ef7
SHA1: 6204effc68f306cf4a4bcceacf61c3477f4ae1ab
SHA256: e8a2ebd27679d5af9f983e8ccd1dd49eb37601a4a58207f46981e0ebfcbc4f7f
SSDeep: 3072:teonNtGF2KCCuLx01sVFqaXT8eOfqZQkAN90xBPFSZI+kapde7q:tdNtN3Lx0i/qIdOSGkg0xBPQZI+De7q
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.81 KB MD5: ae4c1a845607a3642f4e13d5f07378e5
SHA1: f7275af2f79eb06d69759c75764de2cf3e15dbcb
SHA256: ecc1769685db3bb7bb81180779f2e4dea957ba8d796ab9a980963161222e21e0
SSDeep: 48:8DI9NqjHqgACTCF9w6pGbCsv33iFu3HG821oy:xvgAICF9yVKU3G8+
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 378.59 KB MD5: e2cb9b343a1ab0105446f4105e9332fa
SHA1: ef8568b2999030ba9132083e4dd98147d4ff1f3e
SHA256: e1eab57b05c3ed47c4ed819f4358ab879766190fe23046323a2e2d48fdd1516d
SSDeep: 6144:RC8vPC245kuDjwMZwQcTG8Y+Kxma5K0vudUMJYWEL9xIRFNim1JfxFjE1zvaC9:RCya245kK6xTGWKd/GaMKWmPIliSJvjO
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 2d738da8dbc9d8ed7c45208ce65a7528
SHA1: 9f5df2a9eea76a30f0ef78c4c51234a3fd5c2ed7
SHA256: 2346e64b7fd761aef0e3d211f8f1faeda0ca2fb26f193ffef12e654457591507
SSDeep: 48:sQP6r2moitudYqxJ4w/H06OagAkYFIO6WrMcZ+BRy/oy:sQisiEdYPcUDWGOFJZ+BRyr
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 485.20 KB MD5: 6b6e769f49216197b0d5d135a46b9300
SHA1: 383cb8ea85753e4a4b810920acccec93d67a3a6d
SHA256: 85b008e3be21d189ced9f3e0bbb9b10432f83e51037cec9b1c4fc429e0987cae
SSDeep: 12288:klbzeLVKDVN3LaUPAZ6RrR5d3RxQ0tVH+7K7AID6hNv:kZyVQj8Z8Hu0tN+7WAID6hd
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 782.42 KB MD5: 6c0da7e3f37300de467675abb12b42e3
SHA1: a02cd320f6a63d5659f84f1a3bd6b98fc391dd64
SHA256: 8977d06a6861fc897500728a8e01ae611ee8ccca2da86331d584955cad4a18aa
SSDeep: 24576:CocwaK80OSy4d6j/bpgv2Tt16TywhPZf7oHO1QUTH:Po0OSyBDpgvStMTy0PZtm4H
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 493981d91b1424ef608276c2398792f6
SHA1: e54a97fe2091f2d9f90cd17867e87beb200b0cce
SHA256: e6f3304e2a2c216abc11257c0938982890f60f4d354a2c3e48aabd8f4f88de0a
SSDeep: 48:iVXly3xpMK2/sJpYojshDWBLtLgG8Riqcoy:SXIcKq6YlhS2jRiqC
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 248.09 KB MD5: 4666ccc51880991444ec4ae21c0c2fa9
SHA1: c354e7775a39a0d076f4dc5c1fc046a64a6d9a9d
SHA256: 32d295375f5be69bbf841cbd87e47ec79851d9c628f02ebee5d1fc266ba0b05e
SSDeep: 6144:OtVP4/vaN2YchfUPj4quNpV8VWubiGWNpT4w7C3IO1QDAa:OOiNKu8qaiWu9WNpU4jO1+
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 6d9ad88102c28530a234fa867d7e28a3
SHA1: c6a97b4a6149c69435fccccf2f90065b65dc89d0
SHA256: 1b1bb31b82e90529ee9a7f34603de752414b01c20a342b2db74f0e050f91e3f5
SSDeep: 48:dkotGpSoyx/Z3KAhre7RUZfK68vRQQiZqoy:qAG1y73KAx0RkR8vRQQW4
False
C:\588bce7c90097ed212\netfx_Extended.mzz.id-B4197730.[ms_13@aol.com].ms13 41.88 MB MD5: b790da90d0c6c3db2d470430d72b0adf
SHA1: ba28aaf3de47f780fd99f939c6190d4a029b4166
SHA256: 9079e442aee573d221fa746a405405a2553f60de994e7db863d6eb28640df578
SSDeep: 49152:cpSdqU6tLnvVqSK5G22mDgBOOmeGGiU9Erqkbnt7QTr5+Oc2EI+8dd0ZwTse9QOH:CtZKH2mALErq2nt7rvfI+vZpfQ
False
C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[ms_13@aol.com].ms13 2.79 MB MD5: 875036ba06e08bb9c3912335cfca77ef
SHA1: 2686c631866eef9f2bc416fcd43bde8d06e0a431
SHA256: 3193132c68c8fd7d23043f51cec04769ea03d137fa2774d5a19b57edf39e4b23
SSDeep: 49152:oJ6tDuv7GuMRau8yuXQFKUYcs3HVKf3rhKbyMHVbi3tj0zsg8xH:oJbGnRau84KUYcs31KfFKtVbi3tjBdJ
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 19.31 KB MD5: 233d99d2e2797bf87713e58ded33d989
SHA1: 2e5ad3db5452e09854b3b096ea02db2a777b604f
SHA256: 8d1333096de6b5ba46ec7be15f58f1c579d750bddad92641d7fafc89ed955c76
SSDeep: 384:lqV/WTpc9NQsO+v3Ft6WK8/wJzCAU5oSWMwD3FGySN95Xprvj09m1JCEnp+:lqV/WgJtAWKZJzCAUKXhDVJSNLl44JCX
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 745.79 KB MD5: 441ec74a8bd5d492801269d0d781e0f3
SHA1: 850750a25c0aa966485cc07c7d8dd5a0045e1b16
SHA256: b565a4aec8f40053d373632fe7149e55386b2d94d7b61af49c36590844505ce8
SSDeep: 12288:IJlRvotcXon3nxzerVkU/rRbpOMaRce/8DmKpCdpuyC0VARw0UvY:IpwtcXCh6ryU/rRbYfddXLCuARXUvY
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 7923d5a1ba187439da6fbf007cb0628d
SHA1: 033523bca9c90c033b30f7f857f7c8635e4390d4
SHA256: 5dc411aa04e8d5f83e905aad1afe1586a78a057c296f604b820b78f7b1a388eb
SSDeep: 48:sLyS2kTkGJVJTSzuCrL8kBMcuAg+hJ0Soy:sWSDLVSzuBkfg+hJ0g
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 13e2bb7791f956cb1a457c01f9169110
SHA1: 73876efd79762a908b1f6d5763138d75e9f21918
SHA256: 6726459bd20df6dbad503335d4c9a469b594ac27a5ca9c38869ac8758f28baf0
SSDeep: 24:eeTyAcxZ3S/hS0wJPLGIS7RnDCLb13dS4IC7t7SWg/zCfwBhegRh3Yp3Koy:eeTAxZ2SbDGD7RDo1tgX7CY/e+NJoy
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 2.42 KB MD5: 909469a66c342b863babfaffd7eba2c7
SHA1: c63254d4b3627346d3da2dd4db08e47b1e726f40
SHA256: eefea7b523a6b3699bd0efe84e29d5995704ef10614d31b6bda1f4f93c5712fb
SSDeep: 48:usBZwi7aKEoLCXn/7sPEeJuV0o49H2Brbv0FNwCt2jsQmvlzyHcc4oy:N5h0/7sU0r9WB30bwCtSmlzy8cW
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 2.42 KB MD5: 2542113e8af17f0015aa2859ee2d9dae
SHA1: d835bcc1d9ccbcf65c3b7bfe83d89d14534f255f
SHA256: a9d3c9c34d3d2a39ccdffe922856c017c8d630da0cd63aa22adf2d055d7d43e1
SSDeep: 48:zal6UG4BQ8iRosPTNw6TOJm/zlog2qNUSJijwXh47iszdFYs+koy:C4PRosPTNeJ62qhJijY2eszjUq
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.07 MB MD5: 6fcfe4d306f6240798e3a632f1f6b2bb
SHA1: 072e546e76379b1f3e22d501cf6c2ee0d75c0be7
SHA256: e043fc162c7b353db72bfee7f1e38829525b41ab99d5c492cb3d512e012fbfa5
SSDeep: 24576:6ME1iSGgFFGu5wqnzvuIwIIuw4Xae/SOrxczfF4O8Pxr8bh8hIQqxZeFj:VE+gLcq7vIuQejrySPlyjRIFj
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 469095535b08c960e1713196dc916abf
SHA1: 606c9eca967840403b9c988c19404f9492afc178
SHA256: 5b2deff6d0ff9abf71e0ee55911f88825da36efcd883a8f42d83fa17a469620e
SSDeep: 24:zZKOWFVi46nlQW1cava+nolUWXUVG1GOv/+OaZAtk0M3GTB0MfvI0GelIZzvp3Kz:zZwFVi4ucavLUbXLG/AtNI4lI07IZAoy
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 211.14 KB MD5: 478eb7873e77f53f84f11036c4c6009b
SHA1: a2d92e2edc4402a5a68d20bb3b51367957c90858
SHA256: 27c17743c9def5a828598d3e4dfdff5d00c227f4aab158d458cff564ec1c6ed6
SSDeep: 6144:grMjzwFIEcxoLWB9WueUQWmqElkXgN3tp1q+robu9+wKz:RwFIDoxueSSQ0uZ
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 5245a810c2c4632167bfb28e0822c698
SHA1: 7406e8692fcd9e2ad10b22378bf10b3a6736fbb7
SHA256: 7193794d0acaec94250d9489831ed811e9ea39402ada45154aeca89e63ec597a
SSDeep: 24:BgZnk9vCfD/JzwriDFAXCgBC49SHsDeqONka11uVcjB5ZNSI5p3Koy:BgZnkBCroqFAx44cMDvkkiKaB5v9+oy
False
C:\BOOTNXT.id-B4197730.[ms_13@aol.com].ms13 0.24 KB MD5: 95ae3cafe5daefc49c0b2e1ad97ca40f
SHA1: 57cc966e3efbd2482bbf18bf60d3fc8a12cbd14a
SHA256: e000cd29945e0277f8ef610a59a01ec6f0b56083359b82edb2aaede17386b04f
SSDeep: 6:Kusl+coF4MPA9CtbEPBszmwcy618KfFfn:KuEjrMdtIB718cf
False
C:\Logs\Application.evtx.id-B4197730.[ms_13@aol.com].ms13 68.25 KB MD5: 34abcc1ad91a1369e822d48081aecf7a
SHA1: b5e8c309e4b74ac9cffc2d454be601ef5cab0653
SHA256: 9ad2466592e50703659c1dded580b9964f153092c7477e8bf2e6d0f07b7db5e6
SSDeep: 1536:pfIZ+l+RhtzfcRkXE2TEyPxCp8C61HFsBWDXQ6gNu9uZX5NF1ASpP:pfIZa+RhtzTE8q8CXyG/ZXjwSpP
False
C:\Logs\HardwareEvents.evtx.id-B4197730.[ms_13@aol.com].ms13 68.26 KB MD5: eeba5bc24939b69b32c5a540af609129
SHA1: 7eb7f9557104dca88ebf731a25a183c17713aca1
SHA256: b6f9da1b25fdfa0ad53a20c3b9b4b7f62a7f6f545079168d6f7ab12afd34b694
SSDeep: 1536:Fh961D5DCHLTuMgXZo1e+0Vnj2olK/8Kau9t7hk0iyo6:dc9DCvngXZ4e+ZoM/8QVk/Y
False
C:\Logs\Key Management Service.evtx.id-B4197730.[ms_13@aol.com].ms13 68.28 KB MD5: adecb35b1bba46e59672361b5c88036c
SHA1: 4efd3277c498e9e5386694eb9d9cf61f30db419b
SHA256: 9b93949b8ffe517a13e4f5692629dee8db57f417e922a086ae9aae254c2d3677
SSDeep: 1536:Plx+aJRu8z7cwPTSK7FwkpBT/g+4Fc/816b99t81X4nnp3z:PlQsRHzQ8hhspFP6bbK1XknZz
False
C:\Logs\Internet Explorer.evtx.id-B4197730.[ms_13@aol.com].ms13 68.27 KB MD5: 1b6cfdb4674dcdfd3747baca03dd45c6
SHA1: 4c8b4f8b872432fb52e76ff6d1de9c158a8eedf7
SHA256: 330cf40a597bf3093ccc42287e46460fccb6123211117eefc1cd34b7ee97437a
SSDeep: 1536:pmyG9kq2MnHk3rsqqbdgWHBWxqxlsl7zUTBvF2XRdiyu:p3G+q2Mncrsq6GWhYqxC6gBY5
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 14.89 KB MD5: 6839b9560c81bb2402b3ab521915e2f7
SHA1: efcaccb3f218f5751d6f14ac59b9ec170cf7fe16
SHA256: 791167396bea5f43171d51141c5fa515cdd2ea62fb7964a9383c923d779d4841
SSDeep: 384:0xbg2VBIbkZ4h8g8whAnKo67P2Z4nK6vQ0fQccZd:0xbnIgNXwLo67w4tvQeQdZd
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 349.29 KB MD5: f110daf9c421008acbdb1b4a16d58caf
SHA1: dba97e60a8774bfb60bd864cbc269cd7e07a9fb1
SHA256: b17ea9fb81ee73c81635ea24e276b5ce8c03efb5e2d86415306da3f21803bcee
SSDeep: 6144:/z3is0MYzNUlw0l45kxvUc+HOTBU4ZdZZIUmAcAuWHlCXgGVB4+RdgP9duqqvs2e:xtAUa645kNU9HqSU9lHlcJv4FP9av9gv
False
C:\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[ms_13@aol.com].ms13 68.38 KB MD5: 5394243e2cac3fd826d891501c790931
SHA1: 3159c6b219f6aef5de47bb6fb26c29aa848f1463
SHA256: 8d65c9fabdcaf1e6c25fadacc7b1d41a6de5564031a4c0aad3ccdc8055977232
SSDeep: 1536:W6xU7paZ5csU23zy1QyXtyym8DT/NVMPHAwTrlBSzAvx+:mpaZ5csXlSBnjYzTRMEvY
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 192521806df31f57961a7690b830fd1e
SHA1: 2f5defc0d65aa1f1208d43f50c50bab5dd40f239
SHA256: 876c6fbe555a147c5ac806895d52b8b1c6a626711943196a923d5d3945de3913
SSDeep: 24:Jw4+DdkyE8wHzYLC2geh83Bba1gbbh2b0wekH5JVcp3Koy:W4wdkyE8wHMLjraB5bFK3FpFoy
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 63.79 KB MD5: fc5b02e8bc8b2a45d2611b8d2d4edc77
SHA1: d7e69e523605aec7f4504ed5a0952307719e1686
SHA256: 257964394e7d59c298e770424fc02b0492263780cdefa1324296760a75c86718
SSDeep: 1536:SRuVnNyAHhTca5PC2m30+5Kk35Mui6Ppt7tPfGvHoOfERWqV/i4I:SRGnNdkXkYKk35fPr1fGAOc0q5I
False
C:\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 028c9b4320ded61e6483c94b25261cc5
SHA1: 4e8ac73cf70e2ce0a8ff6f710934b50c524a3ce7
SHA256: ad5a4588bae60888b3625cd442a1259e2a95b5df8eff06a9561862c45e780e13
SSDeep: 1536:uXmIzG6DCxJ/4ipMXbhep0MofJk5pIEGbzj+okNsQfQXJhGm9SG4:uXtzD6eipMrhepca53SQfOGPG4
False
C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: b3fa8bc3ab9db520287f4fbdcf513854
SHA1: 21eea07408eac1a6d6799596ca976d0cd5850153
SHA256: 0b2d32372273e97f74253951e07380351ed84ef468f18abb3582546da4bf312e
SSDeep: 1536:3TXGFX2UK2gnXwvW1hTxvwFXUNb+OGnFxty8ge070B1EJFHQ+dK:5NXwEhTxAXUNb+Jxtyd7wiPHQ+dK
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 335.61 KB MD5: 3857c5021c84b76a8826f06d4c53860f
SHA1: a1533401dccf0f10e8244a5cc39eb63fcdb6fac2
SHA256: 577c93483f2879374b8912333e29feab0ca74fc89928643065c78adc5b623e7c
SSDeep: 6144:kwVPhthTssNk+sHsMMZWBWG2sWiF5g8ymFzoYy1Sxmt/uFTjE+hsb4ZN:k65wgk+sHLnJ5oYuSMtcE+hE8N
False
C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 04ad67348b6ada398b2b8786fe712df3
SHA1: 26e74cc180da876152d1932ca76b8eefc1a196b0
SHA256: 6e85f80a5a77ad8ca500e3146e515e097fd35817aa12f3ce56c199128d4b840f
SSDeep: 1536:bkO8JbzaeTsJQFIY00tVICAPc5M+UtFJ4YVmpAwQ9b+vZ1uMU:oJbzauZmkVVOypSfd/9cbI
False
C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: b4842684b8d02ede1a4f9826f0aadaaf
SHA1: b04d9d73975facde8259e0b0350252eecbf20226
SHA256: ebf22df5e3d13e734e8a508127645817a8291459b269f90a3d56423a9691f69e
SSDeep: 1536:pBxz3GYz0C6meL34EaeBsryaxZpvHJ0IZwXU/Bt1jo6:F2YGDdL8Nx2iwXUZtxZ
False
C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: 8b04772befac5d31674105d4acaa66bc
SHA1: aa10d78fbdf7a8c3cb1fe89640f8fe6f0a79d1ad
SHA256: b9adf05f891bf79ac3a7b7f7ac56bbd7f0ea13973e8b5cb69fa350183223e2d9
SSDeep: 1536:Al3QXwm764iH9dZ7XnQjCFlrVcDhWii0iMqisUSXE6Vm:yk9EnQmMEiil1i+m
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: fdf7f876b9c9aa1bb6c90eb5220074a2
SHA1: 689f9b8654127cf2a0cbc96e908ac12559c84f29
SHA256: 6806805163943b54a2acc4802b735fb4f720130dc3e5162b972f3c8d2ac51672
SSDeep: 24:6jElG+UyWH+Xs+F4r9+cNJ1p4jDPTDQoSBRV1ZkzdDyuGkPXbs4p3Koy:GEf7vF4scN34ooSBRV1ZkzdDJXDspoy
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 9.33 KB MD5: 5ce859de7d5af82591e7edeced45a376
SHA1: 0df657573d5195ea185d6898b5ddfde9d8174859
SHA256: a39ff9020ffa039e9aefc749c698fcbfc60e0663b47b16a2daaa6f45cb55b9b0
SSDeep: 192:JQon6Sv2VpRTxJKDdrTFZawZJ4uiwwvhb11/SWo+FMUG0GaG:JQorv27RHoBTFZ5iw411qWifFX
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 390.48 KB MD5: 7f5f0fb55056a36c9bdd992d1d9a0eaa
SHA1: 431ee21406daf2ab8b85792bfdec5eca603bff15
SHA256: 213390eabe832bf54f4c2325066f13aeca12b8f48fd726ed491d8e23cfdb3fe8
SSDeep: 6144:VCbeYiBSPG/jw+WHA3UztDqoLF8j95PSYsCKIfINsVMeXy3f+K/KGvhTmRKhR6gR:ovc/EHKpo+j9ZvsCRW3fnrTmRKfi+
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 3930ab1ba6dc76d0e74709a4cd0a9c18
SHA1: bc113d480728c3d8123fe683f56f5919b78b0db4
SHA256: 515d031f0a79ba40853e55bb4a9c4f1ec375d0901076a9eb3511d70948b436bc
SSDeep: 24:WH74nx4DB20tvxoo8uuRchYIdGjelZbIZ/uLn5Dt0lkB2rRVdh1xs9fxbrnU6U3i:W4ed20so8uueGSIZ/uLn5p0uB4K9usoy
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.73 KB MD5: 092dee0ec159fe289a6fdb054b778405
SHA1: 7699eec702403045c2e28303418eaaaa46039c56
SHA256: 8a650219e99224b9c4e52fe7a55c6e75f4d7084400426f25d7ec6f1c5365f6f4
SSDeep: 24:VHe6U55yzXDWCkXwcphV6TNDLRwxaaTww10qIqVyPiLhkaEpof9cxhw0y53dDvpo:VRs5CPkgcpho/wL31NLV5X3f9bdtDUoy
False
C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 1.00 MB MD5: b3448b7a19bf3b19bc777c90aece054c
SHA1: 834ade2828450a27159914ffac1b7ee0e48b8e8a
SHA256: e0f9a3936993e511c9a43c3ee01af04aa0630a8682ce2a7a807043ac5ee28371
SSDeep: 12288:wadhKKelkoW2R6qdiY38yRGPIaxxxsjAjWf5NC1iG2aWLCZu8YmQmfwWbn5lWB1m:9hKKsWJqLRG5xGkqCcLwab8WHVBYquR
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 3.98 KB MD5: 5e2b7e3a0846dbd8977447c2ffb6566a
SHA1: f2cdf9e78ad7e463efe4743e6a66414df93020f9
SHA256: 4b160b40cf40f78ac9011cada98813a4413ecb7690301d5b7a0729a399a861a7
SSDeep: 96:D98XmIrUdEM/kOMpkVw7J0ZIwebyxDaJVkN6BGwl:DWX5gXctpewCDOVl
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: da3a417b954d14dc1c61e0102aa89464
SHA1: f3bdb440c29cce9b0eb5f081648f89e6eac0f20c
SHA256: b1c40b3d0313225169ac240c84c2f9a47cbe27daf0b50c4f369d5a7d37c65933
SSDeep: 48:3htDLRRvdG/E7XvTRzdgDwn6UTOL4PvzL5Bkoy:3htvRbbXvpiDEbOL+vzL7q
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: de0495cb8711504ed9181fbd0a03ea81
SHA1: 141a094972ef241bbae0691e5ee939a7116c6405
SHA256: 9361b7e5ccc3f858b09f064cca664a33e63fd69d475fd20db7ec98d4fce3ed89
SSDeep: 24:x85pJsPaEFDGtoNT3TBX92vZZgmomuJMaq2fVlRnp3Koy:cpJW22BX92v38OaqaVv8oy
False
C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 9be43b7797b6726208fc3bd28774325c
SHA1: 852d3fae7c88cd36f8b8a33ac1b88cedf36d1008
SHA256: 2b84ec7681c526163675504c3ebe3e0324003731d84ef3245f4e34a7ae59f403
SSDeep: 1536:f+bLcSF+0x6R6GUSZoKpoOl+8DgvFo6rLP2QcudKmmriUXd2eAhUM:f6+EC6GzoOr4npTJdZEd2eAmM
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 89c5cfeb2c6a0e0e22549cd1d46e255f
SHA1: 34e16a6080a8a45c757636e0281e324316727b6b
SHA256: 0d911d559f605c3224a6494e64355a7bc5ad5eda3a217aa97c239bb7350f4783
SSDeep: 48:x39u+JmuZTQ9yPyot7gQ/kITJegaKswSZwoy:x3AqmuZs9yPNjdeLwSZO
False
C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 35e3d4bf2b7e4683ca6f75ed0952eeaa
SHA1: 4fe95c1ed5295e1cff9cf11b4f82d520a9b7afeb
SHA256: 196c87df29d8d30985ebdef91b1cf89bf572982889370649cc709a4a5de7405f
SSDeep: 1536:6AN4R4D0r3vexG5M44bl4LvGsx7S7mwWS0SD9+LPck9v7:ti483GI5MZak7mFuFc7
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 00a90f4159fabe5eb668fc4eefb6de74
SHA1: 399c190efd99ef2a9dcb5c51d08dc883679935a8
SHA256: bc6d2ffd7537c0ada775806590c20abd47b0224e76b2fffb8b478d5f95af21b7
SSDeep: 24:GNwf8JdlCRYJBHC1UcLEBZA6w5011d3kWa9bqI5xwNtBcHiHbur0jz6k8ONV6bNC:aVMRYnHbXF1d3E5xItBki7yleV67oboy
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 3.61 KB MD5: 37a2425be13bc8e1e53048828a798313
SHA1: b06d006c80ab57d63f175d26ff21138632612b80
SHA256: 65dce720633d0ccb20e43f452a5e2f4f13133be1363d14e8e2c4587540add3b3
SSDeep: 96:BBM+8KAxS/NMfwdaXgUGd1gZ5U9M0eBFFbSUWU:w6mSVMcKgK29xebFmBU
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.id-B4197730.[ms_13@aol.com].ms13 9.87 KB MD5: 813c08433d6f45ae29a10bfd29386b30
SHA1: 0bcd520ccaafc1cb02e23aeb3308ef9a3a48d686
SHA256: 4ef0857150648d02eb909bf19a03efc8b8a42b513870fc5a98db8b7004e8740e
SSDeep: 192:fuF84r8cxgVSFWhx2nbeI4UlPQNba9Axecv0VWnKcvjCpq78mQftKe:n4rsuW6nbP4UlYNe9AZvKWKcvGpqC
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 515.90 KB MD5: 5b78018db3abf39746d1de2669c5066d
SHA1: c266a0f9d0b4e86634b0500f119ec6b7333b4b1c
SHA256: e5ed7b00787e5f4a30ab40501d3201c89eb48205efb105ff284c04b3e91c0d2d
SSDeep: 12288:dLU7USfHaKdlhstQSvyzIfYgsWNM2xVOaui4BwmzkbnAK0CUBVk9jh:dLc7dlhY8LWzVDjEOd0CEk9jh
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 68954f8d44e1c8e98c8f1e90254beffe
SHA1: f92072cbaa5b473a05bec56985a6b8093e964c37
SHA256: f3c32bc989a32052c4e7c81a7904debcfbda7ba2606f3c3bbd91be261110f3fd
SSDeep: 24:zcoKI3W6ZvoS5caRh3hmn4f2xxPCXqqHF1SyGQleFCJfFcp3Koy:fG0voyRh3AnJPC6ryZvFoy
False
C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: c93c6117d6fe8c76557632daca4a7299
SHA1: 736e5b9909d9388d01a7bc52830e12af17278d2f
SHA256: c40f071e56b35480b64e57b520de1c3aa6f304285db79617b12a9037ad13700d
SSDeep: 1536:Ji4nm1gGf0EXmNzvooONGghx3LXX8SGjBDUumXCrLzVgxHluZzal:Ji+mTf3XmRv1ONJhlX8BFUumXCrVPZU
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.id-B4197730.[ms_13@aol.com].ms13 7.29 KB MD5: 058937c95c978c0351f5a5328a8b997c
SHA1: b6cfa2b2d08da8ccfe5c3c912be4772b80b486ec
SHA256: 6f2ccf9d5b2b67b86b504effe504f49cfde58d2da1c77506499fdfe1bc637543
SSDeep: 192:hKHEirGGOi2ZePwzPCilBS/X6qzC1yGEcc9aMLEudcz:hKHvG2i0YrS/XtG1YjEu+
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.id-B4197730.[ms_13@aol.com].ms13 14.76 KB MD5: cfd7e867e21a90b6f9f81b4539f59bd6
SHA1: 3ba118273d1cf83526fb03d426f5e93bf0722a98
SHA256: 205f115989626d65d976d8f8fd5c0cf4e3cb7a8c5de528095ea0b9b23a8627fe
SSDeep: 384:tK8fM5mZMX2glKk2ZNn3QBD4UcIoe7kXtf9067OBqvMHZICLP76hh:tK8f4mCX2yL2ZNn3QBD4UCOkXErBqvPV
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.id-B4197730.[ms_13@aol.com].ms13 6.76 KB MD5: 638d9f699e4c86499afba1881e21ae4b
SHA1: f03cc24c3c519a350fcd4641245af1a2b57528ff
SHA256: 21655d79a6daea3c5b54bf0cdd4b84d93d9811bcb6c22695d3df4bbbc2ab7664
SSDeep: 192:+6LusPZ5a6fCvO70f2Hdl+L1oLR56iZAiB/AgXF:qsPXaACw0f29wLyLr6iuiVAg1
False
C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: b03a01018d57a5ad50ddeb2d7554af95
SHA1: de6c3fd1845e418ce6387dfd73b293082f1c15e5
SHA256: f211cacbd0dd1f4fc8ce4affd9711e3ccb3dd91e23ad43b13299c26431f9c037
SSDeep: 1536:qEyPsp8vqqAF/7B6a6olGZk4abCqOruPAuPcEMpqPWJITPEN7ANSFoE:pZdRtBx6EkkZbCq2ut0EMo978oE
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.id-B4197730.[ms_13@aol.com].ms13 9.06 KB MD5: 678f0b96fd1787ecf92e0e9c56355f13
SHA1: eebcaf586daaa127076992b5f42cb974c67809b2
SHA256: 3575fa6a12a950d1c8b3cd545ad50d0e328f91c94faeebf7f0225dbf1f95734c
SSDeep: 192:La8YOQU19Et7F05QtL/XMdWwcusnlzwcRpDJLfst:eqmt7gQ+dWwQntwcvFLe
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.id-B4197730.[ms_13@aol.com].ms13 3.42 KB MD5: fd40e0ca74e5fa5c400f0651d259b7e6
SHA1: 5d23405c5094ad626222a03fdc4a69b6164182f5
SHA256: c730e1efd46019a1c00255a0f0903da1ef7a8eb750cc2901106396e3b623060e
SSDeep: 96:lLHIhPYktDw6HkCDFBQKqvHYsA5B/TE5YnH:lrIBJBwsbQK+HYsAv/Tq6H
False
C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.id-B4197730.[ms_13@aol.com].ms13 0.62 KB MD5: e504fa97116db91175c7dbac5162ab06
SHA1: fe80ffee5d1b41dacd1eea1fc85da7738a28e730
SHA256: c64f38788ff1915f16952e2050a9da6292590abe7ba49e76561b4f0b4754666a
SSDeep: 12:BMX7V9iv7RwoeCx+KwTaIH0lJTP5oHoVjAxjLq6M3rMOUG3sciMIY1Vaoc:c7riFwo/AOIHSJTRoEjcqNZp3Koc
False
C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: c9ca7e0bafa8ada9ea4653ac7455abae
SHA1: 82fb968755c1931e7189f546cccab67e723f9577
SHA256: 9843a7e3d329679b9c5195b5a48127fca9256c014f43c5a296093c6d86f3cd39
SSDeep: 1536:fGI4FGNaQo52qLLohYwQDLnohINV0OWWvKurTt3h9yVyT8P0gZktOD:flNaQU4w/nohC0OBvhTt3yVsg2tOD
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.id-B4197730.[ms_13@aol.com].ms13 8.15 KB MD5: 7e88473aa52723b1c7eed1a024cb8fa3
SHA1: 4ff58aee82533a03fe1d10090c8fa397d3791bf9
SHA256: 825f9cfc0207d3d9a394451db550b5211bbedf1241fc05367d25b4d055a5ee50
SSDeep: 192:ZYOrMxVifFgtOZz/H1+xLhT65TsnVAvolHyG:vrMx8fLZj0325kAvotz
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.id-B4197730.[ms_13@aol.com].ms13 7.75 KB MD5: 5d007069a1256b799977f3139b5a38fa
SHA1: f99341ce5a43f65f268728684e8483209d10836b
SHA256: aa9812bee2bbac73f606bb447496f927df7f2aed3bfe58ed7916bd5150fee662
SSDeep: 192:UG1/dzzhSjyQEQp1FLMu1nrShgohPyxcO/pX/R5mm:HKFLMqnKgP/hJZ
False
C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: b053e123e5f77a22daa20ef51e948d67
SHA1: 16b847ac1a3dacc8218d351073f7bb1e526c4b22
SHA256: c92717d26fbdae10bd614abe123c4a4d06645b0ece6d037fd88aed8a72bb604a
SSDeep: 1536:aIfmo7JNAVXsW5iwbMS+84YycCo3cMdiOSMJkTA:NfmoXAVtLM1TYycn3pkTA
False
C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: eeb3a9cea1e536fef644422d1706926a
SHA1: e18917a23661e1931aa5ec1e1007be3253a0e16a
SHA256: 0b85dd6a4e1826571447f7d0bc80e716fb21747583cc8a45040294985fde4cd2
SSDeep: 768:16Z4mytgPOXHN2pgulITuniT8dJjmOA4RocJTgtbc1AQAhvZ0kyI8xMOARI3LzlY:MyAJPiGJSO5gBWYhvy/77eUZWvtNG4tj
False
C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 2.82 MB MD5: 39903be44aaa643bef83995b9a730f0e
SHA1: 69db3ba47ea1081404bd1501a13b2ae161dbe49b
SHA256: 4dd7464d4c2bf1cc953310f06cd36bd8bcb6c3da68d04ec7b95df381da9b96bc
SSDeep: 12288:YWXIYwyeNA0RG+nSQC7eqyKLGPFT/qDTJ+gE+Oa6CmrdWCSf7X+aHQd6pRhm+R:RIYdeu04CKyZPhRnaiQCRa06pRIo
False
C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.id-B4197730.[ms_13@aol.com].ms13 2.82 MB MD5: ea6e28b4a8398a16cf24b5abdd6175ee
SHA1: 322a704fd540fa998a14b4213b52e3f9572b9b33
SHA256: db69ee9257771a94606ad70eff2079fffeaadf5c861b69af21c109a22134b188
SSDeep: 24576:YbwwGlNLd568pOXo0gYrX741iaBTMN+zFD+Q8f:SwwwNLd5NpqXeiqoEh+Q8f
False
C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.35 KB MD5: 6cd3ec834d9c21cbd691f49cfd9a1628
SHA1: 7e6d5a3cce8bace424a4f0b23c8cb68582329b13
SHA256: ce7e891a4ec3af523ecd183608b885c19ea30a30e11bfadc364d8df8489901d3
SSDeep: 1536:Oeuo/dgVh0fu2JsEl3XUOgefjGzZNSFNTPVMotY2mq8IS:OeJ/OimbEl3XUyCoF9PVptY22R
False
C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 4fb6e647f28992911631fde9911067b8
SHA1: 7e39fdf604ff58e055b97a06ffc97455892bf885
SHA256: d1aa46aa4babcbc17a8f980891a35aac120bf580a6cefc78d3632e3f6df9e9db
SSDeep: 1536:zSvSWdLAtD+f3d2ETn6gk5N8H3TMtdrk178/ctPW:zSv0A8ETn6gkoHoUM
False
C:\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 3311e86dca72c33b368a35a383e88ed4
SHA1: 172df87d79a3ece4f36215f41b07cd95c3a81b52
SHA256: 78a1c473e0cff7db890e249cce5dfdf5ed890f37b5b6e475616adae81c5540cd
SSDeep: 1536:OPgXB19TJEN0WvRuaVGi7rRCluzQrToU61fhGwuFmZV0mkA:OYXBiNd5dUi/NRU615SF71A
False
C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.35 KB MD5: e6cef90f7eac6342c42129e6a6e4a33a
SHA1: 3d117bab2cbb38869ccede73441a468b27c446ac
SHA256: d2532b64ac3efba3616d176b9d5f74451b01a0d6f9740ccbc28d30b1cc257538
SSDeep: 1536:7uVW2VgIxR1OpVmDb3rL8kQSgbuhKGmbUCCV4/NiMo/6:RhIxR1JDrrhBgbc5muYiMe6
False
C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 8a6417e54d08174fb05cf0681bb61f17
SHA1: 523ded03b4d2f01885777651535681d6d0b4d09c
SHA256: a611745400d379aeb6a7a19134c505d1b107039f196eb6601e5c792de7862ba8
SSDeep: 1536:MqePvJzbPfCSrf3TYjIKH7+7Urh13BfZ6ZG0Q9llaIAE:MqePvJvPdrf3kjIZ7UhXL9DOE
False
C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 1.00 MB MD5: 5b5df040e2d735469a61e6ac66b5273c
SHA1: 884f320f33440eb11bd6eb527668647277dca3e8
SHA256: 39e9597cccf680ffb582c2b8120479d0fa43856b50933b543149ac2dce8794be
SSDeep: 24576:XHcCPGRKuOmBX90ZJEqnbJOswLYSxASlLZWhWob5FbRUG3uNpbj:bPGRKrmx6xJO/8SflLZWxLzuNpv
False
C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: 32b7ac1136eb2df50ff541259514bbba
SHA1: d3a804ec622a8e2c7ac16a16b6856b0b767a0023
SHA256: 0642b72420a808c8b44c25fcc2c208962eedb8269258d54ce17d2f7094fa844b
SSDeep: 1536:D3HCUHLEdKH9ZzUppm9oeSrFn0BBoWVLUj1Mqr2qVlRZIk4H6t9uqu:D3XHLxdZaQCemFnwBRVrqVlUkg6ruqu
False
C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 86a0eee6abc08656350012ff57b34d6b
SHA1: e8255afadcc740f6483f3762ba45f4b523b7799d
SHA256: 941f4e9416ccdd8b6423a44214cb90f94b63bdb22ab41498a46bad0db32ec9a1
SSDeep: 1536:7nSiFLmTkWR0FzjNHto1dGArPXeYRAfXf1Z5ju:7L4OziMArXe7VZ5ju
False
C:\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 1ba2559fd261a34a0c0dc3d6494762c3
SHA1: e461e80a1535dd9fd87a46d239778b071a5da77a
SHA256: 982909f722cbe2411fe42814cfe4526db9ce382df082aa88001cfa8a58a947ea
SSDeep: 1536:MuDewhjCLo5ou3P5Fx7vPRNJcaK/jINmUrkMd/4t:MuCwhYo+u3Tx73RXcaiEr5to
False
C:\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 2d9d9e21dc8c50f099cf4ffecc2436a7
SHA1: 84380e99da53ddb4fe8e4233a352e7b8ce3a54fa
SHA256: 26614c8ead269a66acc54ef383ca2e3adf2ab6eb1d55bb8912fc9c987c56a943
SSDeep: 1536:A7tctGUl6asBuKramvgv/4uzvdUEybKLzdpK2C23kui3QJqzbSy:zt1lu4vgg1UE7GP23kuigJqzv
False
C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.34 KB MD5: 58cb68f0a00d4300d55875980fea1316
SHA1: de201465e7e52ba40cc903aae257f55792c4beb1
SHA256: 81c0773adc2f76f2899b24236beeffcc510f3b8cc052d3fc266126673853c993
SSDeep: 1536:VNqQUVeMoF13KTRt0Fk9GEKm5cd09KWeY3LheKuDG0cBqA6hdC:a2dGHGOZeYt1u62C
False
C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: ed440586198fa2c4a4a58550fdb5336f
SHA1: 9b87d0518952fc202ba6b2cff7f00ffddf97ae8d
SHA256: 854d948f041d1866039718bc2ce86815ef1f560b6e72839d05a1919c72a98f5c
SSDeep: 1536:khyRnIDki/2l2WWwUaVwwp/N+t/TbCcHMO3OUcZhZjDbv6rE7XuKSOMlk4mW:mKIQ2bwUaVxe//Ccp32nvTdVkn
False
C:\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 69e6bafc4e008954a3c2a67fcd74ef0f
SHA1: d54e1088523dbc0da6d791ebab23d4f037b08601
SHA256: a3a8aee3260a303b3d38d621f7c0aaa9d90cbd0456b8328a45da5b9de3bcf381
SSDeep: 1536:lYxEhje+b90b1F1XWxCH5HZ5cd6zr6THu:lZ4+ab1F1PhzGHu
False
C:\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 76c1bc97119189390adec646bcdd0f81
SHA1: 1484c53f5dd5c1d1bcf95bb78ba47b71df0058d4
SHA256: d7bce92451622573c790b7b39cbc20353b8db848c2d927868027665bc7d43bd5
SSDeep: 1536:JFu/Vd8AJLHdaJG0V/IY97o9Rvoy9yjWV0ZvEwmiJ9eWEpnzwwts/:yd8AJLHdR0aIc9SyAjWV0Zrmae1pE//
False
C:\Logs\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 1b78b255775b6872d4f8cae552fe020d
SHA1: 938d13fd2398fd6ed4f504db60fc5f9decfe4c3a
SHA256: 0c32a90408f9b67d328ec4b7d7eaaa3904526890f9cc94f122a581806d99a777
SSDeep: 1536:jz3a8MGmMjKW2qNmBMPJjPJbB4I7ZjP8BtSP1:jz3j5mMjZjJd7710BkP1
False
C:\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: d9a05ee99e0b78b9a0a3a0f894d379d4
SHA1: f210fae7d141cfa076834bb442acd817821c29cf
SHA256: d3bf41ef8ea5c7bb7ab46c6ea24dd989269bfb6443edd682b49e59b4ec7aa2da
SSDeep: 1536:BuP31vY1g8lJ1Yff6Qryac9hA+dL9iNGkAO1uIRxP4/jxKG:Bw3S1geIffnryD9ddL9iNdtsIU/dKG
False
C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 3c4d22ed9e3a1e318dac52664112f013
SHA1: 17137ff587605f46e8bafeda2ecff4ff6f233066
SHA256: 71028cbcae121482e983c76fac38377682276a1b02f1e1492fdc658aa24598fe
SSDeep: 1536:a/0/lRpKMWfO03RXWv/T+lyIW7r2Bj56YOonJEqHO/Z:9lRgRfO+O/TtIW7r2Bk8nJa
False
C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 9469f298e7becec32ad5395e1129ce95
SHA1: 0fd27982cb99d402b84d31239ade9550ab885d19
SHA256: 864d6cd1b0247167307ab9f5cf7adef0745dbc432d4da7c102cbbf114b10972b
SSDeep: 1536:HAL/TdAbOXbjXrGNVbX5rusmf/VyGwzioCbYnzshUneSJR60:HALrdtbDrGPLRmfNXw+04qeuN
False
C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: 644d74a0b6461d167a138a57ac8e89f7
SHA1: 4da4e850b7b982658851878fed17a1091cbe964c
SHA256: 1da68c2c7d368ba8817cb34bd17315d128dcb04e73fe6edb25650a0bcfab4e2b
SSDeep: 1536:X3MUELFNac2FXFFprLcIqP348qNun+U82YUKVi+mDfR05bhNku:Xn/c+JLqv4rnU77SmrR05bou
False
C:\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: ed43d586a326aa0e94c86f92f3238ae8
SHA1: a63ecc98d42a7482e1ae17870361c505770b1808
SHA256: 585f352563b4e084e2a54c3238cf7db84ef7e6d475bab0fdf7399104a41f9a35
SSDeep: 1536:4iPDQFYWXnge1+hgUZQPY81aYH8eqjpl5WnURv4DK5vmr:4iLQzgUeGQ8hc138n6VF8
False
C:\Logs\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 1983cfd72c2dfef3562dda020a9ab3a1
SHA1: d53d065420d3bf8af1984fbc78d370afa0894098
SHA256: 9e7a2383f35ada8e99e5bb0adef35df18710f6c5100c3dc12e4c75dba5e269ef
SSDeep: 1536:PcU06gXXFZhb2OsDk5IN5YbL9rCVxAlFCna4DnSFnB0B3+paz:Pc+KXfhJ5IN5G9GxmFCnaYSa3+2
False
C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 11b753ec57812c1f370e6d6eb9266756
SHA1: ad423e21f67fd50cf5fc8c03c02e1a0e58b938b5
SHA256: 81c5ee291b43aa0e91173bc520aa94606e8de6602e43021ce8963abf9539f8e6
SSDeep: 1536:KZ+0cS0y0+K25+u75IdFCcMiFK8dt2cvLH3+h7ZAEwcQLP:z3KVNJsMC48dt21h7ZXwtP
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.id-B4197730.[ms_13@aol.com].ms13 0.75 KB MD5: bc2c515c0d01c20496c61d7c298c5767
SHA1: 6f4f6c04c71988ddf2072adb3363b72c70d7c1dc
SHA256: 6381434d045031f70f2329c28fd447a85163c4b8a2f97e2a7898c4d426644882
SSDeep: 12:YPMHamBsn+U9EkOcQNC1SRZwuQ0VAWClpc8eBV+4rMq9yUG3sciMIY1Vaog:xHaIs+U9EkO3C1GCmSpc/+oj9yp3Kog
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.id-B4197730.[ms_13@aol.com].ms13 0.73 KB MD5: fb517da145c1b25abf3cd022571a59a2
SHA1: 8f560b0ffa82cfecdd73a678152ae06105b46ed5
SHA256: 143459796626912985f84e345ff0a2c1065643f7dfecb207550c1a36e6c83e7c
SSDeep: 12:xdZIfi7bxPES6Wdr6s4YsrYOYUC48BzNVe35Ebgf+4rMe1UG3sciMIY1Vaog:dIfiHP6Wx6s4YsrjCrzNVeCbgfnZp3Kl
False
C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[ms_13@aol.com].ms13 1.00 MB MD5: b3b75c00e1a0d9442bc5db7a8bdff2fe
SHA1: 43cbe5a1c3c226ea40c9f5467926e5e3a34f2e08
SHA256: 65cca790e3c57050ba48a195b3c14b4c0f7e1d3129c87ff23fc8e0efc334440f
SSDeep: 24576:9ywZ2VWwVjpTJ/B/Xs4NteXVg5ZXnmL/1HPDub2c:Ewm9pZ1X10ieL5qb2c
False
C:\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 71ecf46251b03ea02d49e4b524028bd0
SHA1: 85bbdaf6b279bad958a2c29da7db79377ada1c9c
SHA256: d7c7c8a51c9fccced836b63a1ed1e83da971f01389038faa4a31c0c9bcaffbca
SSDeep: 1536:3ywkFdYPy+ei7o+SfRpNuefDdalejWX7MSYwrraYCU3GM:CwkFkZpSDNOeE7MS1raYPf
False
C:\Logs\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: f6c24c80c8ec9aa05178383fbe49f18f
SHA1: aa3bafd49bbf48c7238ac5b4c89a8dbd0708f7dc
SHA256: 0c04a189477af5c2bee2351ddd7ca0bfb01650d8975c6e15970f6290510bf621
SSDeep: 1536:DxfIPoYMbJI9MB8tEzCU/9aSoSsDMk1ZFqFOrfRpz+nsxnoCcWZfBJH:DxNCyzlUSoSe1ZFqmfxxgM
False
C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 28bf2017b4d6a4c8fe602fe2848b0962
SHA1: 5cd267517feb998cf26509af0ce10aec3dd29de0
SHA256: 7af6852862f73acf27143d9bd1463c7d1a947a96ad59967372aa254cac6f3723
SSDeep: 1536:RuISBV5e+wc3sIfBuuFxCmJ3nO//UQ5/eo4TZubB+9:OBVmtI0uFx9ZO/t5/eo4TaA
False
C:\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 6f7faaae2d8612e059f8f7992ceeb5d9
SHA1: ea113023896d51b66feb3df1b5ef662a11ca030c
SHA256: 6d2349f5f9ca25ae0bea741dcff77a6cb570655972aa8da42b6beadcc31f4b9b
SSDeep: 1536:feYitIRwHDxV1qWSucZCEGC4YvSdNk2ETqk4HcOGyxQ4qZdcUuBR:fYPHqWpcZCEGCG45TqkKy6Q44cdBR
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.id-B4197730.[ms_13@aol.com].ms13 12.64 KB MD5: c23850bd155f0e9fd33518642c4ee459
SHA1: c415a3974955e78367282fad4fd008d16eb3445b
SHA256: f3ffffbd21b2a3abfeebc1420824c20c317514a7eace25ec2672b91488a23c57
SSDeep: 384:KrjGcexM7ehROCcQOyCkUymG755WfGNDKRE:6F8SqCG7L6SSE
False
C:\Logs\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.29 KB MD5: 4d278f03c14686cf8fc4a1466debed91
SHA1: acde2e9b0c535366b31f67bdb76443267e2d1776
SHA256: 1ebc146285841249ba85c140a550cf82b57fd494a12285bf69c14b901d03cad4
SSDeep: 1536:WawmqjoUdQ1xrlEKW2chIIj3mUFQQhVFFlfhZt:xwpjof1xrlETh+834ElJ
False
C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 5e47cf1b39678b89056da91b0ba3a4c4
SHA1: 6ea452b00dbe6162b8d493475036cf00c0459c33
SHA256: 6be33157331768fb52db685508bf8cfafae6aa68c5727b0e8fe9de70762926d0
SSDeep: 1536:cVkXHVmotvcgoWqtk+ukyhQWuuZ5coZMNqKDqG3m8606EYm/cthbI:c2OhxW9QoZMFDqum8381I
False
C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[ms_13@aol.com].ms13 68.29 KB MD5: ce958973a00a4dd9102ff37dbea20ff2
SHA1: 0e80031740a3389448ffe2a4d2602ff8f877d5d6
SHA256: b36868249f370734384a022bcb89108cdb80ac87254adb0d01cce808edbe3b9c
SSDeep: 1536:DmL0L/fE214KZuQDpyPFg034JOyTqiWOvaLu/54V6+tF9C:sF2aKZ1Qb2OyTqiWO3EtLC
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.id-B4197730.[ms_13@aol.com].ms13 3.31 KB MD5: 09afda148fdeea48dd00bfa9cf9dfea8
SHA1: 0605ebdf97efb060177247b47da7519f4292644a
SHA256: 091de6df81dcbea8ae9f6782ce5878450715100f80a2d61085c5949cdec75751
SSDeep: 48:36NXHtETsUDRZd35ryz5YEpbq9GFYNAsfYagXKXrFmjOSB6DjZLP9BW0BX+KnTzp:36NXHdifLyGEMPBrXvSB6fLLHPbt
False
C:\Logs\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 50867054639cf42e5a884bc929fec822
SHA1: 4439163d1bbf6a63adeedae2dc8080a5e17bd1b2
SHA256: 13543bf30381caa2602b838eff32467babe42644147926cfac6e73ab5fd2757f
SSDeep: 1536:llgTuoomCchv7w1A1ScL0QctZ5xRfKBOuIuVtyrSPwMmOlIcYC3zJF3Ga:syQeA1ScOH5TOOgPwMmeOC3ea
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.id-B4197730.[ms_13@aol.com].ms13 12.43 KB MD5: bf654e58f53b20c5f09b23ae2d2fd423
SHA1: 626fc0d90920d5a2cec0aef3e42581af889393b3
SHA256: beaad3341307722d5d87e9b4a84727f62a63f83ef3db90414bdb73a0493670b0
SSDeep: 192:igX1bNxVxc6NwKg4/I9WRczRcHBlRxJavnY4oOR32rW0y7RRoKudqoN:iebN9DIcczRnY4Z32r/y7R8dqS
False
C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 2194cc8db8ca69909f1e1128d184a152
SHA1: 6e5ad4a7d445e79a52ccd171e30432d918e58ebe
SHA256: 38e15f79a9a8a18563c1c2aa6b497a4b959e0cc47cb2251e6398356aee9a9a37
SSDeep: 1536:O5FWaAZW9ar/WOqWjz4d3n/WKykCRmpYzZHNfj5:UgaA49O/GWjzyn/JykrKzbfj5
False
C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.35 KB MD5: 356a93761213b77315ecc73291f53cd5
SHA1: 7d2c83554d435152e4db60e0f3e4b35c774f5985
SHA256: f9636f4c47fef3406b5a92ae6f2c35a386298339690526eafb0e1a256e7262fe
SSDeep: 1536:AYFJueXLXcai03UZ3dx1Ph9ORCts+Cam9gBn2zqDGlFSoEDwi:AYFEgLXcRFx1XnCh9CIRQzwi
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.id-B4197730.[ms_13@aol.com].ms13 10.59 KB MD5: bd7fa656b5fdcab984a2343e11ba4fd0
SHA1: d484a24ac34947061ec035e8af6c91c3a95dc3cd
SHA256: 16c6cc1352bd912fc674bad771e55d274f39a5f8f38cf36445986c18734b3be0
SSDeep: 192:58tossuNhjWsvUJ2kPgoUlCaxR40pb/TJY40CWzqwQJsjLwRN4R0rF1gj:iWuDBeIfrLbbJeCGqwSsHo4RWFe
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.id-B4197730.[ms_13@aol.com].ms13 3.64 KB MD5: af05a325ebd8df59ab5197dae9508bb6
SHA1: cfdb97c2611d2113cf0c44c90da7b69d5fd21b3d
SHA256: 5ca175ca750705744752ad3a878d8cb8352b0c33cd93275ff8eb2430bf4dea94
SSDeep: 96:NufizT71MggkBzBsBaGztlBlw0nqWtY0BhZpkE6m5264B4:cizVzBsBhBlrqQY0BqE6m5AB4
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.id-B4197730.[ms_13@aol.com].ms13 5.37 KB MD5: 85a2afaf2140f15b5d95671df4eb21be
SHA1: 1d563b28910df374d419bbdd22d0427b75c87632
SHA256: 90564390353b8f1bdfa45416fad86152d0548d28803abd2b2176f0333efa200a
SSDeep: 96:I+McH2QheA7rI1ZE0gjcyWgYSjlEaHleSbTr0bGU5hkg1RiY9iia7Mwpjl5:NXHheA7uG0gjcS5J0pdahH5
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.id-B4197730.[ms_13@aol.com].ms13 2.78 KB MD5: 1715716f92ce80fb1e9d29669b094418
SHA1: 552b3ac5b2bf6447562bc39c4550f4005f015f07
SHA256: 0763c38b3da180bc65e6df2fa85b365255d26f39a7f17a023961c16b69f2a78b
SSDeep: 48:p96OfS0qsbzFlMIcgrZKYf86faQUFd6UmDr+2gfHsn61gdAGwYtpr0Z9a50+dNqF:/6hpsbz3MIcWQuA6/Dr+2gfHs618z2QO
False
C:\Logs\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 013805af776dfa8a63e8c9ee1181c066
SHA1: 628dad71b1db2275f517f584a5a4a7be326e45bf
SHA256: 9a45c195f6eb4b5e82dcfe8e36d54d10257ea0b3428839041f58f1a6f2c0a40b
SSDeep: 1536:/bE4QuRvQBT3f0WOmGgRn/c08eDXosl8M6JEyl:zZCT3cRgRn/c08ezoSh6Jfl
False
C:\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: cfe6d9a279b40ce968450b59da409b85
SHA1: 4139cf98f624ff0fbc6ce05feecb1016f7e4ba7b
SHA256: 157d6b406e7ecb993ce3b4e2a7bba3832b920b3f607b2b2802c468bc8592879e
SSDeep: 1536:zt11B7tFPXRomeqwYT1XGRiOzixqqZK00ca85F:x11fdRrRT1ZOzu/a6F
False
C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 55ebe67d9e68d01b2fe4b7e4e7d861d9
SHA1: 2d5dcad11e0177b987b2d4c748d2692a16432313
SHA256: 354d17269e5bef3138acf76ad922daee47ef505fe12d92b592c6e128131bf2f6
SSDeep: 1536:1rCmLL811LoIHHZKqrHh2w08dlGFBA3z+ynr76xLVHQ+H6+au:1rXL8113TrHxqQjVnCxpQAcu
False
C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: bafc5b106d235dfc90a09377e8ca4bda
SHA1: 8904ad4fbe07e50c54f194e6c812e3d45b974cf3
SHA256: 836228dae1ce606a04a452687f7113ef05271248cf433cc8e7a3204fde7ad24f
SSDeep: 1536:nrKLwIfWHhH8eL7e2a6mXPvdEHTnHqHUzjHiMUehwuyjvN4JqEKBv6E1lclNI5:JhPzgPvWzkGjHiVehXC4MbBFcbI5
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.id-B4197730.[ms_13@aol.com].ms13 5.43 KB MD5: f40b6cc22905872ff52203f5b377a21d
SHA1: 3927dabf66d03cc9983328415baea1e65b0e82fc
SHA256: 48620a12aa38cf07dcbcc1a667dfb119189c6054dec600532a7c2900de059b3b
SSDeep: 96:6Z1570CqHhSFtt0E824cgeat1ivBXKWSlvs96BstOdYnhhDe/n3EY:6jqCqBS0u/yiavs6stOOnhdJY
False
C:\Logs\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 102ccada67726c58559d096e4e7182ca
SHA1: 9b352c0cc3069bdc6863f51bd51797a132deb7c0
SHA256: 246b1ad769d35f0c0d6955d4182ce7c962e2ce0469f7ebb0720d55036622974e
SSDeep: 768:LH/6mAcQHaRDE07EpW8iyAGZ4HKdUc8Hu66h7fD0MdT5qFO3xVWhtku7qdYcc8CQ:BAl61EpnjAUciUFv6TqFw2+eLFESQ9+4
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.id-B4197730.[ms_13@aol.com].ms13 5.07 KB MD5: e1079ea33ec050bb39ec738f876f5707
SHA1: 7bce047a110963821539c2a8d49345beb51af025
SHA256: 95c605b2fc65bcf272be8ef5621c895c665959ff33d00c19626d9ad5c103199e
SSDeep: 96:RhvopsdbJRp/CLIHe90aUTDlJqe90Y8GGZ6gla1PlMWiVSNxz:RDdbJRp/Sj6a8/qe0YQZ6Ya1PzUuz
False
C:\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[ms_13@aol.com].ms13 68.37 KB MD5: fa28335d4bd032af2d20fa4925da5091
SHA1: bee97b64025f6ec46321e480d492e18baffb8ac5
SHA256: 2310bba320a050c156996b9fe414e5801a46bdb7abcc77ba283b2779b7839db7
SSDeep: 1536:S5sc7eztpSryfbPdb37NcoV6Tr3lzz+O5VyAtxpLxyZpRJ5LHLzdL9Zp:S5SIryF3OZ3lzz+uQy3ut5LHD
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.id-B4197730.[ms_13@aol.com].ms13 15.18 KB MD5: f7557345e949be615f500dba8b971808
SHA1: fc09e7182a02f0548a6a3b91c778940473ba3a1b
SHA256: 8bb74436469bfd6342d103693e94b6bbf3e7c5b19576e1984406a2070ee307c3
SSDeep: 384:3D504ij+PuI+KjcM4DMrEK6xmRlQGw02YZW87VhefkU4PC:niRYskStYwCYTGC
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.id-B4197730.[ms_13@aol.com].ms13 5.15 KB MD5: 048005dc956371e8dfa2bda765601792
SHA1: 4201f7bf276f358c494622cb5c4dc7733177815e
SHA256: 28c3a70a1e79eb4d2dd186ba2278be0ee03213344795de857041fa6c01cd76b7
SSDeep: 96:/f3+NAKlemDiBZ6CMqYjfESoPpZmrAMJYNCg2f7kXOGrgSlVHTt2AoP+dZ+zBjsJ:X6ANK6Z5MqYLWPpaYgEUSlVwhmd6jYT
False
C:\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 17b2fcd40d26e69c2af9393bc7ec5a8a
SHA1: 0443c1c06f59bad8817e8d839265b55be90db622
SHA256: c1f99f6baae3b51d3fa569c890fb6cf1d6c218d8f7f58c3d0c55131f7b46cc6c
SSDeep: 1536:oa4W88ANsznFvbA0f9C0+xppc9gUBvBwIGEx6qaWBqyLuVkkNDm:FYNmvq08FUDhxx6qaWBqquVkkY
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.id-B4197730.[ms_13@aol.com].ms13 1.36 KB MD5: 59f9f30dbc1155ddba8b927952858173
SHA1: 962878363152b5b1a1cdda7ba0dbbac451c55fc1
SHA256: e4bd62309ebb86b18b7ef26051357af2f7f08c843d8e9de18154823d2b6377bd
SSDeep: 24:W3tHeexak39JvaZeMLWCONSlZ2lw7QVtpANI6SGw9rVvw2Lovp3Kog:MeexadeCOwlZ17Q6NZ5IB5LoUog
False
C:\Logs\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: ca3eccde323afea446c0f0548f120555
SHA1: 6f3a54e3a3dbbe2f1690d787f40e25f8f0718355
SHA256: 45a89550efb5ac3c51ac2fe975bc8f965ce59da5767ec95a001ad19578e1ddba
SSDeep: 1536:kSH6qAvRspPZ8vyYMGWsr5NZrFjkszc20HtZoHdTTHFo49qAp8akZl:k66qAcuBicFQszPAtZoHdTbCvv
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.id-B4197730.[ms_13@aol.com].ms13 7.64 KB MD5: bb159d19856301b7ae4c7d1807b9c151
SHA1: 44f27984fa86fca5605bbe03c0922eef6cdc3665
SHA256: b4a037f03e940b21fc2563d1e7e649661c155f675dced6cc85d6a672d3970ae5
SSDeep: 192:hY0uzvj2TxFA3gTyex/aKiK1QRwOOx5srO+G30jouIk:hZuzb2TxFAQuesKiKHxIa+G30
False
C:\Logs\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 4508add9138093459a34720d2ef113ba
SHA1: b2b91713171dbd5068402cd855d1ead262979324
SHA256: 72294e0dfcd20f71c82518b716804c44f17b5305ffffbff380638696592b7a96
SSDeep: 1536:Za3SO7cPfVeSyw+fThCkJYMJGnSFlgH0aBQ1HmlkI8R0PMHcJfi7l:Z3O7cPfVLyT9Ckr9kUqQBAkbWIclY
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.id-B4197730.[ms_13@aol.com].ms13 7.06 KB MD5: 90b26fe50a7df0f4fc5e3113a4afc6f6
SHA1: 9312114de09a851775edc0fb975fa83f9eabf079
SHA256: c1d5de8a166ad7f9a6daf55cee7e7f50fa02781032b95c9fc3ce7f13635daffc
SSDeep: 96:H6+kBaRKu97Nsxlog614bL24LIoaajEJU7vBkQeoEUi1nTxqYjEJJzlDX3MUz:dk897KlZOD4LIFnJUDmoEtljEzpIUz
False
C:\Logs\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 1767afc7680804a6de1bdf28a7903f8b
SHA1: 7a87a06876e06a57633fcdcac6c0f9079ca1a85d
SHA256: 760aafb59d4d91e8624270fe364b988d9cfed4473c43d3bee12d72abb0ce2b97
SSDeep: 1536:sguqYP8vzwCo0hB5kcdAgqc6YIg1wBY5Tw53sYuJEtQrT5SaEVK8RKIcY:uqDzwgNVdQczIsSWYuJGQ/4BVK8RKIn
False
C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 130be52d75c27f62ee33dc5142b6cba2
SHA1: b6a6f8c406fb436348a633a99bbc3c6315f15693
SHA256: 21df796e04a04b754eacfbd1316a303303b6c3506163225d1305f79326b4f450
SSDeep: 1536:chCAwErp12f4VuUGbhcWeHo+G6c+qvce89ogKsa/5Qfi3Hz8iJCQ5:wVrp12KcVua/dH/5j8iIQ5
False
C:\Logs\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 3ecb302fac40d81f87cc9c0cb609b94f
SHA1: ccce82030d6c8ffb0dfb9a41344e5e2b82d5d2c2
SHA256: ec60ebca582454cb9b19fb3a423d2c8d413102cfcb5d4fe572d7dbd15d8026d8
SSDeep: 1536:jduvZkVqnK2CBiFmvAuDCxzNLs4iD4+Dmn6JDSGhSJTAFcUjC:jduv4nOmALsFouuGhSJucUjC
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.id-B4197730.[ms_13@aol.com].ms13 8.62 KB MD5: be54498d27807306c1b09b20f546a586
SHA1: d162e36bfde845567d23d87d73594cc2e707634a
SHA256: 61d22e38b27839834cbb494759dd3dcdf6b5a90243c1a0197005fd0d57bb324c
SSDeep: 192:IvTyQR52BEaobQ1OQCKGVKzYpS0iDhmviF5szvk0geWgjibye:IvTPRiEJbQ1OQCK8Kp0AhmqTszvk0HWF
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.id-B4197730.[ms_13@aol.com].ms13 13.18 KB MD5: 80b424d87cb4d0609c7646ca3da4d76c
SHA1: f33ade7d011188447e07ed704a5cfede1470c1ab
SHA256: 5fe2a066a9b4c6a9fad225761075d266cefb15da91b9ceb0366f0304aaf80b02
SSDeep: 384:vxPKyyz4JzlDahTDhP5SYs9kFFeyORO2GlZJabUTH:ZPnyUlDyTDh0YRsp1GlrabUTH
False
C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.35 KB MD5: a93ef259092ca9f5b3d46dd72aba52ee
SHA1: 89b68da01a3932e04a5458a1eee16bb30308bdd5
SHA256: 8999e7a76596135751948637f937f05f8466f9f07935788805d96e3937387137
SSDeep: 1536:WYVpMOYuP96vPM/M99L+Y5r9VFAfRowV6KX2m0d87WCisf0FnPzW:WtfjMWB+SNAfRpPXS87WCisf0FnrW
False
C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.36 KB MD5: 0f24b4b2d168c99c428ede8a152c2111
SHA1: 2ce25dcd9f23d8aaadd8d980cbddf8570b9968f9
SHA256: 93a07e884227ebef4c2adee7205add6e2ffafa7882aef0d7cf0e0aabf6f7ae34
SSDeep: 1536:e6+Pw8Moi10KPsVL9eLZXgQf7fjt1h9a0o5SfUfVe:Dsw8MowsVL9utbt11U8
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.id-B4197730.[ms_13@aol.com].ms13 5.14 KB MD5: 11a8ef30d698bd489040cbceae9b8e13
SHA1: dd72a58cf1627719978d1cdd651ac3420ee70337
SHA256: cbcfba0b7df0e23593b4dd973e6e2b2e460119f7b2ac344f0774e3f04f8052a1
SSDeep: 96:Y9bSn0TSge97z+o6vInSGkaiOTxogbWWgVKgADh5pu09BuEfiPWp2WRJY:10TSZ976o6wntL3TuuLgVKgADh5pu0Za
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.id-B4197730.[ms_13@aol.com].ms13 5.48 KB MD5: 0d5900cec411350d155733145db5db22
SHA1: da190ee8fb14ca9ae35fb96b7dcb9c46c7f9423f
SHA256: 74e07395b6c74626a01414be03162ee53b49a722927b03ac4dc22bc283406e1a
SSDeep: 96:7y/qbJwgsvWrmp//peOjaX4mjY/Jw0qlragiQmlWuLaEeIs/zlxap34RHr:rbJSFphaogYC0qHSLLY/zlu34Rr
False
C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 68.36 KB MD5: f189c978477e72e29089077bca3c6cb4
SHA1: 0e96cb744f522d78db2564b4d7cace8b09d4b369
SHA256: 28586db80fa4ff6e37ae65181499ce175b1d3b7cbd0d380b171f12144913843a
SSDeep: 1536:DjirNMcxcAyl6X3CeV/6pogEMUgmgJSYJ+JXp:DjiricxDOq1V/yowmab+b
False
C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 791eb7a919ae956ab386b706a4dc5355
SHA1: 86bb65464e924eadfa17904512aaea6a4c06290c
SHA256: 1c60118abc63a215c48ad1b20967f11edae35c21b8b73d481204eced360e3848
SSDeep: 1536:fYWmnA5KeWxi776g9+xa1ehv6WIAAkVJFrDn6jQ2i6aEr+MqCoN:fll5tWdvGEv61ALd6rideqBN
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.id-B4197730.[ms_13@aol.com].ms13 9.28 KB MD5: 67ff1568c51b25a279ff423e78003d8c
SHA1: d48e5efc22152aca6f2a2a58f441d276ead4d7fc
SHA256: 89c7b159957b643ff9a5eba650affcbddd4b8200221f734045f1f19ec62b0a88
SSDeep: 192:Qxdf/kjrwg5cloCrPN75iOPbumF3XWEK5dzEx3le0c5pPn/:Sl/kjcgipPN75iEumcLLzW1MH
False
C:\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: a8c8e5b589db06083e8f7b0342ed4827
SHA1: 578ac99594ba56859ab406456da805939ff2b224
SHA256: b918e0a1f61640a50479b5da2438f60cd706cd7d51607f12e09d065c58343f44
SSDeep: 1536:2HOAR7N0sH7tiE7FekuOjg947eoArm8laa6xYmGQBzMW2S:LARTphuOjKhKGmTBzMW5
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.id-B4197730.[ms_13@aol.com].ms13 4.53 KB MD5: c19f7a73f8e88e4d3f58bcec36a6b800
SHA1: 9eea8477b471feb207f03320058e2cffc6ed0c5b
SHA256: 657b267c2b8c5708c7b43297dda2c2dd36b888dab617ce5d43805b8d8f701cea
SSDeep: 96:11RqwOXct6+wZXRmJ7R5dswDGULRSOl3MlfTHzeN2doRdZOm5M:ZqDXBTJA7RlStlfftq95M
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.id-B4197730.[ms_13@aol.com].ms13 4.11 KB MD5: 674c6f4f8e9eff9ba35f1496b03b42e5
SHA1: 5e5b287a3c187c67c50c2bf4ac14fee231a88cb4
SHA256: 012bae820eade6ac82d33e8b978364a7249c3dda28c4ecd01dde639dcab78d48
SSDeep: 96:jmzbOSMlj25obFk4TPt7St5AfjNjb4utiTUseHEnaO:jmvNUyATTPlPpnvuMmaO
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.id-B4197730.[ms_13@aol.com].ms13 3.29 KB MD5: 7a0e97c8561487dbde644bed1dcd8498
SHA1: 467f5ee2b0e52aa6cd5f5bc6d3ded89bb0743dce
SHA256: bc367e67b7d5a6582930ae250761606887b1af9257ca75abc605d9782af860e4
SSDeep: 96:UQ8oY+jyPmkk0h0Mg4ICUGh1TLNLFujbO:UAZjyK0h07CUG7SjbO
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.id-B4197730.[ms_13@aol.com].ms13 3.54 KB MD5: b1eb582ad35903eba892d645c6098acf
SHA1: 424c6cad4b759653eccff3c735aeaccc92f898cd
SHA256: 8caf66db63a1a75a3516ce13e948c49e5aad2b691ce696777439c768217f16a0
SSDeep: 48:wqquEwa8vYq4z6Isfg3uE1HlHcmN3R3j/0bff7fXB94eM25laIME529c3RyAl6B1:wq/C8vwnuoV1zqf7rRlYExRRlU/9
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00790_.WMF.id-B4197730.[ms_13@aol.com].ms13 5.79 KB MD5: a5386b098ef10a888447dc6554e6cfc1
SHA1: 95400495ddc69cbc41cda2c373c7dbe173526622
SHA256: edb5d3f898a59a43ea34811ef75297c87323d01dedb1e4a353cf5ac8714a919b
SSDeep: 96:X22jP2kbKPdE7ro6kukGDlfwCxHwt5SeviV6qVeA0k4u6SEdpaTQig/oAjkP1SD7:GaPjbKW70wNwCBwtIea0FAN40EdjRnQw
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00853_.WMF.id-B4197730.[ms_13@aol.com].ms13 20.34 KB MD5: 7f26cdf6da0a6d25613343d26da79bfa
SHA1: 01d5092429f3f5cece4b2670924edcf8744fd4ac
SHA256: 34281831417aa743fe11bdd9bc1bda97de4d7659ce06261a7978aa8ca630688c
SSDeep: 384:c/MRBcq+VSsWEyJLLRuO9367TzdQDjx+gjIol078QFd9A/EeTW8mMoyZ:cEBcq+crLLQhQtL880LT+P0I
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.20 KB MD5: cd1d3dc5e2b5401495071021c7605568
SHA1: fbdb6356b9533f8aebd9b705ff2f697886e03b74
SHA256: f35dc6e3e7920c285df4f11218b6e9b8989d28e9b8ee56a6441a6aa4fb767d83
SSDeep: 96:skXDcQwKj4ZMhhDHaeSqDVT/ywJJ1H7ogyVo3nSllBPAUvCic9kQ:scDuMhhDpSqDVTKwJJ1HkgyVwarskQ
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00015_.WMF.id-B4197730.[ms_13@aol.com].ms13 4.86 KB MD5: eff7ec22dc01bfaf8e8a716b480d7fe8
SHA1: 404ae061630599f338a7257a1abcf9591823e72c
SHA256: 34d78f64512c2a924577f89777eae1d667e72ae86a110b8be90edbba10537630
SSDeep: 96:142XPuxPae1s7Se7TGXAxscgLWo2jq1xOD7qwWFLHlPc+/Q2y5Dr:XffTUBNLd2G3Ov+HlP5Y2y9r
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.51 KB MD5: e37d8e5200467f63a0d33b286428a656
SHA1: 074417e4ef42714ea91340197c6b30824b8b2fbb
SHA256: 6b88e83ac3a37d11041702b652a6b2f5e918218b6762b466786c5bb1ea4ff9cb
SSDeep: 96:a6/kri4tLMRzco9Gp2C3pXyQhp6af+TyTCyAr0K3qEEVzeHn:a6/qxtLMqocH3EQhpCyhOB3HEVAn
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 7.15 KB MD5: 91e39905707e687eae96d3673b3e77f2
SHA1: 5478f72969cd3ee2226ed17e768c2beacfc5b535
SHA256: 0e9b79050bac5115fa7f32e1ed2d981c2e5a5872a9279ebd9d8b32c5eba94c4d
SSDeep: 96:DDf8H646zcll93YU4torb/1mo5cdxlcvq+/mcO6YW5QDe9su2sRPO9bnfx9NMHru:PUhEY32tEthmtt+/UliOD7fxfqs3PCs
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00932_.WMF.id-B4197730.[ms_13@aol.com].ms13 14.32 KB MD5: 752eed319f246b910b43869b93964908
SHA1: 85042fa349df61fd9f8d1fa49fcb6e38da3b94d5
SHA256: e60acd96a5cc2946c4a9627f2ff1eeaa94492ce3e0a96769080413658eb93790
SSDeep: 384:X4bOUBVSmpERSOkue+o2Y/2WpMEkobdiFZiIq1o+h:IljpERSRue3jMEkoEGbo8
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00914_.WMF.id-B4197730.[ms_13@aol.com].ms13 10.82 KB MD5: 5ce6fbec1dc55db1224f6bb674cc6e04
SHA1: 1eaec1eb42a2bd502809f75859c071cc96f2a7d3
SHA256: 26c1d835b724cd07713232b252cec8c2217071f6e24a72b26992361ca3af6019
SSDeep: 192:cyywFZvL8AEWx9kcTYvU2xcPDqHPP5/b84wSqerxQ8J2kkFKwaFHx+4dVFdrhik:cqvwArbifUDqnh84wSqSQwkFKvFR+QFl
False
C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 955d15b2b9e04646d42db9b59794b069
SHA1: 1d8310c2c10ab613905369c1ecf58ce907f2c4cc
SHA256: 3fd80ad4cc24e50fb8906cbb3384b77801564c5a1129672fe1e3748bc98558a2
SSDeep: 1536:QgUWHMKjie4QC1MmAniDbhlSnTq/v0f909ldVCD/qBYiCZKV0Tgqj0kotxOAsdLW:RJ2T1Zh+FG9ldVmqx0j0k8gY7
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01060_.WMF.id-B4197730.[ms_13@aol.com].ms13 8.03 KB MD5: a5e16dbc5e0d4089830bfa06700ddc4c
SHA1: 92fdf73f79693e7a4f895dc7f9b860e51eaf50ef
SHA256: 630bbe2be6fe37ad05f00682501fff61077dfbed160ee069e35b5c28c5576ea1
SSDeep: 192:alhHwpvXu+Lf4LCIlTXrfs+j1SVdaaWwsyVEc+OTakl:gHwVXu2gDjrfs0Yd9WwsPmTai
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 2.03 KB MD5: 6fe91d00e8e7bc1ddd216a3872a45796
SHA1: 13404e3fd9919520beda1754dc20b68b88b26284
SHA256: a426df056010aa410b4b890593c860259056ba5bd229b3cd0b8fd34414ecc928
SSDeep: 48:+oXnQ28E+ZqdFDlgg/Fszxga4iaKFp7aqNTxgrog:TqZqRhF0gZiaM7Z1m5
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF.id-B4197730.[ms_13@aol.com].ms13 1.79 KB MD5: 29734e6b96cfc721098380f10d97fc55
SHA1: 366fa173e653601cd8068ee54ffe25339a18df50
SHA256: 760e116f96f5442abe5d86a4a75b845c81e4d122d82fb57a1bfcfbee8065b9dd
SSDeep: 48:EMEdF/eTvB0iQ1v4VGDUCaQ11XhLQoMcfC+dRR8cZog:rEz/eTFFGZnXGcftdXD
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01216_.WMF.id-B4197730.[ms_13@aol.com].ms13 5.93 KB MD5: ace6b9c35aeb14849a4cfcf33ff6d257
SHA1: 1a7a0b261c9713c71d2436490fb83950cbe4b1c7
SHA256: 8f80114ad51000d2658150c5701ac00bdd7555dbd02bf5d79a3b28f2c6202119
SSDeep: 96:sbNG3GGbPm9hL5vVvyNg18YNeBYNeodp31zJsl1i+wA96U+VmAMcujTKAkYeKeII:UohPMhL5vw4zveoz1zie+wA2m7eKeIZ+
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01184_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.90 KB MD5: e9caf5dbb7d8e608b0097399876fddff
SHA1: 2df8a620d9ba9d0a5a7e294ec540698266c967d1
SHA256: 5ad374765bb8399375b8e02c2c0d3a4260d87d85c41853a7e24ff4ce35c08798
SSDeep: 48:QMNuheY2ppW8FFbbbFiCluL4huMxAm+qIE17o9Xlvzr3lQx26i1E/N6TXIV2Afx8:JY2WEF75u+nGm+q7UP3lQxYG/NW5M2v
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01218_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.18 KB MD5: b1dc718cf9f760a02bbd57b7e2bedd1d
SHA1: ec36445e69b4e5169e975c660e914d90022b2cfe
SHA256: c5a34a587a538ae8c09649ba498646789f3ea354d5f311a533bff9538a4fb0f8
SSDeep: 48:dxckz/SLVlL/F/ebuUMPnpZmCq9v2rNX9wlJjsZ5mkJ+AmKnwlBEbLQFWOjuog:dxcG2EuUEfmC6+NX9uNyxVPwlCw4Oje
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01174_.WMF.id-B4197730.[ms_13@aol.com].ms13 27.45 KB MD5: 34b979c3c51c76907f38f7ff9acc94c1
SHA1: a876b7f9dd6846d136ae26abc03e38fa334f22d5
SHA256: 2aa96f447092080a49e719b21e18377e9f01d8f280f34b86e61135a78279d0e5
SSDeep: 768:UlN883j32MyxCigbQF98A7HCRfmV5UCJOrIO5Z/J0:1A3yxCiXF98pNC0r955J0
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02122_.WMF.id-B4197730.[ms_13@aol.com].ms13 7.61 KB MD5: cd38972ddc748917b2ad63c22833adca
SHA1: 82c6c90aab3b9bfed8f5177b6b9e4d69fdafb638
SHA256: 69824354f654b18b34cd90e0d4f43c89885cd0a655a918680e0e77b3a755c1aa
SSDeep: 192:UBwqemRHN9UCTvDzRcCOW/82OPluNTEOBuXW59M/72:URRRt9U0XRc1XPKBPK2
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02559_.WMF.id-B4197730.[ms_13@aol.com].ms13 6.71 KB MD5: 5f135cccf0b6c5a47d8ee04ff2f033af
SHA1: 81b2afb67f250d178ecabb9dfaef3ca1c80ce622
SHA256: 8e5a5676e90727f71e802c432e8b5d3dfdcef6bd9efd6521855afd0d92150b60
SSDeep: 192:S6xiJtrZ2mhnN6Y+hNFoAHApX6jazlJ6eb:Seir92mht+hNLgpX6jazlJJ
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01251_.WMF.id-B4197730.[ms_13@aol.com].ms13 2.93 KB MD5: 52fc904125ac2f41445b5fdf41801ceb
SHA1: 40ff6a85907b49b7cae2656c5027f33b132bfbc7
SHA256: 4f21458ffc5eaab9cf40d17ce21c468859acfe005c38c62f28221538ba280523
SSDeep: 48:aUFRQHCBRCPPdxKvWU6eUf1xadcFMaOqrVSGdWVP0wwiLutVzbW3og:aXGePrK1XUdxadcFPrQGauguVzbc
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 25.95 KB MD5: 8b3be3973209418d7380627037f89112
SHA1: ec482af0ab5454467ebeed13e5731885d714b810
SHA256: 3c902d4ba4f6ee37030d71fb97447264b694fc30b94d31757022581d4d066e85
SSDeep: 384:WWw4tohyjeiOS+ApdP7YaszL33VgECwibOwwIZ1jsjrqk9wfr6CCeaZ/UeAF:LCViGApdquEFgAIZ1jsjr5CrNG/cF
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02724_.WMF.id-B4197730.[ms_13@aol.com].ms13 2.29 KB MD5: 42ad4894ac7b3e1cd34a61713f847514
SHA1: 8212e0ef2b6f3c8a67163485632824dac6e71768
SHA256: 30ce5d06013853215e733c56cb5d53f10eeba03430c538c89d72b1595f7595cc
SSDeep: 48:36nzPbln/eN3llU+ndfgPxjW4NAYm/jfI113J8zZIJ9Tl1VyS+XX4xL9log:KnzblnWN3llU+ndfgJjwfg11Z8zZuv1B
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01545_.WMF.id-B4197730.[ms_13@aol.com].ms13 7.43 KB MD5: 551790a275145d4cd2ed1c73cca89efa
SHA1: 7b3f1b55f4e9b4d9c30364d0616e97d46574478b
SHA256: 83d66775fb4ba7b664b2c67291a232b6642c930cc44b899d30b9bc820a5d03ff
SSDeep: 192:dM7+nAmICsAEBdYaB9fdgRXCRCt1ozZtuN+Y:dLhzsAE9+RXhtmzZtuNV
False
C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[ms_13@aol.com].ms13 1.00 MB MD5: 1eb13b1691daf504e001300da2b949ea
SHA1: ff2b5800341515fdc0de25a74c8be116f179bd19
SHA256: 253224d15482b76d3d0f86417b6fac99f741a43b57eefb19647109e728019626
SSDeep: 24576:lwRBEbPkuzhYzhKesFlfEaY2LPGaRa90wp30Y/ztuGJwb6xvHBm:lEuNYzhKes7Y2qT9N0qwGJ3pk
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04108_.WMF.id-B4197730.[ms_13@aol.com].ms13 2.53 KB MD5: 95b4ec5344860e8a2a24f33f426c18a2
SHA1: b011dd4513926357554dcb78c16bb4adde11153c
SHA256: 1a37c9da0f052a5a71ba21eac794aec2b83f083fb8cd976fa01f2868dc2dc720
SSDeep: 48:rbpDj9X6jREakrK0MXqkhWmjzluFgZeRL5acsTjgvtJ/waMT77YS3CIog:ZH9qjRZthhYOfcWkboaMTxyM
False
C:\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 4420ab65048690c3e572fee70114c763
SHA1: c75161feb1d4a812a5ed6c8add7555bba3fbb180
SHA256: e01d6336560596661bdccfd564217aee1c641111f93235955d596395f9f36aa3
SSDeep: 1536:QXe7Uu+QFqRkVLLnkUBxVoWA0nuF/fG/S4WEZs:Qu7P+BRkxLRBxCWA0nj95Zs
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04174_.WMF.id-B4197730.[ms_13@aol.com].ms13 2.81 KB MD5: 115c7a10ddbbf8fe4f545631b755effe
SHA1: ff798e1c39e3f49ca2ff06590ae3f9d406ad7aac
SHA256: 81edd31026bd9db3e28256abde43e7c7fd5de12eb3a21369e890715a644ce198
SSDeep: 48:IeJlACPbB09wOEgSsHDv9yUH9Z941/fb8VRq5JNzyAuOpvajYyog:IqOClszEgvAUH9ZqF8VRqYA3IYS
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04117_.WMF.id-B4197730.[ms_13@aol.com].ms13 6.15 KB MD5: fdd2e690e870b6b5a6aeea8c70eb74fc
SHA1: 29e60e98095d86cfb07d285e991afb1f9d5401a0
SHA256: d90c70a30bbcc84b816880aa02f06e53f0c0b912cc2b5efef70b5c5aacb22691
SSDeep: 192:7S2JpHliXY5S3nHI4+8ON2+lQN3zJYh5x:NrF5SXI47OXlQNDW/
False
C:\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: 9a3254feb60eacb7d6724acfe9a1f6ae
SHA1: 37561196c92bef7dee9f02ff020ca601ad5b694f
SHA256: e00b8b90c75e26c56777e6c35ba671caf834e7fdc4e0f37fb1ab41865bd6e695
SSDeep: 1536:llsrVoOd0cbPEkxyP9AeK1kioOyuqRJSjJ4yBDAqavkIU6F:llsrVxBbPraAbi1OfqRJSQbUg
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04191_.WMF.id-B4197730.[ms_13@aol.com].ms13 6.71 KB MD5: e51def5bcedf3999597625096788fee9
SHA1: 693767d0ba2e8beed03718dc22d14712531cbf11
SHA256: 468e360ff150cbc4360da6e12b91d1500a4e95de7d15e4d608ed6cf5e3c9e6dc
SSDeep: 192:nIfUQN1bLsw9TX/yStplHNlhZP6QNqCb0FlD7a+CZ5:nIUw5/RTrhB6QNXwP3ej
False
C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.37 KB MD5: 516355a350bf1d434aebc66d609bd0e3
SHA1: 7ba4445b1e716075168082b7c9a72135b9153d4e
SHA256: ea255b83963ea64822cac2b1be5e48b045a2b4a1cf83dda7651320b0df25ed25
SSDeep: 1536:oO63DmssCPwWo0KR8k0G5WUCG8uB4Mxwen1WWtl5rXQMglxR:KxPHZKqk0Gw2ln1WWKR
False
C:\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.30 KB MD5: 40003e823ef8041184f1b291e157a3e9
SHA1: c75585b82b0380f1c578a0b4ad7c295cc3c473ee
SHA256: 23d0bd2f973dfce3ec36de8263a4e1c27e0f57712eb3916e4a9f0f9766b4eb99
SSDeep: 1536:3Fy0riMldZFd6sRHyh6/M4tcRXIwVd2QE3TPvIBzAaoOp:3hldJRR5BWXIwVd2HbtEp
False
C:\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: 37cf1d27c6e82c45cdf1b4acf552b109
SHA1: 87da79f9ce325282a46d973e6cbd056185f29417
SHA256: 298071d0a8596002c3335162b657cbdb3208b67ca33ef27457c23b751048b6c7
SSDeep: 1536:T4XS+nyvTDo4nNlN+StudsM9V2fVACHkQ4zO1XSrTTRZwG:Tln9vtuVV2SCHyzCX2TR1
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04195_.WMF.id-B4197730.[ms_13@aol.com].ms13 4.75 KB MD5: bd00b67808a8788e559e7379ae1b56c4
SHA1: 2473885be39155801aff40f8c0f5f444c9f228e7
SHA256: e10eee54209ecb4bc5d9b74e5e9fba29c317d7b44bd049a2e9757de350f4908c
SSDeep: 96:O00344kvCueIMoWjLo/gA/MfehdGO9BQj+knlWsYQV7I/emF5L0:u3+vHesKLAE01Qj+0Ss7gemF5L0
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04206_.WMF.id-B4197730.[ms_13@aol.com].ms13 7.73 KB MD5: f1a13d0a6e2c08c3e0569f1b52699c90
SHA1: 7d2a6d78aa5d26a42eba967e99ecdf8161f07257
SHA256: 5b7009bc67c05f9c77c5d30586722a7561237045b7200a1face39129c1a9134c
SSDeep: 192:DvU8y6wxiAM1maz3urK3PcCU8TAVeA/iJWBt/8x5sTR7Y42PJ:Dvqxa1Zz+aUCU8TAtiJWBV8eKR
False
C:\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.32 KB MD5: 41944f0154d6dc37e31a73bc0978512b
SHA1: 9a40ea5b468149d4739284fc46071fdb5afca882
SHA256: 6ff6d690746aa3ebd47afe9623b2f0ba7df1ab17c44afc6f39a2120ad66667e3
SSDeep: 1536:+d121SA5OX3hngYHUEXgrBpiNqrAbHjvovvzdTUJ8a+j:+jUSAEH19zQ+MAbbYZwJ8L
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04225_.WMF.id-B4197730.[ms_13@aol.com].ms13 8.53 KB MD5: 97b8dedcb26a40ae54e39f6d9f8392ba
SHA1: 121d811a8ecf74e52dc58190fd19b63f5102a5b4
SHA256: 67d1d5b721e45389de50432b752e0dd4beb0cc3b7998571be9af4522bd61cb51
SSDeep: 192:72dXPipR+AcMEXGu+pyJMRoGeQpHXZMhfw5+wjOmpGbgck7XRzAZXlQ:0cMXMu+pbRHeQhXiFw7jNwMcqF+G
False
C:\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: a90211c3e27995623cd98c0408a58c14
SHA1: fc10726f7a8a5844b67b14015e3cba2b403214f9
SHA256: b99a8126caa2f8bf722bb197bd254fa40680a5a3845a17c7573e2da452a7868d
SSDeep: 1536:vx89SMRvrVQJJdh2nYHzGoslHw1dferVwHt8oLC:v6DRJIJCnYHzGBlQfSuO
False
C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[ms_13@aol.com].ms13 68.38 KB MD5: 98f98f168d74c7ccb89df42618533ee4
SHA1: a132cb2e36cb7ae611757421e294340af68f39a0
SHA256: 98eaeb35b13e231a5a2990103cd3fbf68f7809869c3695f4ff87aca6550c8869
SSDeep: 1536:jU7b9+he8/5qWLUl/Wl5RlieL7uA70Z4F1A9zTkD/3u97CF:jU74he8/5qWLs/yRlSY0ZI1A18GJW
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN03500_.WMF.id-B4197730.[ms_13@aol.com].ms13 9.26 KB MD5: 0a46577b33f6d8bf694ec5765a7ac014
SHA1: a674336f89ff6645655e3357da8c7b239e154c46
SHA256: ff539b287639c558fc75e9e9ca811c5b5b33d0f52beb35f622340a6658e2b85b
SSDeep: 192:Bfu1vpEg5yjIinutRFlhWrPTWQ4eivMQtBcCkBikakv:Bfu1hEeKIiu7FlWTWQ4vvXfco/Y
False
C:\Logs\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 68.31 KB MD5: d5dac444bacd77ec3bde623dea9e8ca6
SHA1: e753f5db0844ddbb7a8397d30c0558f6e2391a46
SHA256: 864148922098b6a2c8b5962fb3fd393d039e746b42159d0070652aa459b849b4
SSDeep: 1536:4yPCg0FUs1ZNfeoeYe6ScxZN0QQThYb5Yht9J3xc4q8MpfU1r35V07QIO:HCHFUyZUtYeyN0Q2hYlYz/xc4pMpS5WA
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04196_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.31 KB MD5: 2403f9cb0425a1ee82cb94e48c05e579
SHA1: 031e55eae963e6b6dce3a086354a6e1965332745
SHA256: 66b0c434abe7c4fa8807107d5897408e98c4c583f563ee735e1c907d4637bdef
SSDeep: 96:u6AzGRrrqLBi1ZYiNjzKJYmEeG7KedKhHnsCqQcPu:u6AmIi1/NKJYmjOdKhlcPu
False
C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[ms_13@aol.com].ms13 1.00 MB MD5: f6e30b72efe7e6205f130a3d9db80db2
SHA1: f556175ec51631fc450add77f0d6846d2d5b1186
SHA256: a0a1772f8aaabb22a78e9d1faa6e6392014ad73e0deb1c282a7886540fe8443c
SSDeep: 12288:wGSb4wETDedaUpmRdzR/skkNa1hS4ZtPtkPIz+MyTKyHozvY6VhUfW7oArEikTUQ:NSieQNTRKaXntkPANnhBbkg7AyXmvx
False
C:\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[ms_13@aol.com].ms13 68.33 KB MD5: 5d938659363a99ab40dce9bfd1df4ca5
SHA1: d1c651ec740ea0cbe6c5adef1be1aa7ed9a7c2b5
SHA256: 45f2656081b104f43533def06299249dd9da57cde4a6bb12f1bd64556d496879
SSDeep: 1536:udRER1e1vtn9vDsecCZIEVHoua3HCW0p0yiTw7YnRrEZK2EXDOeQ5xLJC2P:IR6yVn9Yec8fVHJaXs7YwyOeQ34u
False
C:\Logs\Setup.evtx.id-B4197730.[ms_13@aol.com].ms13 68.24 KB MD5: dbbcfa9042f92a751fc3d30b2953804c
SHA1: 006a12a72f98675eb033420c9c56385e6bffce73
SHA256: 09f0f287bd9884a6edebf3261cff0b08c9cba7cb9867e3b987ad61f2f8bd5463
SSDeep: 1536:HiPYG3pM8VoLluAhbOrBXqYmWM4bAaWHZKrIK9JnQnxJGTHr3:6YiDAKrBTVhAM3gbGL3
False
C:\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 1.00 MB MD5: c04a4679c1017bb40a455a6398a35a98
SHA1: 0fce23265372fa805ec4a0a3b27358e379358e66
SHA256: d9628913c0e8ca7fcb3960056f41e37f876ab74ac8e3f54d7b6ff75f18cc85e1
SSDeep: 24576:2RGgT2dCISYzHlOha02yW//whz1XuwuFzqkoDSyh3taJH4QYw+LyRA:2R7TUCnm6a/FALEktDSUdEVYwlA
False
C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB.id-B4197730.[ms_13@aol.com].ms13 15.86 KB MD5: 756a47d4d512135cdce35829fbf1e03e
SHA1: 5e96c1a59b6aaeafc33f9268596d75dd302d87a2
SHA256: 5350031a48fe3ae352ca3b0274606702c9e4fe63c4ba32516e70167386568dc5
SSDeep: 384:jvq8+tuTMerDpjFIE25YINDY+P78lf61nIyL5P4A:Tq8+tXC/L8Hmm7+CFOA
False
C:\Logs\Windows PowerShell.evtx.id-B4197730.[ms_13@aol.com].ms13 68.27 KB MD5: df823b718b4eee8a2580892a02efa80d
SHA1: 3bef14ef353eef17f5f79da2539af1b991fd97cf
SHA256: 6a0f86580f4728093819f2abff54e9e0f77fc9396215b5f77a4fb54c482b8657
SSDeep: 1536:/PdpbyyePYoFVsltCEzV6tYhQSkFaP5ihD3ozAG8:nTFQFVswqhQSrwVG8
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 18.47 KB MD5: 0524d7a382ff9480c19642b5108f480d
SHA1: e4e1bfd9e0045b2e5ee652828568ca5eb211f4fc
SHA256: 17403c0080c10756b1996a506562dfbfa9cb917837c53c5b9d84ed5a66160985
SSDeep: 384:f+JP4B1Xoe67oRTuuOt82NWBw2tAHkjnIUrR+04MmriVqZ/qe:fyP4B14vowFt8EEd9j/rR+0wriwR
False
C:\Logs\Security.evtx.id-B4197730.[ms_13@aol.com].ms13 1.07 MB MD5: 6a2b2c5b9192aeee9f71d22e7674e244
SHA1: 9fa288634f79d6ba488cad7f37895512d99bb73d
SHA256: 257128afc0f963d639bc18bddba8a4a57b0ac799e99b7e356a53c054ed71f5d5
SSDeep: 24576:Ba8e09PS7Fq93SMMChvbs9xYuMNqY1PfLCNho5cL+mK2uuysWa:BaBMPEg9MCxbs9xFVYBwX+PuZWa
False
C:\Logs\System.evtx.id-B4197730.[ms_13@aol.com].ms13 1.07 MB MD5: c56c416afd2222fd25208994019ac75d
SHA1: 5ccfeb0a5afd009049653ef86108ee8067347ed2
SHA256: 9572af7b7f79bcba3d4498c4977aa9da9643284bd20d27dbc4e7b2b40a0455af
SSDeep: 24576:zRhrCf1bndLmirITvEfHh3q1HlkrKsm6IhY9VaLL93NohW:thrCf1bdLkv8w1FkrPLgQaLL93Nok
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 18.47 KB MD5: 97e7f916e054f8f2cdf628aac31d76dc
SHA1: 4eb552ce7dc3a746e43ade382108f187e1f55bf4
SHA256: ef4b166287b6f91d32cc74a121b733f16c06135f6aa966731bdca8a32ff44c18
SSDeep: 384:C67CbJoz5yF/KvJhj0aFPaOpEt1wUXKgku5/WjzazTOOFOY2IXf:bz5YinfFSB7ZKgb5/WjoTOyOYXv
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 20.99 KB MD5: d7b846f1c6f9d9b01409a8eb698b4281
SHA1: 07f7485eaf288ffd9348ea1e263a35ab917cf326
SHA256: 251786d3c488d237242b172fa49740b4833b099692bc158a192b0b3461c6bf19
SSDeep: 384:F7U9QHgcdnGPExSmstJV3bWGX64+c1+td46dkH/oVKUz3lO++vBxTeNXJXDjd:NVzdGMxKJFHXH+tzeH/oVKSVYHiBJXDR
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[ms_13@aol.com].ms13 18.99 KB MD5: 98e6da0e61eb01ad584b9ee82457d231
SHA1: ad5bf2e315e89ae73cc9eb4064dc049ad34ae8da
SHA256: b5470f76af24813cab4c82cf3352be2bac0826472aeff0eee2f00af75fea5aff
SSDeep: 384:hLPdsJ15HWmV5IYh3nUtFUHUBJnTKFEYR4g6RVsh0+kR2Pi1rUah:BWLHDXIYVU00BJnTKFEdg2C2YCP
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 18.97 KB MD5: b7af2c9577987c11532a9b74b3b12dee
SHA1: c798b227e49815c099b2bf1e4fe7a473188f3f78
SHA256: b8497da567828514ca535fb4aef0e54384b709cfef0fc7bfbd396abab8bdc3b2
SSDeep: 384:4ntq2c/KAmT+DM3v8YgA8nD1HiDKB4biYQc9Ddpn0ISrNURw/4XIOD2MaN:4ntBc/NrYmsbi5cV0PJie44OW
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 18.48 KB MD5: 6d48bf6ef2154bce1766dfe2e8922586
SHA1: 2f56b43051a824343bd9386848389115a6c6b49b
SHA256: ff85c3ecfbd8bf1710c8b1a53136b7fe343e1fdece4edf41b02ccc5e4457c835
SSDeep: 384:tzXtICqspT/Cvyx5oY7IKx6D6TMlDIIiiyIYf4QS6YwEy11tKqURHfgusm:BdPT/5h/HTVjxq+YwRT0tfgU
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04235_.WMF.id-B4197730.[ms_13@aol.com].ms13 7.86 KB MD5: 8662ec3930d3446fcb53775d55e8e57b
SHA1: 899098ce2478c81c9600b3b46c1ec3fb0b77dfd1
SHA256: cc7ae75fa9f150ebbcb513e94b2d87bdb5185ff3ebbbb54ebba630bb4d995243
SSDeep: 192:6+P+RhIjJbxBJM/bwqBjQluJkIt/DrfHuCfmGPcGemYx:NP+fIVxWBj2e7DrHxPrJS
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04267_.WMF.id-B4197730.[ms_13@aol.com].ms13 7.86 KB MD5: 5bb647ba8b1a5cce4ab1cc3ec78294ad
SHA1: 0aa438d8d850aa5e7973f257f50ba756f691fce4
SHA256: 46dd441b158c46183ad11a8b1616e71233e6702793c5dc6aa88596972a72ab84
SSDeep: 192:5eBbYQ8/tSpWGUU7y1J5XePQLsqePodLhcPS:cbYQ8FS2U7u5XePQoqePoF
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 11.63 KB MD5: 799286aaebace6a8d8d70d903903e610
SHA1: 35d5c49b863120d431ebdd78d725e73531f663ca
SHA256: 5b12e127dc85c8208c12b947bdbef2d89daf2c7a1b6728b02943291c50273e28
SSDeep: 192:FKFxQiMpUv3Fg3Q7tgSZLdVLNkLyunlPpuNf4wfq1VmLw5nK9qXAro8NUUWQmTGO:FKYTs1g3GgSZLrLWLyulPIp6TmLw5nKC
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 19.47 KB MD5: 71a830b56ac41e89c6a3dd9ba59a401f
SHA1: 9be1e6a0bcccd3cf1e27c804b806accf081f5796
SHA256: ffa0699b0365ad18ef05129c4c990502f403277bbf4025e2da5a108ebcd17614
SSDeep: 384:JWbs0PpJh8gr7ile0eJtPy2QOvjjxvOtcEqNBE3PY9Xe/8YeY/pQX+SV1:gbthJ9Iq2Ovj2SW3PY9OveY/pQjV1
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 20.48 KB MD5: ea54e74f62930b02675e126046304f08
SHA1: b4aa02f604761c721a6cabf1fdcf539fe2de67b4
SHA256: 8edf37324d898acc08c578f414ea5970b927edcc4e6891c0cad4d08f01ade9ab
SSDeep: 384:aMDSeAojJCoIpvqoTB5DxZKapRElPu0jMrXc3qo5mM3ctlWhQxFhMIoFtikyYE5:a5QJCtpBBYapAG0wQqsel/wFJyYE5
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 18.98 KB MD5: 0e8c83646a7a4955f4b3e9628e564620
SHA1: 94e094d2782aea1a6fa3c9b083b2eec3b3761452
SHA256: a40614fc3b7b97ddfcd4dee91be95e93a37aa8b1459ff63e4dd44857023db5c0
SSDeep: 384:G4At990/qjDxo2K0ulAccnmXHsfy2WpN3QCTMrgWaBw4JFTYDqiyOwqVBxvj:tC99YqjlEwBn/PWplQCTMbau4JtYDqpg
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04323_.WMF.id-B4197730.[ms_13@aol.com].ms13 2.67 KB MD5: 344d49180753cbf7badcabda11973bc3
SHA1: 9473aee97f5a9bba2bfae7125d796ffec0921fb6
SHA256: 538d03b73edacf6dd22f6877d4d9a9be462f9a797742323002f385e7f271d414
SSDeep: 48:2iSW9H3YEVtIPi1/lmB+xyjdyhSjDrxP2/x55Ort5YcYfBqL+5fAyzog:2iSW9XYJZ+x8ywXlu/xyrt5McqB5B
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04332_.WMF.id-B4197730.[ms_13@aol.com].ms13 4.43 KB MD5: 474fd9bec343201d76de4ddd68315544
SHA1: c565819e229cac5ae19bdd16582f5ccd7664fb50
SHA256: eab9820d890edaf64fff41fdcc4c3d1a4b998f7ffdbff4d9bdffb8c98c1b1b00
SSDeep: 96:UsiLBZwFmyb6xytE77z3DjTcEw7ELcSi+rXpCg:UsABZwFmybaAEfrDs0cIrIg
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 19.47 KB MD5: a6d1f8a5342ec7fe67c08dcd29f73acf
SHA1: 90be1bb06f40024044ff70429d331a4149f852b7
SHA256: a8bfb7def751f1d52356eed48c647804828baaf83b4d72e8e20f03380f06627f
SSDeep: 384:7eEW643l+I2MODHz2sLEvfGbaEIJsJIKg1lr7+wQFm/F2gGTvLYOH0DAf8sXs:72Xld2fDHEWbnzSL/WwQFRvYOUDS8l
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04326_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.51 KB MD5: b85e82bfa84594ee20692d2082a8666c
SHA1: 3dc705eb7beb4299c8487c19ae50826060850c5d
SHA256: 6a66b167682be57c2b6fc18c5bacc3caa342aa4a11142c068968fc2eb639d7af
SSDeep: 96:BE59hRQDPYdbl9gtPh3PC2FWkgfZWQwRsVW89tJP+:u5gsbLgPhf/okgfZWzKtJP+
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 18.97 KB MD5: 40d78bca6a0a54668804fbdbbb0fdb2f
SHA1: 5b8b1a88c7fcbed6c0ac499face6512682ef8812
SHA256: 39178f5927722df6acf6e2f5d992e23e4eb91c8501aefd836d80492a919b03e9
SSDeep: 384:updZaCEvzzHHXbXr9B59zTGxoNtWP8C72MBq84fJWbDr8R8OsNPGvPNm:wGCG3XbJBrGxaWtKs7jGNm
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04355_.WMF.id-B4197730.[ms_13@aol.com].ms13 3.39 KB MD5: 6c124a6fff3aa72250eff95e0de4640c
SHA1: 8aab7acddf0a2633e7ff7681aab35f478b65c211
SHA256: cb3cf4a00214ab9ba61f4d975618d021228fe9c59cdc27d5d34d1b36e1a9d9e6
SSDeep: 96:Wlcziy/l2whA5o8/6v3oQk/kDenEAwtnr:wczJwkA3/6vfYwtr
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 26.48 KB MD5: ebf5400abeb4e664cc05d536071e5a86
SHA1: bf1fa1c19e73f85c72e336be0f7ddd703e8e0313
SHA256: 93045d60ea2fb18dac84e3119073de6f1aacd3622a5394fa7e991d87a3c66b27
SSDeep: 768:TYBu7eZC8226OnuvSvgS8eY3pZiFStaAiVld:05Iw6IKSDEXpo
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00116_.WMF.id-B4197730.[ms_13@aol.com].ms13 5.00 KB MD5: 9f43c3ca327dac5a4bc87ba9d40c4220
SHA1: e696ace2c5166f6dc2061e3f3707c053148da9cd
SHA256: 06182ba038015628dfb0117ba3e3deb49b800bdfefdc7a4d50c60b52471a3fff
SSDeep: 96:mJbp/x8xM3nyuRzfLkMeoKGaoN8oLVWpuTmZTizAPg0rsOsDYT3PX:uPlXye7LkKKFoN8oamzH0rWDc3PX
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04385_.WMF.id-B4197730.[ms_13@aol.com].ms13 5.12 KB MD5: b74a987aa95748fc6ea2f4dce20590f6
SHA1: 248fa3bd2ddc42ce646a37b5c86da19af624ca2e
SHA256: 12936881bc7ded339f5d7e82601f60e20ea00375187366c52d0dec49d918bbb8
SSDeep: 96:lpFkjG/PxC+zwSP0cSDzA23hQ4yYZ/yLm/8/QP6Qh8mvd:v/Y+zp8cSDW2gKb9Wmvd
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04384_.WMF.id-B4197730.[ms_13@aol.com].ms13 5.12 KB MD5: 202281656fa96aef025247a6907cd3b8
SHA1: f29bec80c4ddbc9ff3bc113dd86392adc54c26bf
SHA256: 5e3ad8ad021abf463923303225f06defa121f683f2037e2f5df8f1bc40715bf0
SSDeep: 96:Ao9D1hiJBJNXXJIPUFPrI57srCcQSjnx6x81Yy8JezrpLykABW767:AUD1wdNXXJ0UdrIu5Vt+y8ozrH67
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 19.47 KB MD5: 2ee1690fd9cbbbe1b7bf801091c4bf23
SHA1: 90962b29294ba717b472b4acc6c60116aa8b6357
SHA256: cd67eb34ef965d2f124136bcfb8d13d697520d98f99b381dab87b8ef2eb3f608
SSDeep: 384:HJJzVylPFW3z8lFivcFyGAGBHwGZtBGmRSUNrSDpRhsSXHKuB/V4B6JwBrHlZGy:Hpy+3Yw8HxwsfNrKfhNZV4MwBrHlZh
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04369_.WMF.id-B4197730.[ms_13@aol.com].ms13 4.93 KB MD5: 14f349c57fa13e3dd770185e277c35df
SHA1: a6ed22004ec957b6d5c32e5ecf5b293a33655714
SHA256: fc65312ea790feec4c33cf8652372ab0eac6c93a003afd732d5e5bac79acb9e2
SSDeep: 96:yBpvDikebW0YjjaYh0O4WNcbXturwxj+JJ1pkcJ29QF1db+fOB6n8e:qidbr2ZhR4A4urwxSJxZJ29QF1dSG9e
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 69.47 KB MD5: 805ba1fc27fe9abc80371ee6c2b7e3bb
SHA1: f47c13d9e85552e417ea5ffeb55bb754b5cbf201
SHA256: 7de8be9fce968ac3e76448ab03dbf1fc5d5ca1b9e04dc5734852b8b929d10e61
SSDeep: 1536:lc2OhWqVnjW8xujo3Q+PkKOpOhsn4jNZM43/:ydhpjmqQ+sKOpWg4RR
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 27.47 KB MD5: 603bf13cc8d8cfa72a19e370a74f9930
SHA1: 97420e9bbd38e85498b16c7dfc38bafc9095b0f0
SHA256: c67212d0c6b898949b7fbbb34b3fd8388d6b1e957f5fb0f44acb4dd4eb3da415
SSDeep: 768:jfFrewmJR27HLFBBuoWAppEvVaSyFCj0W:j0wmJR2n3nAcSQCjN
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 24.47 KB MD5: 2a0ff14c6699c272ec7cf6d407834350
SHA1: 8bfd5711ae1be3382830e8bd300c895fb286a1b3
SHA256: 32ff33dd34e7d6e5f7d18d1ad0b34d73223492bad25b5a3ec678a66969b57f02
SSDeep: 768:uMUEiiFZ00ze2+uEHXtKXDkEU2DV11d/IdXOj:u+l+fH9wUoV/d/Idm
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 24.47 KB MD5: 998b58e61d200d9037718d19a54eec14
SHA1: 41f213c3c56cff2619fa8f04e31935b919671fa6
SHA256: 94d12b9a5f22b43498ca688c39ee7aefebbe44a56c1acf1ad2572ae543d542d2
SSDeep: 768:EQ5hIO6VrUKzcyq1iFMgtEwzidUeFBuN6da3gtNBEqH0:EQ8Eyqyzip46TBEqH0
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00141_.WMF.id-B4197730.[ms_13@aol.com].ms13 26.50 KB MD5: 4e29f3652533e6132ba7cfff9b7b8ac7
SHA1: e9b49b9eb4ce961b859cbf78dbd275ca5bb23f57
SHA256: 6b0b035f526903e4c11c59ef644d74cc98263d08a23beb7f4eb11b6d2d7fb991
SSDeep: 384:ex73f0wBuSqP4cuYDpViAPnBPneM1aJOc+016u16fjh8HBC3QHIbWk9NdaP63qR:EpMGRYDpViIn7OOcN16Ph8HBCeIXNdaf
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 18.97 KB MD5: 3b5e0860da7a701f6c62783a5fed591c
SHA1: 260be80ab4a79b7731c21e00eb87d817dc9c398b
SHA256: 56986f36ba5259e9e6d7358164935d0638de7c6660efa0e5f4c90b7be12965fd
SSDeep: 384:LLpj6XHLaOeb81n/RB5fW6lSHYofT76QDmO80d4jMaSp8kzEAW:HAeOebu/R3DlNCThDmOrd4gzp9zEAW
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 20.97 KB MD5: 1e074c7e95fe100c514de633f7ce0b48
SHA1: 1d4ef7b07c27a0b66131ac500cc0a8d332965082
SHA256: 47007bda5b40618aec234d8f195c26b83d957b2aae47d61a7c56f3a5bf09d810
SSDeep: 384:FyX6La6GXNno/HHf3bFEng2LAjrCdePBC8zZwg1Gd8pKi16+zjifm:FyXD6GXu/n/9tCdACyZwgAd+T1R+fm
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 22.97 KB MD5: f64bc5a332ff8e1028347da0cf0ec7b2
SHA1: a0302846985f0669eba22cafec4e58eed441cce1
SHA256: 1d2c53b763ec5200e6f4eecf8897d8f8e921d806642ff906137499072ab9b784
SSDeep: 384:vn0hkYqW2Z8bwJxFiCip6OFDMrAONkRw2OaxNcVv0Zu5mjps5+7WTBV9a1PrKqDl:8jWBtiCiplSrAOWw2nfcVvYs7TBV9srJ
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00173_.WMF.id-B4197730.[ms_13@aol.com].ms13 16.04 KB MD5: 96847b8c1b88540bc2730dac3362472f
SHA1: 1e87038d40d6234d0663ea47b4554dbce5b47eaa
SHA256: 55833af83fc26d4ab41ce489373effc3f9211710de8ca8b9f579ffdff6e30311
SSDeep: 384:9DSyU+3x4qi9S8Nv9+gIr2R7KztrhxC3MgPM1R1l3l97ZzjAUTF:MyVx4R9SAv9+gw2lKzZPCTMDjZtJ
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00146_.WMF.id-B4197730.[ms_13@aol.com].ms13 28.51 KB MD5: 305c92700d4bcb78e7cbdc79dbc22f0d
SHA1: f73fc1e3a8233fbfa6a497ac75ee3087702acda8
SHA256: 2701864f2724f16435d407020757207499e796cd5c1be6815f1b451835b56470
SSDeep: 768:9286BSpnyR4Gya0173OpQ0sOCi7aZ21LGR8t:9P6YUKGLcjOC0sE7a3et
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00155_.WMF.id-B4197730.[ms_13@aol.com].ms13 11.61 KB MD5: 5529022e3da28a980dfa3f0c517e0189
SHA1: 22f0f96a6b6cc0c7aa6bba372292b421464ac050
SHA256: 74257b7185e88e330feca39bd8e14d6c2bffaac0702b02f1b9b58154a81c33e9
SSDeep: 192:pZtGxOQk0GL839i4l1LN9kklf4WNgt3M/6zmrA2m99CV+XkrzL67aYLOLGpzS8K+:8xO8GL83V1LHlfNIm6zUm99DX+K7JLO8
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00160_.WMF.id-B4197730.[ms_13@aol.com].ms13 22.23 KB MD5: 9ea480d0b79044e03320791e83f83f86
SHA1: 0673c67e072b1764f484e06ed52f8da6d3344880
SHA256: e37b03e7ba7518c4ee1c4d03d4a270e7ef4cc0887e92c120e1db5453749b8150
SSDeep: 384:TAnZ6Vgqldop+kuplyznZzajfIOzku91foFeLYSXTJCj7Ra5Aeky2JM3Vne:THfnoBuKnZ2jflgcoFeLYGYYYJMde
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream64.dll.id-B4197730.[ms_13@aol.com].ms13 462.92 KB MD5: 527a7f2238b02326ff029a87eeb73317
SHA1: f2218baae25efdc073487fd2877912cc418dee8e
SHA256: 1eaae985d7ad284eff5c2b86a9af11f17d8ca6e543ebf7a4a3dce8ad1bfc9de2
SSDeep: 12288:xE0mpFEr6GFyJuRdPwbXyt8jsl8fNFlof4Q7Y/9:eer6GFyJOdPmCt8jsilFie
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD05119_.WMF.id-B4197730.[ms_13@aol.com].ms13 17.07 KB MD5: 673c806663bce7c3bea00276a3949b96
SHA1: f2122e3ac511f7c9e6eb8e00e2b257ce069c8007
SHA256: e082a8dd92dd91103cf8b01dd931824cb3f0a5d49c797724a30e37284f618e68
SSDeep: 384:xOzIPMXZM5L1cjRFg/eRkwnWE8bEhdl+gcPN6dGp9khNUKoQJdiB:EIPMX4WjRFg/eemWE8bASiEpChGIC
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06102_.WMF.id-B4197730.[ms_13@aol.com].ms13 15.98 KB MD5: 424ec48defd37f03215f44b795f8a9a0
SHA1: 9ae2bffec8350b14eb710a130e4d26b58b63465d
SHA256: ae5cfbb7ecf2d4ec308cc1574b7e494c5ff2e32bc1817e48a859667517482699
SSDeep: 384:W2JeJBB13/atyEJwdQbqXU5Z1HuCD/QhdmS9O1uszJpiR8jw:bWB13StyEJQQuy5qV9OT6cw
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07761_.WMF.id-B4197730.[ms_13@aol.com].ms13 26.36 KB MD5: f3dca914686a96f7800226ca7a115ef6
SHA1: 1890301471d8990108ea20148177a91af14b8822
SHA256: a0a199c976a9fa350fd564151f746a412f3411292bb6ddf173257c38c1fafa3b
SSDeep: 768:e+mvt5ZB8S9Hima0ue8Z+Fu+v/gzfmdv4yeT:eNvPZC3Z/+v/gzOdv4yw
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06200_.WMF.id-B4197730.[ms_13@aol.com].ms13 16.53 KB MD5: a0dcfcf48abcfe4e7d2dff93066a88a3
SHA1: c9bfff6470ff2494d5fdb1bb4c18db875c4ba833
SHA256: acaef6c7a7ae76bfa20000beaed2b900e8f08c3d42810f95c8bbe132ffcdc549
SSDeep: 384:OnUuNTnT276xZ1KmTvuQDUwrfMXNPlM7m:MRRT276xambucxUXKm
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07804_.WMF.id-B4197730.[ms_13@aol.com].ms13 5.04 KB MD5: e42dbbbef910c9ea5cb2bb4a475d232a
SHA1: 34397cba8a2dabbd9d1fc768fb5fae85fe1480d8
SHA256: e0e358f814843abfa60ee804f0de9445f5ec864ec0ca60197ffd8e4f9b319709
SSDeep: 96:URnO9KKTMuxM5z1oVjCCtyORAoInQqf4mcTVQCnlxTEZUqVxrKeNt+ay7PTN:UM9yuaWACtFlInQYTGtlhEy0xnD+aGTN
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07831_.WMF.id-B4197730.[ms_13@aol.com].ms13 4.21 KB MD5: 889aea6121a75aeb697c1cfcec45b7bd
SHA1: 2d1a5e332e46fa208c34e1866fb53fa93bde0ab3
SHA256: 00c5c8812f01963b43b70b2859fa600c5d3397d1d02eb9fc894d7a94e19c9f40
SSDeep: 96:l8lseJrUn5OvGOB/FoKPBTV9ZgzUvq9Ars94KqtcEHvD:leseqcGOxq2BTJtq9kdKqthvD
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08808_.WMF.id-B4197730.[ms_13@aol.com].ms13 47.11 KB MD5: 98475f831d4c47072dca712876a5857d
SHA1: dfa11f3a9a42db9b9c0722d997dd2366adad0bfe
SHA256: 76ed12729da95abf8cc3386eb339913469ca14f97bb0219c4821f2f643dcd006
SSDeep: 768:MmFbSHWSCvHYJHdBhvGf6HtSP0xc++GGImNzLZjPYlvPXUCrj+86R1dToMGqgVHk:MmdSDBxnQMn+L5xZQUCb6R/OqIuXSeWg
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08758_.WMF.id-B4197730.[ms_13@aol.com].ms13 24.00 KB MD5: 3f411f94d52f4a473b83bb3b1db36c31
SHA1: 3a70cd71810e882da1f11e69a4e733f4cbb7f0b9
SHA256: 3fb988b4e855f376a4ad58a95f7d46321384fa56bcad01554ce148df7786c6a9
SSDeep: 384:tuJ60ZFSjuA5Mv9+fMLByerfZf/pjLLX/OnSwcf7JRyohyCXZldeiF9VdzTPJmOi:tBE2k9+fMAeLHjLjqpY7JRy6yIZldtZe
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08868_.WMF.id-B4197730.[ms_13@aol.com].ms13 39.50 KB MD5: fd096e6bb5bd5b8d821fc0a351719c3d
SHA1: 0f95972ffc089adddf89d4036d3d975ffa2a13c4
SHA256: f044eb610187492ff9b6cb081b62f9b8146adf6f906f263bc24fe5b6617c2b99
SSDeep: 768:fgk+8QV+00OSxu4PIkSbLgLmKsde6QGnsw7F9CJPpp0pLvzItPZ4LANn31:Ikm+VxukSb8LmK2LQ+swZ9ED0p/AZ31
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08773_.WMF.id-B4197730.[ms_13@aol.com].ms13 24.43 KB MD5: b69fb96adf6b502ec3ed3e42d5a4fc01
SHA1: 0763f6ca9728db138e298e9b2e0962dfbfa8c6f1
SHA256: 03990a2d3f4c9acb45dba4ce376d29d67597ce9abd2ffb6e4418b0edb3dbd09a
SSDeep: 768:tZ57NaVkV5edoJx0I20eT22djCkiuhYj9BrrGXc:tZnaSiGIO+FCkiu2Wc
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream32.dll.id-B4197730.[ms_13@aol.com].ms13 387.92 KB MD5: b65115e0db3ea124b35a2f1358c7c4ef
SHA1: 9bbc4e2b6a95786a36f9317d4a3c0cb48020bcfe
SHA256: 023242d8e6cf8b55294daa1f2811e0da61594dfca1decf5437e8cea249b30ba8
SSDeep: 12288:wjmI93Db4+M6niP2BQWE/4Btl98MxdOp3/VtTA7:xIhbVw2BQWrBjIp3Hs7
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09664_.WMF.id-B4197730.[ms_13@aol.com].ms13 8.01 KB MD5: 854312b76331e9f12f32262f69a43e8d
SHA1: 4cd174ad558a2e1a2a31c70f6611b6ec5f942be9
SHA256: 703f096a68dbfd1dd7c3009b071ef898d29f1de44479428185e15a6bd2b5b4c2
SSDeep: 192:O8iVOQgTSNaZKrCcNRipUt4azsYqnt24FqGyuHFjP2Z4tPc:OhV4TJK2O0pe4cZccoHFjPjt0
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF.id-B4197730.[ms_13@aol.com].ms13 46.90 KB MD5: 2bd2f0a5ceca92ba8761647cd70b08b4
SHA1: 0fe8fcd27d6571ee0b6cb91925e4ac1865121871
SHA256: 7b3d1d08a0f778fa95937bcacba10ba2c3580d1ac2cc910260cd16374429b7be
SSDeep: 768:WSgWS9XP6OlfaBQ7Y+1wMSuxomgfmGa/99Bd9bgGqsXyE9KeKi0KS+vePC:Wg2rF1GuxomgeGa/9fd9bgGqsXyEPKi1
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09662_.WMF.id-B4197730.[ms_13@aol.com].ms13 20.31 KB MD5: e849584023102fe76f4fcf16a2b7f123
SHA1: 6c1dc7356ac62bfb388078db9a315b96172a5862
SHA256: fd000223cc2bf2ec71f7f8a568d5dbaa44e9ce4b4163252713c88d66768414d2
SSDeep: 384:3l7O9VqwrqqjjTZL/fvJFQPBodzFM0NPMAB/Dtk60KhBuTt:3lS9V9DxL/fwPCJMcOt
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09194_.WMF.id-B4197730.[ms_13@aol.com].ms13 14.43 KB MD5: 9b88d04f47f88d795c750720988daa1d
SHA1: b41534497d82d579d0994563ea51cefaf89ce981
SHA256: 46ac2f9830b7c5ecd32027e9ae7c0193e82cb3e05896c463fb0c0ac6cfa9f129
SSDeep: 384:Y7i5Lm59UyP84cEUL+7hMTchKPCEiVMhEyRrEvFHJKE4HKY:iiVm59UyP8TLAhMTjb7fEKKY
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.id-B4197730.[ms_13@aol.com].ms13 13.43 KB MD5: 3ab48534179e6fd5378d689ca12b1687
SHA1: 15d970fbe95b0568c643f8e181021e02ee6a0a05
SHA256: 8e43dc034d8e0a1c27dc056b0610a7f7566863638b32f8210bb3a65d59a5427e
SSDeep: 384:b8BKQ6omK8FcAxdJ/aDvApkFr3FAn6DfHssj9:sWtZxGACFr3FAn6z9j9
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.id-B4197730.[ms_13@aol.com].ms13 20.21 KB MD5: 1dfad11c722c20a0ae48e13bad2e0338
SHA1: 4e33e62d702c71d60d1a7e8d8aa2c98c6c63c9d8
SHA256: afb3a1bb8bebfab54743e29c661ded47000402d0baa81c7b8ea26d72915a42a6
SSDeep: 384:z+e5diAneLjY7fEClLgAtPrmjA6j9wB+ltIzvMyE42M:zLdx77zgm6jA6pq+oJE42M
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.id-B4197730.[ms_13@aol.com].ms13 15.61 KB MD5: cfadae3936886c2793dd01b5caeb6c42
SHA1: afba3baf37d8bf3647420546f0c858fea4c8027a
SHA256: e4ccc55596dc74f46fbc1e76cc2c09d211a2105c7823b3752bbbeb460aa333a4
SSDeep: 384:C3DGwMHLnxOBD1dTflgJOECSCLat3fhv3atjvF/leXN5nFVXB:el0Txsg0ED3fhWtEXPPXB
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.id-B4197730.[ms_13@aol.com].ms13 19.95 KB MD5: be695ae441270c036cac44a81070432f
SHA1: 0ddcdd6a8fa0e8e8b4442583b0b9979aa18e85c9
SHA256: 6ca3f7577d52361b598c9503ca98b6e73bf8c45dec11c1b78625e990bb0c375c
SSDeep: 384:hrpLPvwCDTV8m4hERetvEgD4M/GwE94yMWykG/mbEeWdZ6RY:TjWkKJ8CWq/dZ6C
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19827_.WMF.id-B4197730.[ms_13@aol.com].ms13 9.71 KB MD5: 6808cd592a9ac6638763f09c43f63ac3
SHA1: a38bfeba6636682d84229bdb3b5bf2f1586acf93
SHA256: fd584ec6d8a2076b7290dac340ad5ac824c01d1c18295fe336a2fcadcac16cc1
SSDeep: 192:dJzLmOPiEsG3Xbd8zyRkg0MavSuoddA39Es4fDAq2SJEn1FjlLhF:zx3rSJn5S9dqNEdDQiWFjbF
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19695_.WMF.id-B4197730.[ms_13@aol.com].ms13 12.92 KB MD5: a2b1816ff97a1f497e9a348444064aa4
SHA1: 327a7f54e880cf1405982116c8134bfdfbe3224e
SHA256: 81af28349225b57660b2dea8d97ddba7095a8aa02b322a25344db2378eecece8
SSDeep: 192:aAnkyo3Og79xKC9F1QabftH/7/GOJpix/WuTG74Yw/fuUJQHYwdVMdwIDhuJoikl:aAnkF3R7vKC9IabNiOmjVFZGHB2dwI/
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.id-B4197730.[ms_13@aol.com].ms13 2.71 MB MD5: a076842c4820d837bacdce1d77a636e2
SHA1: be1141d0a47e163714ee3789c404b75b8275d19c
SHA256: 1af4512e9f297d313242ccbfd3295bc7f89da7068158e596271be7685a03a1ca
SSDeep: 49152:nOAFjtiia/fxbO87Z67MKpjWBhHgLPsaIU:5i1C87oMyaeL0a1
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.id-B4197730.[ms_13@aol.com].ms13 2.43 MB MD5: 18fa12e4cee5a519a65990c07dafcaa4
SHA1: 13145629f4f0ffe647df6a8654e25343309885ef
SHA256: a85d7dead496991387693d23002be695e3e1644dd448d6620a21d69357b8c543
SSDeep: 49152:aU0NzxBTEWxeK+OcNLDB9ruVbC+RbfQU4qCcn0q:aUz3LtIu+BGkn0q
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19988_.WMF.id-B4197730.[ms_13@aol.com].ms13 18.12 KB MD5: 5ac4f46f9818d9e184f1503c360275c0
SHA1: 2d777dbd9f6d3b9be540ce010e4729c2337a8119
SHA256: 8a27cb66902d0656ea332f13cf40ed96a5e9424ed42f363f22b5826afafa2a11
SSDeep: 384:wsVsscSX++lXfYBPHQ2kc9D1El98EwaH2Bu/dhkoscJzau3tYRaDfUhxZk5J:bTcQaxHQpc9DifBwaHVsW99YRaDfUaJ
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19828_.WMF.id-B4197730.[ms_13@aol.com].ms13 8.81 KB MD5: f7d15f4daceb14cabe42ca0fcab5d979
SHA1: ee4aeba4f6757e1b1f6eb95a532f49eaa5b187eb
SHA256: 68ed033b2abe57d7e38c2e7be3e2142c6604ee69bdd38fd9557cff8f2857a144
SSDeep: 192:OScoM4fAYRQBZrFdRBY4clGLIlYiYwXvcPU7WtH0J:OSnNAYRQXrvRBHL1i3/shtUJ
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll.id-B4197730.[ms_13@aol.com].ms13 500.46 KB MD5: 1eafd0353cd384d1e10699ba29240225
SHA1: 27dc567fb8525600de4ae9b8bc45ba56f6e61baa
SHA256: 35ca21024d730bbd48acb11ae0ef868c2dba9d27cd2c575a03dc218c5e7310a4
SSDeep: 12288:PjMeR9690J+zMMtW2qp/st8y+FfvIe/EPgFrH:Pws690AI1B/sWhI9P0H
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00012_.WMF.id-B4197730.[ms_13@aol.com].ms13 9.82 KB MD5: 35605b67ba37e410fc84fb0395efcc09
SHA1: c4982cb163132e65f676d0937e14557ca8675dac
SHA256: 3b5e9fd36e7ea44d141b88535fd6420da01ab8d9b7e07af89048c7e20ce25972
SSDeep: 192:q8gNM1E0UqnkLi4nvoxr6JZA6Az5T6qRJb7T2nZq0391fHRikEv0Tir8Y:qL0U/GWvtDA5712nZhfHkAOv
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00045_.WMF.id-B4197730.[ms_13@aol.com].ms13 7.92 KB MD5: 030c4ed0ec36d43901f7ebbd900c10dc
SHA1: 25ffa65f4deb92e49232ad544dc27fe13e986ee7
SHA256: dfac3eb5033d4198fb0dfb13de123f004d7385dbc768ef626e174493ff37024e
SSDeep: 192:NhjyghEoCVVM8OviNQBC48vRxa1+zA3Szj7ennB64P/V5:LHEbIKf7XpmB6u/b
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00098_.WMF.id-B4197730.[ms_13@aol.com].ms13 1.23 KB MD5: d5582a57f4926580d1de5e43ad467b9e
SHA1: 2b7d7e8bade172848a40ce943ac6f3643f0de84c
SHA256: 2225bf33d3cf0c8ff6f6cbaec94d8e7598d9c60e1f6926501021a35359e48069
SSDeep: 24:PcBF+m09/ECGQ0Se6KrQWUlHneZYi1yTkAKhiaDauH0LUHOtjXap3Kog:EHdiv0uK0pl+myfhiaDaKOt7bog
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD20013_.WMF.id-B4197730.[ms_13@aol.com].ms13 11.04 KB MD5: 1adbff1df96467bb3e43740d0ab00a24
SHA1: be06e4937adf6b2f1a550745368154f6d231c8fa
SHA256: 3b24764d2352a462265f6cb565a535b69aba9945ebcdc877941a868f219508dd
SSDeep: 192:+uxJNlR5JzSqsroDizhVt3LJT992oE7EKzj37RBMnOP6XvlGbemjDYYbwB8:rxRRHSUDiV/7JRdEhr7E06vlGC+D5Z
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00008_.WMF.id-B4197730.[ms_13@aol.com].ms13 12.46 KB MD5: faf9621ffca43a08d3ae254fb830377c
SHA1: ef951899ad69c9bb8cfbb0b3672d17b6b91c4b79
SHA256: 2d23166f47ba3342acd3601421548858de83e8469ee5824cd44bbcc4e2a67030
SSDeep: 192:OsdJJ4ntchX0jcIrLtC8wmgkUXm49cQ+buzxo9sBP4ucd7iB9qMowjdP8:NTJ4+6nY8wmG2kZ2yBguMiB9Dz8
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00122_.WMF.id-B4197730.[ms_13@aol.com].ms13 10.15 KB MD5: 9185648ed3a502a42d4b8fdb39be6cb7
SHA1: 9962f0d215138124bf30708e80d02ae18b329035
SHA256: d8c19d1387287f3099795b5caaa2cf7f8860979e5a436f2e26c7c508e84314cf
SSDeep: 192:pcmCEbOL4M0nuX3dxrdZk+wFS+Y2wgjHrcX3LhlZx66evVbaq8Ggxo8A:ptCjL4MauXtVwFS+nDjrcXNGVbyGiI
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00105_.WMF.id-B4197730.[ms_13@aol.com].ms13 1.11 KB MD5: e61ce62eacd38a30a57bead2f361590e
SHA1: 5a37d4a9bca0cf07e1925073e829af8c0f9a3266
SHA256: b161a84ef783b9950419cd6e7dc59f289f19427c5c63ec263f719f764152bc74
SSDeep: 24:+n2uCpZfuigTEn1RwAVFhDTV1ZVvxXxy3K9dPRTl/sp3Kog:+n2uCpZNx1aiV/Nyyhl/1og
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems64.dll.id-B4197730.[ms_13@aol.com].ms13 2.93 MB MD5: 523f286e9c493020fdc8559659e4bad1
SHA1: ac93a985d4a79ab8d49e9d240cc3cd7140ef91bb
SHA256: bf2674b330b3878f33bb44e278c31e903073c1c53e4bc937985082cfeffff52b
SSDeep: 24576:ZNwm0YdIrNF1XbaUkepfnhxTl5uquLkWApJU3H38WdEu5jrkTy0aFfGGSnXfNCB:ZNl0YWr5XbaUlTl5uquLtIJKTjiRwfu8
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00148_.WMF.id-B4197730.[ms_13@aol.com].ms13 1.90 KB MD5: 0f402fefc9bbb3d3599033306184fe8b
SHA1: 0fb15a6d9cddc9a12c89e66c1fbda68dee5ee3f3
SHA256: dd4a57ac48d18ec2f7fdfd986827b0d644dbccb99b2b0f5a7c2581b98f86c33d
SSDeep: 24:sA+OKhpADt0JnV7n81cYckDLB0f+6Y9lo9LqygKWAPYA/keDmNkuD9rNknXjgp3q:rKhpQ7D94cA9LqVKWQkeekw9RIjhog
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00130_.WMF.id-B4197730.[ms_13@aol.com].ms13 1.67 KB MD5: fa45d6920d52da1be0e0f22f6e7b35ee
SHA1: 57e1d8ea0fc44dfe555566b72c4fd199b6517315
SHA256: 8ad136be2d709dfda55a6907395dde37989cf1ae459717ce627e0e96b26b4600
SSDeep: 24:LOYrPwaI32hHxtlE1xwZXMhBPb5IA6KKX8CWO65nT0O3LmnsNqCYM5gtk9mv3p3q:L3HnK1xw5Mh/IsO65QOssNsk9esog
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.id-B4197730.[ms_13@aol.com].ms13 257.96 KB MD5: 13f5e6ad9a11e50646ea4698af396644
SHA1: b020085ad0e45026416453aa271f472f9c783709
SHA256: 4bc558dc2dd7a6b594c1296f7188651b428f1af262e5901805993aad3e439d85
SSDeep: 6144:RaZ0U06HpTbvKZ9pLLjNuydFiWqSdb7Mk+ZHH32tQPp0M:Ry0LSpvivtjNuOFiW/bo7HH32cpp
False
C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll.id-B4197730.[ms_13@aol.com].ms13 801.43 KB MD5: ca68f3052efc8e9fac18a442acfcbeb0
SHA1: 358964fae0566518071a31426aec002979037e67
SHA256: 5b546f4efa2031cb931e3b49eb62587efefc3725810e630a8680c047b27052fc
SSDeep: 24576:4YWxFkcIhyWcE2KFxAV5B2HtqpxVIsvFrctqVP2:YgcmEEH8p/FrctqVu
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00194_.WMF.id-B4197730.[ms_13@aol.com].ms13 4.14 KB MD5: d719657774775529211ddafd04b2eb1a
SHA1: 346df1971717c2461bd02fbd827e6b63388990e4
SHA256: 962fe51f69a1769398a80b29fcbf312f271dec7586468c5919496734837b8e1d
SSDeep: 96:PaNTXNU9ATbrRe+aym+ydVvjtihOxOpsmr1:PaZNe+az+8oOGr1
False
C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00152_.WMF.id-B4197730.[ms_13@aol.com].ms13 1.71 KB MD5: 1724b239e84c4565d226afacb8bc30c0
SHA1: c1bad1690a57b56ae9250d4441d6e0fc0a2ddb8a
SHA256: 13eda42b98bf96237cd609734f5eb7fbc75e6d7013e201ecdd47d0e5261eab53
SSDeep: 24:4J2Rf3BpZh1DiqZU0arKxtuQFlzI764YGJkoA/Ak0tVG3YKHR1kOuNQZp3Kog:QGfXZ3JC0arQtA24YZPIr43FQBNQeog
False
Host Behavior
File (4284)
»
Operation Filename Additional Information Success Count Logfile
Create C:\Users\FD1HVy\Desktop\chrome64.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 1
Fn
Create C:\WINDOWS\System32\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\Users\FD1HVy\Desktop\chrome64.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 2
Fn
Create C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\GetCurrentRollback.ini desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-18\desktop.ini desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-18\desktop.ini desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-18\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\GetCurrentRollback.ini desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\GetCurrentRollback.ini.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\GetCurrentOOBE.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\GetCurrentOOBE.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\GetCurrentOOBE.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\PartnerSetupComplete.cmd desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\PartnerSetupComplete.cmd desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\PartnerSetupComplete.cmd.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\preoobe.cmd desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\SetupComplete.cmd desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$WINRE_BACKUP_PARTITION.MARKER desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1025\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\SetupComplete.cmd desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\SetupComplete.cmd.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\preoobe.cmd desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$GetCurrent\SafeOS\preoobe.cmd.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1029\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1028\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1030\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1031\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1032\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1033\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1035\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1036\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1038\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1040\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1041\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1042\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1043\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1044\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1046\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1049\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1053\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1055\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\SetupResources.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\SetupResources.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1037\SetupResources.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2052\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\1045\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\2070\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\DisplayIcon.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\DisplayIcon.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\DisplayIcon.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Print.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3076\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate1.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate1.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate1.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Print.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Print.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate2.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate2.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate2.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate3.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate3.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate3.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate4.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate4.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate4.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate5.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate5.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate5.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate6.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate6.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate6.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate7.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate7.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate7.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\eula.rtf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\eula.rtf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\eula.rtf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\LocalizedData.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\LocalizedData.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\3082\LocalizedData.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate8.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Client\Parameterinfo.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Client\Parameterinfo.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Client\Parameterinfo.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Client\UiInfo.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Client\UiInfo.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Client\UiInfo.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Save.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Setup.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Save.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Save.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Setup.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Setup.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate8.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\Rotate8.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\stop.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\stop.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\stop.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\SysReqMet.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\SysReqMet.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\SysReqMet.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\warn.ico desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\warn.ico desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Graphics\warn.ico.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\DHtmlHeader.html desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\DHtmlHeader.html desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\DHtmlHeader.html.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Core.mzz desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Core.mzz.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\588bce7c90097ed212\netfx_Core_x64.msi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Extended\Parameterinfo.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Core_x86.msi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended.mzz desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Extended\UiInfo.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Extended\UiInfo.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Extended\UiInfo.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\header.bmp desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\header.bmp desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\header.bmp.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Core_x64.msi.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\588bce7c90097ed212\ParameterInfo.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUi.xsd desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\ParameterInfo.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\ParameterInfo.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUi.xsd desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUi.xsd.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Extended\Parameterinfo.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Extended\Parameterinfo.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended.mzz.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\588bce7c90097ed212\SplashScreen.bmp desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SplashScreen.bmp desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SplashScreen.bmp.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Strings.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Strings.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Strings.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\UiInfo.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\UiInfo.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\UiInfo.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Core_x86.msi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Core_x86.msi.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\watermark.bmp desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\watermark.bmp desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\watermark.bmp.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Boot\BCD.LOG desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\BOOTSTAT.DAT desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\updaterevokesipolicy.p7b desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\BOOTSECT.BAK desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\BOOTSECT.BAK desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\BOOTSECT.BAK.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Boot\updaterevokesipolicy.p7b desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeUpdateSchedule.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BOOTSTAT.DAT desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BOOTSTAT.DAT.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeUpdateSchedule.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeUpdateSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Content.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Content.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-split.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\correct.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\delete.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-split.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\join.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\join.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\split.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\split.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\FlickAnimation.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\delete.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended_x64.msi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended_x64.msi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended_x64.msi.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended_x86.msi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended_x86.msi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\netfx_Extended_x86.msi.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\RGB9RAST_x64.msi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\RGB9RAST_x64.msi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\RGB9RAST_x64.msi.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\RGB9Rast_x86.msi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\RGB9Rast_x86.msi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\RGB9Rast_x86.msi.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Setup.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Setup.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Setup.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupEngine.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupEngine.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupEngine.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUi.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUi.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUi.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUtility.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUtility.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\SetupUtility.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\588bce7c90097ed212\sqmapi.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\sqmapi.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\sqmapi.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\correct.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\baseAltGr_rtl.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_altgr.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_ca.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_heb.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x64.msu desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_altgr.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_jpn.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x86.msu desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_ca.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_kor.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_kor.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ja-jp.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ja-jp.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\baseAltGr_rtl.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_heb.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_jpn.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\hwrenclm.dat desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x64.msu desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\hwrusalm.dat desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsar.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsar.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\hwrenclm.dat desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsel.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsel.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsfra.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsfra.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\README.txt desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\README.txt desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\README.txt.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\Welcome.html desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\Welcome.html desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\Welcome.html.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\AppXManifest.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\AppXManifest.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Microsoft Office\FileSystemMetadata.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\FileSystemMetadata.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\FileSystemMetadata.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPP.HTM desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPP.VBS desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\SLERROR.XML desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x86.msu desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\588bce7c90097ed212\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Boot\BCD desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPP.VBS desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPP.VBS.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\SLERROR.XML desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\SLERROR.XML.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPP.HTM desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPP.HTM.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Boot\BCD.LOG1 desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BCD.LOG2 desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bg-BG\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bg-BG\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\bootspaces.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bootspaces.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\bootvhd.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bootvhd.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\cs-CZ\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\cs-CZ\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\cs-CZ\memtest.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\cs-CZ\memtest.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\da-DK\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\da-DK\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\da-DK\memtest.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\da-DK\memtest.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\de-DE\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\de-DE\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\bootmgr desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\hiberfil.sys desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Logs\Application.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Application.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Application.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\BOOTNXT.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\HardwareEvents.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\HardwareEvents.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\HardwareEvents.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Internet Explorer.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Internet Explorer.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Internet Explorer.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Key Management Service.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Key Management Service.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Key Management Service.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-International%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-International%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Known Folders API Service.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Known Folders API Service.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-MUI%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-MUI%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-MUI%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-MUI%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-NCSI%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-NCSI%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SettingSync%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SettingSync%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBClient%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBClient%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SmbClient%4Security.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SmbClient%4Security.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Audit.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Audit.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Security.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Security.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Store%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Store%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Read C:\$Recycle.Bin\S-1-5-18\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 size = 1048560, size_out = 0 True 1
Fn
Read C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 1048560, size_out = 129 True 1
Fn
Data
Read C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 1048560, size_out = 0 True 1
Fn
Read C:\$Recycle.Bin\S-1-5-18\desktop.ini size = 1048560, size_out = 129 True 1
Fn
Data
Read C:\$Recycle.Bin\S-1-5-18\desktop.ini size = 1048560, size_out = 0 True 1
Fn
Write C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 size = 144 True 1
Fn
Data
Write C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 144 True 1
Fn
Data
Write C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 234 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml.id-B4197730.[ms_13@aol.com].ms13 size = 8208 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 size = 4464 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 size = 264 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml.id-B4197730.[ms_13@aol.com].ms13 size = 4144 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeUpdateSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 size = 4784 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeUpdateSchedule.xml.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_altgr.xml size = 234 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_ca.xml size = 242 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml size = 232 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini.id-B4197730.[ms_13@aol.com].ms13 size = 656 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 size = 176 True 1
Fn
Data
Write C:\Program Files\desktop.ini.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.id-B4197730.[ms_13@aol.com].ms13 size = 1424 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.id-B4197730.[ms_13@aol.com].ms13 size = 14160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.id-B4197730.[ms_13@aol.com].ms13 size = 15280 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.id-B4197730.[ms_13@aol.com].ms13 size = 8592 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.id-B4197730.[ms_13@aol.com].ms13 size = 7808 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.id-B4197730.[ms_13@aol.com].ms13 size = 246 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.id-B4197730.[ms_13@aol.com].ms13 size = 12256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 176 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 176 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.id-B4197730.[ms_13@aol.com].ms13 size = 105504 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\README.txt.id-B4197730.[ms_13@aol.com].ms13 size = 48 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\README.txt.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.id-B4197730.[ms_13@aol.com].ms13 size = 145184 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.id-B4197730.[ms_13@aol.com].ms13 size = 4240 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.id-B4197730.[ms_13@aol.com].ms13 size = 266 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\FileSystemMetadata.xml.id-B4197730.[ms_13@aol.com].ms13 size = 288 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\FileSystemMetadata.xml.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[ms_13@aol.com].ms13 size = 63936 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[ms_13@aol.com].ms13 size = 280 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\Welcome.html.id-B4197730.[ms_13@aol.com].ms13 size = 960 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\Welcome.html.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\Office16\OSPP.VBS size = 262144 True 3
Fn
Data
Write C:\Program Files\Microsoft Office\AppXManifest.xml.id-B4197730.[ms_13@aol.com].ms13 size = 786700 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\AppXManifest.xml.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Microsoft Office\Office16\SLERROR.XML.id-B4197730.[ms_13@aol.com].ms13 size = 36352 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\Office16\SLERROR.XML.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\Office16\OSPP.VBS.id-B4197730.[ms_13@aol.com].ms13 size = 94480 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\Office16\OSPP.VBS.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\Office16\OSPP.HTM.id-B4197730.[ms_13@aol.com].ms13 size = 174544 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\Office16\OSPP.HTM.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1536 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 387360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 800880 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 496528 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 253728 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1048560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 19456 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 763376 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 2160 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 2160 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 76384 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 215888 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 343344 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 14928 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 357360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 65008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 9232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 399536 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1456 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 3760 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 527968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 3376 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.id-B4197730.[ms_13@aol.com].ms13 size = 9840 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.id-B4197730.[ms_13@aol.com].ms13 size = 384 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[ms_13@aol.com].ms13 size = 318 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 7232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 14880 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 6688 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 9040 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 3264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 8112 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 7696 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 528 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 512 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.id-B4197730.[ms_13@aol.com].ms13 size = 786714 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 11904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 3152 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 12496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 10608 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 3488 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 2608 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 5264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 4960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 5328 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 15312 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 5040 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 1152 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 7584 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 4896 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 6992 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF size = 69648 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF size = 296 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 8592 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 13264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 5376 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 9264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF size = 69648 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF size = 296 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 4400 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 3968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 3136 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 3392 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3040 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00853_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 20592 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4736 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00790_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5696 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00790_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00853_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7088 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF size = 14432 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00914_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10848 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00914_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01060_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01060_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1840 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01216_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5840 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01216_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3760 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01218_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01218_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 27872 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02122_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7552 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02122_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02559_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6640 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02559_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01251_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01251_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 26336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02724_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2112 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02724_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01545_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7376 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01545_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04108_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2352 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04108_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2640 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04134_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3424 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04134_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN03500_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9248 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04195_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4624 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04191_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6640 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04191_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04195_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN03500_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04206_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7680 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04206_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04225_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04225_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04267_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04235_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04196_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3152 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04196_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04235_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04267_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB.id-B4197730.[ms_13@aol.com].ms13 size = 16000 True 1
Fn
Data
Write C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 18640 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 274 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 18640 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 274 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 69664 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 21200 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 290 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19152 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[ms_13@aol.com].ms13 size = 294 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19152 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 276 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 18640 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 282 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 11632 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 278 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll size = 19664 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll size = 274 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 20688 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 284 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 22736 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 278 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19152 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 286 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19664 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04323_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04323_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04269_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04269_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04332_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04332_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04326_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04326_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04355_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04355_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19152 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 276 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 26832 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 282 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00116_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4880 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00116_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04385_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04385_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04384_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04384_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19664 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 278 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll size = 70864 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll size = 278 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04369_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4816 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04369_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 27856 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00141_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 26896 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00160_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 22528 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00155_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11648 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00146_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 28960 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 23248 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 24784 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 21200 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 24784 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 274 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 276 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00141_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19152 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 278 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream32.dll.id-B4197730.[ms_13@aol.com].ms13 size = 396976 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 272 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[ms_13@aol.com].ms13 size = 278 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 16192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00146_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00155_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00160_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 473776 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD05119_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17248 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD05119_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06102_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 16128 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06102_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07761_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 26752 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07761_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06200_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 16688 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06200_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07804_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4928 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07804_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07831_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07831_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08808_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 48000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08808_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF size = 24336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.id-B4197730.[ms_13@aol.com].ms13 size = 786698 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08868_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 40208 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08868_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.id-B4197730.[ms_13@aol.com].ms13 size = 786714 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08773_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 24784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08773_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream32.dll.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09664_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09664_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 786714 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 47792 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09662_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 20560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09662_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09194_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14544 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09194_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 13520 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 20464 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 15744 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 20192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19827_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9712 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19827_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19695_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12992 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19695_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19988_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 18320 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19988_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19986_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19986_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19828_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19828_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00012_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9824 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00008_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12528 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD20013_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11072 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00045_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7872 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll.id-B4197730.[ms_13@aol.com].ms13 size = 512224 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll.id-B4197730.[ms_13@aol.com].ms13 size = 246 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00012_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00045_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00098_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00098_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD20013_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00008_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00122_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10160 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00122_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00105_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 896 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00105_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00148_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1712 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00148_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00130_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1472 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00130_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.id-B4197730.[ms_13@aol.com].ms13 size = 263904 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll.id-B4197730.[ms_13@aol.com].ms13 size = 820432 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 1048560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00194_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00194_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00152_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1520 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00152_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.en-us.dll.id-B4197730.[ms_13@aol.com].ms13 size = 902336 False 1
Fn
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00195_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8080 False 1
Fn
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00234_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9312 False 1
Fn
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00247_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14448 False 1
Fn
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 160384 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00242_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4032 False 1
Fn
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Delete C:\588bce7c90097ed212\1049\eula.rtf - True 1
Fn
For performance reasons, the remaining 3168 entries are omitted.
The remaining entries can be found in glog.xml.
Registry (8)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Startup, data = 83, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Write Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run value_name = chrome64.exe, data = C:\WINDOWS\System32\chrome64.exe, size = 64, type = REG_SZ True 1
Fn
Process (1519)
»
Operation Process Additional Information Success Count Logfile
Create C:\WINDOWS\system32\cmd.exe os_pid = 0x4d8, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
Enumerate Processes - - True 1497
Fn
Enumerate Processes - - False 21
Fn
Module (135)
»
Operation Module Additional Information Success Count Logfile
Load kernel32.dll base_address = 0x75e90000 True 1
Fn
Load advapi32.dll base_address = 0x761b0000 True 1
Fn
Load user32.dll base_address = 0x74b70000 True 1
Fn
Load Shell32.dll base_address = 0x76480000 True 1
Fn
Load ntdll.dll base_address = 0x77bb0000 True 1
Fn
Load mpr.dll base_address = 0x74500000 True 1
Fn
Load ws2_32.dll base_address = 0x746a0000 True 1
Fn
Get Handle c:\windows\syswow64\kernel32.dll base_address = 0x75e90000 True 16
Fn
Get Filename - process_name = c:\users\fd1hvy\desktop\chrome64.exe, file_name_orig = C:\Users\FD1HVy\Desktop\chrome64.exe, size = 32767 True 3
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcAddress, address_out = 0x75ea51b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleHandleW, address_out = 0x75ea50d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindNextFileW, address_out = 0x75efee40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindClose, address_out = 0x75efed70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = MoveFileW, address_out = 0x75ede500 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileSizeEx, address_out = 0x75efef40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleFileNameW, address_out = 0x75ea5090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileAttributesW, address_out = 0x75efef10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExitProcess, address_out = 0x75ea3cb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCommandLineW, address_out = 0x75ea4cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameW, address_out = 0x75ed32c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameA, address_out = 0x75ed3780 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateMutexW, address_out = 0x75efeb70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenW, address_out = 0x75ea6c70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenA, address_out = 0x75ea6c50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcess, address_out = 0x75efea10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForSingleObject, address_out = 0x75efeca0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLogicalDrives, address_out = 0x75ea0d20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetTickCount, address_out = 0x75efdd50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteFileW, address_out = 0x75efed40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WideCharToMultiByte, address_out = 0x75ea6b10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeCriticalSectionAndSpinCount, address_out = 0x75efebb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Sleep, address_out = 0x75ea6760 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LeaveCriticalSection, address_out = 0x77bfb250 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReadFile, address_out = 0x75eff090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateFileW, address_out = 0x75efed10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenMutexW, address_out = 0x75efebf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = EnterCriticalSection, address_out = 0x77bfb2d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForMultipleObjects, address_out = 0x75efec80 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiW, address_out = 0x75ea6bf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiA, address_out = 0x75ea6bd0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteCriticalSection, address_out = 0x77bdfb90 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReleaseMutex, address_out = 0x75efec20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseHandle, address_out = 0x75efeab0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVersion, address_out = 0x75ea56c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThread, address_out = 0x75ea46b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExpandEnvironmentStringsW, address_out = 0x75ea4a40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceCounter, address_out = 0x75ea5da0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceFrequency, address_out = 0x75ea5dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcessId, address_out = 0x75efea20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFileAttributesW, address_out = 0x75eff100 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVolumeInformationW, address_out = 0x75eff020 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WriteFile, address_out = 0x75eff180 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFilePointerEx, address_out = 0x75eff130 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetEndOfFile, address_out = 0x75eff0e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindFirstFileW, address_out = 0x75efedf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcessHeap, address_out = 0x75ea51f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapReAlloc, address_out = 0x77bef630 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapAlloc, address_out = 0x77bf2dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapFree, address_out = 0x75ea57f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreatePipe, address_out = 0x75ea4590 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetHandleInformation, address_out = 0x75efeae0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateProcessW, address_out = 0x75ea4610 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringW, address_out = 0x75ea4430 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringA, address_out = 0x75ea4410 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenProcess, address_out = 0x75ea5cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = TerminateProcess, address_out = 0x75ea67e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetSystemTime, address_out = 0x75ea54e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SystemTimeToFileTime, address_out = 0x75ea67a0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLastError, address_out = 0x75ea5010 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateToolhelp32Snapshot, address_out = 0x75ededc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32NextW, address_out = 0x75edf8f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32FirstW, address_out = 0x75edf750 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegOpenKeyExW, address_out = 0x761ce580 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegQueryValueExW, address_out = 0x761ce5a0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegSetValueExW, address_out = 0x761cf530 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegCloseKey, address_out = 0x761ced60 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenProcessToken, address_out = 0x761cefb0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = GetTokenInformation, address_out = 0x761cee90 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenSCManagerW, address_out = 0x761d0540 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenServiceW, address_out = 0x761cfa20 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = CloseServiceHandle, address_out = 0x761cfc00 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = ControlService, address_out = 0x761e26d0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = QueryServiceStatus, address_out = 0x761d2380 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumDependentServicesW, address_out = 0x761e2f70 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumServicesStatusExW, address_out = 0x761cfc80 True 1
Fn
Get Address c:\windows\syswow64\user32.dll function = SystemParametersInfoW, address_out = 0x74b9f210 True 1
Fn
Get Address c:\windows\syswow64\shell32.dll function = ShellExecuteExW, address_out = 0x765e4730 True 1
Fn
Get Address c:\windows\syswow64\ntdll.dll function = NtQuerySystemInformation, address_out = 0x77c22070 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetCloseEnum, address_out = 0x74502640 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetOpenEnumW, address_out = 0x74502790 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetEnumResourceW, address_out = 0x74502410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = WSAStartup, address_out = 0x746a5b40 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = socket, address_out = 0x746b4510 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = send, address_out = 0x746a5030 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = recv, address_out = 0x746b0c50 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = connect, address_out = 0x746a5410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = closesocket, address_out = 0x746b0910 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = gethostbyname, address_out = 0x746d6cb0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = inet_addr, address_out = 0x746b9160 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = ntohl, address_out = 0x746a49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htonl, address_out = 0x746a49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htons, address_out = 0x746b8ff0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Wow64DisableWow64FsRedirection, address_out = 0x75ea6b30 True 16
Fn
Service (63)
»
Operation Additional Information Success Count Logfile
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 4
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 4
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 4
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 4
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 4
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 4
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System (234)
»
Operation Additional Information Success Count Logfile
Get Computer Name result_out = NQDPDE True 1
Fn
Sleep duration = -1 (infinite) False 1
Fn
Sleep duration = 500 milliseconds (0.500 seconds) True 19
Fn
Sleep duration = 100 milliseconds (0.100 seconds) True 11
Fn
Get Time type = Performance Ctr, time = 17504429295 True 1
Fn
Get Time type = Ticks, time = 175000 True 1
Fn
Get Time type = Ticks, time = 175015 True 2
Fn
Get Time type = Ticks, time = 176359 True 1
Fn
Get Time type = Ticks, time = 176500 True 1
Fn
Get Time type = Ticks, time = 177687 True 2
Fn
Get Time type = Ticks, time = 178718 True 2
Fn
Get Time type = Ticks, time = 178859 True 1
Fn
Get Time type = Ticks, time = 180125 True 2
Fn
Get Time type = Ticks, time = 180343 True 1
Fn
Get Time type = Ticks, time = 180546 True 1
Fn
Get Time type = Ticks, time = 180765 True 1
Fn
Get Time type = Ticks, time = 180781 True 1
Fn
Get Time type = Ticks, time = 181046 True 2
Fn
Get Time type = Ticks, time = 181312 True 3
Fn
Get Time type = Ticks, time = 181578 True 2
Fn
Get Time type = Ticks, time = 182171 True 3
Fn
Get Time type = Ticks, time = 183140 True 3
Fn
Get Time type = Ticks, time = 183453 True 3
Fn
Get Time type = Ticks, time = 183578 True 2
Fn
Get Time type = Ticks, time = 183750 True 2
Fn
Get Time type = Ticks, time = 184437 True 3
Fn
Get Time type = Ticks, time = 185187 True 3
Fn
Get Time type = Ticks, time = 185390 True 2
Fn
Get Time type = Ticks, time = 185562 True 3
Fn
Get Time type = Ticks, time = 185703 True 2
Fn
Get Time type = Ticks, time = 185812 True 2
Fn
Get Time type = Ticks, time = 186718 True 4
Fn
Get Time type = Ticks, time = 187421 True 2
Fn
Get Time type = Ticks, time = 187921 True 4
Fn
Get Time type = Ticks, time = 188031 True 2
Fn
Get Time type = Ticks, time = 188328 True 2
Fn
Get Time type = Ticks, time = 189187 True 4
Fn
Get Time type = Ticks, time = 190140 True 2
Fn
Get Time type = Ticks, time = 191078 True 4
Fn
Get Time type = Ticks, time = 191765 True 2
Fn
Get Time type = Ticks, time = 192703 True 4
Fn
Get Time type = Ticks, time = 193375 True 2
Fn
Get Time type = Ticks, time = 193828 True 4
Fn
Get Time type = Ticks, time = 194390 True 2
Fn
Get Time type = Ticks, time = 194625 True 2
Fn
Get Time type = Ticks, time = 194750 True 2
Fn
Get Time type = Ticks, time = 195015 True 4
Fn
Get Time type = Ticks, time = 195156 True 2
Fn
Get Time type = Ticks, time = 195343 True 2
Fn
Get Time type = Ticks, time = 195484 True 2
Fn
Get Time type = Ticks, time = 195609 True 2
Fn
Get Time type = Ticks, time = 196546 True 4
Fn
Get Time type = Ticks, time = 196750 True 2
Fn
Get Time type = Ticks, time = 197125 True 2
Fn
Get Time type = Ticks, time = 197812 True 4
Fn
Get Time type = Ticks, time = 198156 True 2
Fn
Get Time type = Ticks, time = 198828 True 4
Fn
Get Time type = Ticks, time = 199296 True 2
Fn
Get Time type = Ticks, time = 199437 True 2
Fn
Get Time type = Ticks, time = 199609 True 2
Fn
Get Time type = Ticks, time = 199718 True 2
Fn
Get Time type = Ticks, time = 199843 True 4
Fn
Get Time type = Ticks, time = 199968 True 2
Fn
Get Time type = Ticks, time = 200109 True 2
Fn
Get Time type = Ticks, time = 200406 True 2
Fn
Get Time type = Ticks, time = 201062 True 4
Fn
Get Time type = Ticks, time = 201656 True 2
Fn
Get Time type = Ticks, time = 201796 True 2
Fn
Get Time type = Ticks, time = 202015 True 2
Fn
Get Time type = Ticks, time = 202500 True 4
Fn
Get Time type = Ticks, time = 202968 True 2
Fn
Get Time type = Ticks, time = 203406 True 2
Fn
Get Time type = Ticks, time = 204062 True 4
Fn
Get Time type = Ticks, time = 204250 True 2
Fn
Get Time type = Ticks, time = 204406 True 2
Fn
Get Time type = Ticks, time = 204515 True 2
Fn
Get Time type = Ticks, time = 204625 True 2
Fn
Get Time type = Ticks, time = 204734 True 2
Fn
Get Time type = Ticks, time = 204906 True 2
Fn
Get Time type = Ticks, time = 205015 True 2
Fn
Get Time type = Ticks, time = 205125 True 4
Fn
Get Time type = Ticks, time = 205234 True 2
Fn
Get Time type = Ticks, time = 205343 True 2
Fn
Get Time type = Ticks, time = 205453 True 2
Fn
Get Time type = Ticks, time = 205562 True 2
Fn
Get Time type = Ticks, time = 205671 True 2
Fn
Get Time type = Ticks, time = 205796 True 2
Fn
Get Time type = Ticks, time = 205906 True 2
Fn
Get Time type = Ticks, time = 206015 True 2
Fn
Get Time type = Ticks, time = 206125 True 2
Fn
Get Info type = Operating System True 2
Fn
Mutex (4)
»
Operation Additional Information Success Count Logfile
Create mutex_name = Global\syncronize_6129M1A True 1
Fn
Create mutex_name = Global\syncronize_6129M1U True 1
Fn
Open mutex_name = Global\syncronize_6129M1A, desired_access = SYNCHRONIZE False 1
Fn
Open mutex_name = Global\syncronize_6129M1U, desired_access = SYNCHRONIZE False 1
Fn
Process #2: cmd.exe
268 0
»
Information Value
ID #2
File Name c:\windows\system32\cmd.exe
Command Line "C:\WINDOWS\system32\cmd.exe"
Initial Working Directory C:\Users\FD1HVy\Desktop\
Monitor Start Time: 00:01:24, Reason: Child Process
Unmonitor End Time: 00:01:57, Reason: Self Terminated
Monitor Duration 00:00:32
OS Process Information
»
Information Value
PID 0x4d8
Parent PID 0x48c (c:\users\fd1hvy\desktop\chrome64.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x 4E4
0x F9C
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
cmd.exe 0x7FF624E10000 0x7FF624E72FFF Process Termination - 64-bit - False
Host Behavior
File (203)
»
Operation Filename Additional Information Success Count Logfile
Get Info C:\Users\FD1HVy\Desktop type = file_attributes True 2
Fn
Get Info STD_OUTPUT_HANDLE type = file_type True 14
Fn
Get Info STD_INPUT_HANDLE type = file_type True 5
Fn
Get Info STD_ERROR_HANDLE type = file_type True 1
Fn
Open STD_OUTPUT_HANDLE - True 34
Fn
Open STD_INPUT_HANDLE - True 73
Fn
Open STD_ERROR_HANDLE - True 2
Fn
Read STD_INPUT_HANDLE size = 1, size_out = 1 True 60
Fn
Data
Write STD_OUTPUT_HANDLE size = 38 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 2 True 4
Fn
Data
Write STD_OUTPUT_HANDLE size = 52 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 24 True 3
Fn
Data
Write STD_OUTPUT_HANDLE size = 36 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 2 False 1
Fn
Write STD_ERROR_HANDLE size = 51 False 1
Fn
Registry (17)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System - False 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Command Processor - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 4, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Process (4)
»
Operation Process Additional Information Success Count Logfile
Create C:\WINDOWS\system32\mode.com os_pid = 0xbfc, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Create C:\WINDOWS\system32\vssadmin.exe os_pid = 0xa5c, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Get Info C:\WINDOWS\system32\mode.com type = PROCESS_BASIC_INFORMATION True 1
Fn
Get Info C:\WINDOWS\system32\vssadmin.exe type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory (2)
»
Operation Process Additional Information Success Count Logfile
Read C:\WINDOWS\system32\mode.com address = 171134210048, size = 1952 True 1
Fn
Data
Read C:\WINDOWS\system32\vssadmin.exe address = 292912496640, size = 1952 True 1
Fn
Data
Module (10)
»
Operation Module Additional Information Success Count Logfile
Load NTDLL.DLL base_address = 0x7ff931f40000 True 1
Fn
Get Handle c:\windows\system32\cmd.exe base_address = 0x7ff624e10000 True 1
Fn
Get Handle c:\windows\system32\kernel32.dll base_address = 0x7ff92fdd0000 True 2
Fn
Get Filename - process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\WINDOWS\system32\cmd.exe, size = 32743 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetThreadUILanguage, address_out = 0x7ff92fdea990 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CopyFileExW, address_out = 0x7ff92fdee830 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = IsDebuggerPresent, address_out = 0x7ff92fdee300 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetConsoleInputExeNameW, address_out = 0x7ff92f1b0a40 True 1
Fn
Get Address c:\windows\system32\ntdll.dll function = NtQueryInformationProcess, address_out = 0x7ff931fe56b0 True 1
Fn
System (1)
»
Operation Additional Information Success Count Logfile
Get Info type = Operating System True 1
Fn
Environment (29)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 10
Fn
Data
Get Environment String name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps True 3
Fn
Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 3
Fn
Get Environment String name = PROMPT False 1
Fn
Get Environment String name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe True 1
Fn
Get Environment String name = KEYS False 1
Fn
Get Environment String name = PROMPT, result_out = $P$G True 2
Fn
Set Environment String name = PROMPT, value = $P$G True 1
Fn
Set Environment String name = =C:, value = C:\Users\FD1HVy\Desktop True 1
Fn
Set Environment String name = COPYCMD True 2
Fn
Set Environment String name = =ExitCode, value = 00000000 True 1
Fn
Set Environment String name = =ExitCodeAscii True 2
Fn
Set Environment String name = =ExitCode, value = 00000002 True 1
Fn
Process #4: mode.com
0 0
»
Information Value
ID #4
File Name c:\windows\system32\mode.com
Command Line mode con cp select=1251
Initial Working Directory C:\Users\FD1HVy\Desktop\
Monitor Start Time: 00:01:34, Reason: Child Process
Unmonitor End Time: 00:01:49, Reason: Self Terminated
Monitor Duration 00:00:15
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0xbfc
Parent PID 0x4d8 (c:\windows\system32\cmd.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x A34
0x 8AC
0x F28
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
mode.com 0x7FF6AA140000 0x7FF6AA14BFFF Process Termination - 64-bit - False
Process #5: vssadmin.exe
0 0
»
Information Value
ID #5
File Name c:\windows\system32\vssadmin.exe
Command Line vssadmin delete shadows /all /quiet
Initial Working Directory C:\Users\FD1HVy\Desktop\
Monitor Start Time: 00:01:49, Reason: Child Process
Unmonitor End Time: 00:01:56, Reason: Self Terminated
Monitor Duration 00:00:07
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0xa5c
Parent PID 0x4d8 (c:\windows\system32\cmd.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x BEC
0x DB0
0x E64
0x CF0
0x A98
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
vssadmin.exe 0x7FF612720000 0x7FF612746FFF Process Termination - 64-bit - False
Process #6: chrome64.exe
24165 0
»
Information Value
ID #6
File Name c:\windows\system32\chrome64.exe
Command Line "C:\Windows\System32\chrome64.exe"
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:03:58, Reason: Autostart
Unmonitor End Time: 00:04:33, Reason: Self Terminated
Monitor Duration 00:00:34
OS Process Information
»
Information Value
PID 0xd10
Parent PID 0xa64 (c:\windows\explorer.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level Medium
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeCreateGlobalPrivilege
Thread IDs
0x D14
0x D20
0x D58
0x D5C
0x D60
0x D64
0x D70
0x D74
0x D78
0x D7C
0x D80
0x D84
0x D90
0x D94
0x D98
0x D9C
0x DA0
0x DA4
0x DB0
0x DC0
0x DC4
0x DC8
0x DCC
0x DD0
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
chrome64.exe 0x00400000 0x00418FFF Process Termination - 32-bit - False
Dropped Files
»
Filename File Size Hash Values YARA Match Actions
C:\Users\FD1HVy\Desktop\chrome64.exe 92.50 KB MD5: d613cd49fa1dc355665d115896374ab2
SHA1: 604fafc2c5bca966bde6343a9aa3e2d4a2c570c5
SHA256: 7459000c5cd1fd22aa03849f734131539ef5dd3f0b58dad4d011261a430ad70f
SSDeep: 1536:mBwl+KXpsqN5vlwWYyhY9S4AOMuSjlHSoU234i71NGnnHcJWGVGQ+SIFu:Qw+asqN5aW/hL0Mfum74E9Gp
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00269_.wmf.id-b4197730.[ms_13@aol.com].ms13 5.39 KB MD5: dc2a9e4b9edbd5991ef73a7fb69311ca
SHA1: 044eae029e1ae18679b931157b74d8d97a6235d8
SHA256: 138cb876c59a83d9c025ecfe8429052756d6c6a02af11c21674715d2a1e39c72
SSDeep: 96:tYzyvSPB5Qpn0NlJvYHvcikAkJQWhm2LT2d8M4ewe:oBSpnywJkAkJNf2r7/
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_zh_tw.properties.id-b4197730.[ms_13@aol.com].ms13 3.93 KB MD5: 43775ba152148e857fd48a00b57595c9
SHA1: 676ea11367837a1f58b5dd808ba18365730a2fbd
SHA256: dfc4096d3ca69be0ccbe91895455b740b37911f4e94862d52c00879cdf425022
SSDeep: 96:tN8+rNJPhayBqNYfBqKtEsgC7WDmMgJgUrT8P0T3:0+jwykNYDty6JgOT8MT3
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00254_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.93 KB MD5: 1b76869f3506247293d34f449dc15d4e
SHA1: 9e8cf488ad8492a218c229d46bf0be90f02949d3
SHA256: 774d5a2c6c0007c4047f23b8b9a44824e44a28d595a85dac94aca3d3e83a4d57
SSDeep: 48:9Gw3NT3afQN+6n5MsuDG+r4+8GjMnmXOD2RN62QSaq87:9G6NLu6niJK+s+xj7qV2QSHe
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00262_.wmf.id-b4197730.[ms_13@aol.com].ms13 2.73 KB MD5: be513f008286af90d89da4e7749a09cc
SHA1: 339904705aad245aa610aa912d13eef65a0bdff6
SHA256: d3aa88e39e95d02eceeff4eb417f7dd2ac2207ec590d889784b7f652cb0955cf
SSDeep: 48:3FOQHQ1cSEIEbkGOhd9M7GEaXIu+i5sCEFT1kAIPBnecxLEGTo87:VvQ1cLgGUW5HitEDa/6GToe
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00261_.wmf.id-b4197730.[ms_13@aol.com].ms13 12.43 KB MD5: 2eaa2ae3950a0c0a6d140ccd3aa947f7
SHA1: ff3bd027e0b3e05c7be90dece1cdfddc1d309bd1
SHA256: 0d739733a4d94035023be72b957fda754ed4ad9e56c609e6a626a627309f0893
SSDeep: 384:YHRsanEfadOvaL0lB5Wh4ZJyQ5BndFJruv6pUuk:YHRHn2aAhgh4ZcYfnUuk
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00265_.wmf.id-b4197730.[ms_13@aol.com].ms13 5.86 KB MD5: 3806dbad05c1e1af75cc8def080ee118
SHA1: ba2d8a325e43406be728d2464ac818d994573230
SHA256: a50877238fae950b17c98829fa1d5e7414de2f8cc6ce0f09fe634ccf783aaf0d
SSDeep: 96:NKUDHy6hhOieY6fpJxXsfKnRISDlGxC+f7l8ES/qWN30hhNcASPtuPe:N9hhh00XSDWf7lA/+vcASYW
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00270_.wmf.id-b4197730.[ms_13@aol.com].ms13 3.18 KB MD5: e40c3fdcee71550bac09db719972452f
SHA1: 222289620208499e14de086f20728c7afdecacab
SHA256: 7326959826fb665d8763b108e07d31f99e39cee0c951573c7e5d3ee2c92bb9eb
SSDeep: 48:T22zjXQQN9KFQsHeEZYHuxF4P7TQIsBvosRk+oZp+heva2zeNA0/hiwH37gZU+5y:Tz7D9HCeEt8fvsBwjf+Mz7qgZU+cxkDe
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\copyright.id-b4197730.[ms_13@aol.com].ms13 3.40 KB MD5: e392ec94bc8ae8f8ff1838903d1a550c
SHA1: 49a8fd836a24261cb83c9d06c807fab2543a3514
SHA256: 873353caee53f945c3bf54df9c14d0e1f5ee8f6723b4ce9577f4d07a56ffbdfe
SSDeep: 48:0Fi1883HBJQk/r+LsLxl6Nq3uuZxuojMzhh8JMJWF4U9VEYZVrR7tFvdmroRhzbd:0FY88zQWrFfpceFtmGRttd0oznDYAX
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00267_.wmf.id-b4197730.[ms_13@aol.com].ms13 2.82 KB MD5: ba10f2d53945dd56ff476605a5bfc5bb
SHA1: 08553d64c53a95b88be97d18e63a4d35bca1a488
SHA256: b6c7f6bc188deff2630a0979fde4287bffc3873f97b9f5f0c694f53c846cfa7c
SSDeep: 48:CY6QOW7QUv7NDVf1ce4iPQMwhf531pT9amxDa+y41VPZsAY/oyszSfLwrV6U2pse:CY6SEk7Nxf1celrwxp9akdJeA1nzSEBM
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\amd64\jvm.cfg.id-b4197730.[ms_13@aol.com].ms13 0.85 KB MD5: 4acc17440850c457777114d3faad8986
SHA1: a4935b3932886e6cb67b26b7358fe575632e6579
SHA256: 0bc6dba3c71a52cdbc3a3e794f86e3b9aa10b88dc618bf961fea8dc5a819f467
SSDeep: 24:zH241jo1Qe2jWVonhWVuTSuB0JkSFk0iVPLUy:i41je2jyohWV6Okx0aLr
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\accessibility.properties.id-b4197730.[ms_13@aol.com].ms13 0.41 KB MD5: 1aedd9b84d528251e3136d8f7dc28541
SHA1: baab6958c569206ad8a7c81b6ba4fa12495e55bf
SHA256: 696ba06909ec7ac25895434ed922e817f9aec3dd7d3866895a2bb04672542ed9
SSDeep: 12:yG8T5Oyw8PoacYjBT01zlWl74brMpu/POiG0vuN50l/:yXOywsHc6q1JWS9/PLU0t
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\calendars.properties.id-b4197730.[ms_13@aol.com].ms13 1.61 KB MD5: e1fb02c10acc8fd3034dd64d6fef1580
SHA1: 354aba5d6036873edcd3719457b2156738eb24ee
SHA256: ea37b71162b16ed656912aa3ea6e6998c079a7a63cb7fdb63c16ba58d1a32b9b
SSDeep: 24:wBaqtZAqPETJ3R0CCRhlx8uJLVifBgsB1/+VQXyV0ot6oeCDW+PLUst:wBFtZPMTH0suDi/2VQCRt3/DWsLbt
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\cmm\ciexyz.pf.id-b4197730.[ms_13@aol.com].ms13 50.27 KB MD5: ffd0d77081e51956c119ae7b8f7456bd
SHA1: 97ddc27a24b4fe46bc944d1979c841c125a28fad
SHA256: 50700a960af493e5a6eaa5336fcf931e8362a10d87e9dc0c47f9819440e4c76a
SSDeep: 1536:sUoTPP+ZJtMvp8Mrvhgm7+fQEozilC+dDMTz6VD:+QYrJvhEoL+GnWD
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00273_.wmf.id-b4197730.[ms_13@aol.com].ms13 3.93 KB MD5: b5b4ffb4f4472f5cc3893c7251614af0
SHA1: 09995bf75987003d6050bbbf4126419f18a4da9a
SHA256: 715a49a8f3597a773ef859041e2f45554c24219a0b4bdf7b4ee50d2facbc4896
SSDeep: 96:mbmXm7kZC66zxd9XzP9Jq/diFr33ebt2vLmFJhcxz6otcHssfRe:UKZczxd9z1Jq/wBLccp6otQDfo
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00274_.wmf.id-b4197730.[ms_13@aol.com].ms13 4.31 KB MD5: bbf5303960cdca99bcdaad4dd12a546b
SHA1: 9018822f8f72e99b32539127907fbbdc43cb748f
SHA256: 964818169b4426a96354934e4f6347cb7d10337a7608cdfa9ad8f2c99b821f28
SSDeep: 96:XUp7GL26XaLNj/Z2IhqlitdZh4dUR6fdsJN5KaYoxOe:eCNXaLNd/hql0dZOUR685Yox1
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\cmm\gray.pf.id-b4197730.[ms_13@aol.com].ms13 0.85 KB MD5: bb1fdb2fb1352851a915cfb66aec72d5
SHA1: 7657ba5c710fb3dcf98961740f287c2cf36c29e5
SHA256: 9281aceb028efac8249ebb439a08eab6f1cafa9aed6168ac722c1ef491c35553
SSDeep: 12:IWuRplZ8gNbkWoofrzYl5DgarlfZSQeLSy4Wb2i7/W6Fdv6630erMBn/POiG0vui:kplJojoXY7cajSQeLLCi9Q+0Sk/PLUy
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00390_.wmf.id-b4197730.[ms_13@aol.com].ms13 13.03 KB MD5: 0b6c2edfe9a66d482dd7595a00d90271
SHA1: bd4782eef02392b4875570db7632d542533c62f4
SHA256: bee0b8affc53395bd9e9165491eb2be1682ae6917546d8e81c75b4bb6f8e1126
SSDeep: 384:YJGhpEpia0+FWjPU/XRTC8wt1fIe62lx5Vuhc7jpTK:FhpgiaEGBTUtGe62lX4hc71TK
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00392_.wmf.id-b4197730.[ms_13@aol.com].ms13 26.65 KB MD5: 577f4e305e84e44d9c66455b80d93028
SHA1: 6a6b284d77dad5188ff437fcc7328f7b41bdeb0b
SHA256: c849c0797802ed3270b26cd2bf9608aebfb24c1fca228deb399873156d0d1bc2
SSDeep: 768:eoLJRKVDlOZP4/9/SeGzdwa6lVMPIGAOf:/0Vcw/9/SeGzklmPoM
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\cmm\pycc.pf.id-b4197730.[ms_13@aol.com].ms13 268.27 KB MD5: 5f1e5861c4c8ec194dace1c733f23bed
SHA1: 8fe184a553c0b002556025b6f6d118afb8a7d0d1
SHA256: 9153f1c62d2d5fc86b909cd81e21d81dafedac28c94768a3dfe03e11330026dd
SSDeep: 6144:S2DaSllAbhKc70+9Plp6AcgcS7pDMPVZ4HMYHLLOBVHsdg/wAqzDRy/Nx:xaSlwKc70el1MPVZ4HRS0zAqDRQ
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\cmm\linear_rgb.pf.id-b4197730.[ms_13@aol.com].ms13 1.26 KB MD5: ee7dae8c81a88c650c2c73cae001d110
SHA1: c41a9f51e3148542fe1baf82be114fb335442f0c
SHA256: 7e1dff8dd776287d7975c79d8fd26ff84e155ffe69fb2aefb30985f92c95a895
SSDeep: 24:W93MmHG6m0bu7impq2TGeMMeNsqv/xX7CdOK26udZ6B0mPLUe:43Nmn0K7zEbeMPXxLCd/uzYfLv
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00296_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.03 KB MD5: d2997208b7bc316d73eadcdfb9859679
SHA1: cf941fca1b578ea6cc44e7051ff410a5fb2c3432
SHA256: b600acb722861b015c89260a055cb07cd95bfa6f115af0dd62b3f61530a80252
SSDeep: 24:jnxFgYsaZRpRf4vDwBOAzdCTlYA9O+0S+xnp0lv3HlvgPgUlolKIGh7:jHNRUDrUCpYAsBSOp0BZgPE87
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00248_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.75 KB MD5: 94083e39950fe8de80de8f4ce2c2ec69
SHA1: 5f39d806c7b1d38fd500e5b236fd3f6c54f4ef35
SHA256: 651fff132212abbed706fabc993b732c543eaaa783266f98ffd5182299d1e2e2
SSDeep: 48:NIn6ECEXUHbxIYI6n0BquGQl+LhuCKwqGmnNfUc87:NIn6ERXUHdRI9quR+Lrzd9ce
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00252_.wmf.id-b4197730.[ms_13@aol.com].ms13 4.84 KB MD5: 274e51d3317bd26ee85f055af33a845f
SHA1: 36e75b3d7d9baab6c2f71744ade315750e36e88e
SHA256: 0dd8039460d1d4083a3989c0b04e2d5d64a08da28f9ad2f7cdbd3590a35e4fff
SSDeep: 96:CTCAuv1+0bhr7OaN5fApD+xYkIUPhv8Z+VC0U0ZyDbDIwdyezI16QfePo6Me:CJm+A1lTAK5IUPbjkDPI4y+4hfUo6T
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00524_.wmf.id-b4197730.[ms_13@aol.com].ms13 7.07 KB MD5: 643432c2d6792809568a661ce1ac3cc9
SHA1: c29e0bb770bb0a60426836501ebf414a9389f065
SHA256: ed0166bf177729a04abf88bf531492024871950f04007614a47fd0eeeb9db786
SSDeep: 192:/xAPwqwKxqHVwvdygAz+/IUfOAJ9IMepZkRz://q0uvzqBIOAQtTW
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\cmm\srgb.pf.id-b4197730.[ms_13@aol.com].ms13 3.30 KB MD5: a398fa90692a3995103aeeb6b2685c28
SHA1: b585d4bb9de3125220b2600d11e2af1e7ff03e2c
SHA256: 536ba0fb570a3a6424763ee0c16138bd9ae739682736cbebb654dec2d4de532f
SSDeep: 96:lki8d6sUFF3bXclBfIEA9oAWbMLT7/hRuj/r:KJ5QbXclBfIEAexMLTrSj/r
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\content-types.properties.id-b4197730.[ms_13@aol.com].ms13 5.68 KB MD5: f92d8518ac7c0f7231ee48e18dd6ac00
SHA1: 123c26655736fb2bc7a3e7aa3e159e304adc4bb2
SHA256: 5d3c9016bc0acb0dad4cd9bfe3d191bfd6d8818d007f78622f89d87aee1960a4
SSDeep: 96:NgkdwzJxPM+qupMSDjOhHLenROvRvTyy0arV0aHNr0ysgfwGe+a+RWwTeZnbVUdB:Ng0UxPNlpgenRivey0aJ0at4ycwr9e/u
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\classlist.id-b4197730.[ms_13@aol.com].ms13 82.62 KB MD5: fe5f93ec316788278c0900704208e487
SHA1: 27e06d1c95f5a1d7be05165d1fec894e187482a8
SHA256: 56e4f00f7cb25c412bdc121e32e66c5f5cce908d19db768c9aef7f478422ce1a
SSDeep: 1536:s5fm+G5RUIi0ufwBtdt/PI3/cmkqv7PQ9JG1BH37smhVG1mqczqRP/IKXzgpHM2N:sAxiKBPI3BTPrKmhkU9zMP/IKDAsU
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00525_.wmf.id-b4197730.[ms_13@aol.com].ms13 9.61 KB MD5: ffd74a713351fc0a44a0e11a3fa55c59
SHA1: 8bea2913fa2044c5b7835f4493a632dcf9eec3c3
SHA256: 929a9af283aee439b6ae4a74521bab5661cb6ca1a5c8413a36f82dd13bd1eeb2
SSDeep: 192:bGHTTM4THzywD1zfmeS7pd/HxZLYnjGRTsjE+QJpEiWSvqnbLDI8d7oJNv:6HnMkHtdfmecpdvGGRTsQ+QJmSynbLDW
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00921_.wmf.id-b4197730.[ms_13@aol.com].ms13 4.54 KB MD5: 3325b4888c8431f347dae41d6f32dca7
SHA1: cc59fe77c37936c7fd03acf0292973b833f54596
SHA256: 53a7ac60cbd398b737904d233d12cce1112ecfd3e490b036f6d0bd5b121fa88c
SSDeep: 96:XOC+AmZsa0Qolpf1OV8YFU1sripWnrwaAFA90MURe:eCTxaYOaYFAsjOFAxUo
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\currency.data.id-b4197730.[ms_13@aol.com].ms13 4.26 KB MD5: 37fffd1abf79b029f6b02571e92a886e
SHA1: 00c4272664e283e15638f372cf248b09a1756024
SHA256: 8acd64fe460a5ac589eda7622c2660c31070f8b5916c25206c23ae88d3dad01f
SSDeep: 96:e7dWMdvLS6A9NYzHFi/3Sxzc9VSvAf461WPrUmv:exWMRLDA9KJScAf461WzUmv
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00648_.wmf.id-b4197730.[ms_13@aol.com].ms13 11.46 KB MD5: 2bf5dde207d87207805dc79f4e5236a7
SHA1: 9059d5248f2c1eddecaf508814638abb4c64174d
SHA256: b3c82e22dde4414c3ebfbda6c5082eb2ef1a1043727ba3e65e40186b435cdb6c
SSDeep: 192:KjnnAoh7hp/U1BLNILWach9e2VEziqHyIOnwLuGbfzIYibEEgWWKbqR0YYZeKZyU:KjnAohQ1VNQ1cH7VE+8ynsu6k75WKVYQ
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00932_.wmf.id-b4197730.[ms_13@aol.com].ms13 19.26 KB MD5: f1a19273cc32f10192cbf74eaf5696f6
SHA1: 568a137667c62bbf98405ce9573b2d39409ced97
SHA256: 90ed3b3e5f9d6a0a2083d97bcd5b099f224078af77a9f681974f91bab38e5eaf
SSDeep: 384:2ipt//JRrnqvkBBOxq1HabBOycTR2WK4UCFGytkSXUbM2p+CTjBt4:h5/LqvsOxq1Hadut2WKGF7kQXCn4
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00985_.wmf.id-b4197730.[ms_13@aol.com].ms13 3.92 KB MD5: 2cde6ad25c532516b7fc2c78c9d5adf1
SHA1: 74effd7d29caf01f69c4f9e7c54022cf64e8e81d
SHA256: a161e576358fa142fa88a3ede0b5c1e3ad8d146f42d7e1076afec6577f9e30f5
SSDeep: 96:KoWypUDVvsdlwDrUkuBMvQJYcgJRsZHY2eKe:RoVvsdmDzuGvWYcUsdeJ
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00923_.wmf.id-b4197730.[ms_13@aol.com].ms13 6.36 KB MD5: 7c795570918897bb1af549cb5b92f6a9
SHA1: 69d01fcac8cdd8f0cf2ec7b36d3f426361aa545b
SHA256: b28dcc74d8c4cea9ffc377c1432e4a3531e25fcd610e55b7bdb49b363e3fd6ab
SSDeep: 192:CjxKQCjWxaVwdJMKRxY9ArB/30jYA0aQCZGP:URIa2QP49AtFaQCw
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages.properties.id-b4197730.[ms_13@aol.com].ms13 3.04 KB MD5: 5d3bb8faa47fa8511356f8aa68425df3
SHA1: ec0523085b8c2f9429fd0e3d7e5d3880553b1d10
SHA256: e9d4c84aa1d4e8c737130e84b16f1112a6e941ca7607aeda679a6814723472ca
SSDeep: 96:uqe3dCRUjEB98XPO2qTm7h7h8ZgEXQI3KewgiT:uqesvGXW2quhFwz31wgiT
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\boat.wmf.id-b4197730.[ms_13@aol.com].ms13 3.50 KB MD5: 8f38dd6534dba9750b3fedbfb9ffb063
SHA1: 4c848d1552bbf81757156cdda9ac4880200a1532
SHA256: 101be825f967785cd3bdd493a9e0041ee9acb48dc315eaede57281d353752fa8
SSDeep: 96:zP5x/W/7F58Gy591M7Kk2NSW+u0Dac14vfC46YDnMG:D5uRmGy59EqNS+m3OC46Yj7
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_de.properties.id-b4197730.[ms_13@aol.com].ms13 3.48 KB MD5: 03b92ff2dc40b49b21dd0d117a3afb6a
SHA1: 2ed633a82440da794aaab4e1c6661799e245817a
SHA256: 71d171bc443bb8594c75477dbecae880d943513a3bfd4eb79632969e53cb7ccf
SSDeep: 96:Zq5l6WyB2S32XpyFk3ZrmHtAzUZiQEw6vrV:w5l6WyZQcR6zaibworV
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\boatinst.wmf.id-b4197730.[ms_13@aol.com].ms13 28.56 KB MD5: 27ed2e9685910964d9fab27d89fa53b8
SHA1: c6ef4d63243a0feb187844919cccaad882099ab9
SHA256: 732cca7736169f6536631eb77c286ed161fab9883631cef2d5170921d83d1ce1
SSDeep: 384:VLNpWv4OBVc27lcWxgTk7hanBBR429Fc5sQaWkQFz4VIOTuJ8M4uhYswGxAyelIG:tWwS7lnKYhQB2sQvxNOTpu2sK5N4qUsN
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_es.properties.id-b4197730.[ms_13@aol.com].ms13 3.78 KB MD5: 0270eb6dc04f81981d63f0df8441d8ec
SHA1: d202ae9c8075b71f55b4d6c9f3de8e8175f9743d
SHA256: 5a9e4b568edb3bc1c7bb7d5050396ac3c204d62d041bd3cb36601d96a0446c4c
SSDeep: 96:lhXAjomwPUNEagk/RVoN32hSqMnvJWSklccKOEhlV:lhakcEaZRVoV2Yqgv8S1VhlV
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_fr.properties.id-b4197730.[ms_13@aol.com].ms13 3.59 KB MD5: a87bdd17e11e1a859234ec58f6d4ac26
SHA1: fa812d8123044f35251b58a1019a7f70328540f8
SHA256: d2e541116cedf46b72298ea68536fc42cd41e87db54dc66b7b6458d69e1f3b62
SSDeep: 96:mJ6NF9/sZs/v75Wi4VvJwzcY6JHXjLJ6v+dV:mJ6NF9QY75Wi4VvKZuHXjEGdV
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00076_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.54 KB MD5: 670e639e356b865eaca52044b07669d2
SHA1: d1fb05f22a73b2426484880bedd512643c575b9a
SHA256: 0b3173f52339948f8a6b3571a95eba289933fcd096704e9012a93065faa9a713
SSDeep: 48:sDfWeognJ8Ba9fMNF3t0KdLRZ7a02WsPfm87:yFoc8qMNF3CKrZm0gPee
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00078_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.65 KB MD5: 6e6995b8b33580c16c4a9973fa429b30
SHA1: 3024f36590ef74e35b5f3413326ce156f1ff75eb
SHA256: 3deb95a91d6b4d405f5776b14bc2e74cf18e410f9e97f4507ae4cb44edfc82d3
SSDeep: 24:WEeeNoXE3+OJXo9Obju3x7QwNkThpEg2alZCedMaGe8tf1NDcvnVWWixrVUqolKn:WMe03jKsbc3s/n2mMaB01Vcfr+VUq687
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_it.properties.id-b4197730.[ms_13@aol.com].ms13 3.41 KB MD5: 19b0d3cac05bf83accccd85990485c79
SHA1: d6e8725315c3ce5a261091065dbb1d0ccefa874d
SHA256: 56ba2e13002f7afb669e5b44339ac6e62adc6c0323ace61ceabecbe9136cc90f
SSDeep: 96:XFVV35vcNDQcdbfrwEj9doJ+AT07o1JNyUuYYMAnV:cNDQcdYEj/g07o1SUsnV
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_ja.properties.id-b4197730.[ms_13@aol.com].ms13 6.45 KB MD5: 17034824671b221654a131a1c3e8c188
SHA1: 3d06fd9258f0fe119bc5f520df9c6a48af21c53a
SHA256: 3e8cd51067fe96a293aefedacbb885877a2c9740cba0162ab29820e13bf43746
SSDeep: 192:7kXIB5EmGYd/BDDUur0wWwZvOAGSks6s36fqYEBV:7iM3dJDDUurzZ2ndjkt
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00092_.wmf.id-b4197730.[ms_13@aol.com].ms13 8.03 KB MD5: 44f015882ebce7ef5a1460b2103d38c0
SHA1: eb1a51281f296b475f1f075263b0545451491237
SHA256: 7fc7df959a1aaaaf756d4814226a121b7035c666ebeaeca4227bb605688d3923
SSDeep: 192:LECFv0WWx1w4s9KR9pmQpMYlKZgr0D+GS3V4Wd9u1pFS:L5mPOK5sDc3uW/u1pU
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_ko.properties.id-b4197730.[ms_13@aol.com].ms13 5.84 KB MD5: 8c5f959a83077f1b9e34d4a79e87bae7
SHA1: 20fb32cc1a9791fe1e519a26172da83b0c2dcd8f
SHA256: 289b618338e2c698e93f30728326b32642f85a9aedb9ea4ee6b783bb348aeeb7
SSDeep: 96:dZ//4IvEBFNBXT8dXed3CeJpdKUtUZI95MGGu6KZ07qqOkcwllhR5CH3uhIOU9sV:n34CKvXZBCoKGF5RGu637qxwljR+byV
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00100_.wmf.id-b4197730.[ms_13@aol.com].ms13 2.56 KB MD5: 23d93247b3b12d6e1ff8b7c756535b14
SHA1: 5ff44257052eecb3c816fe10a6ef63f08ef64641
SHA256: bf917e1700e007269554aa5912116614e6b1e681a25ded5e557f1488f0564054
SSDeep: 48:IC6en24TtFzbQgL6GGwvQUGp+N9y5lR584fl748YrDg2yQVhc6A0JSbkW87:QefT3zbQgO85XkHt7LYSQVokWe
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bl00526_.wmf.id-b4197730.[ms_13@aol.com].ms13 27.15 KB MD5: fd550648edc25d021d540bab5ca1ebb9
SHA1: 471a7d741ba8f98ecd179d40b5deaaa134fdda35
SHA256: 52f2bf8cdffd863259d79d0faeecbfff570e039e7c4270dfc329fc443bd9c635
SSDeep: 768:lkKoh42PES3TgEVXqQ8oTE3aseUvfM4EzXvp:JeES3cqHyfEz/p
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00136_.wmf.id-b4197730.[ms_13@aol.com].ms13 2.36 KB MD5: c452de552e6afcc671e85a3df69b7918
SHA1: 945333503d2afd8529cd250a5d8d771e33f1906c
SHA256: b96878dd993a52534171acc5c9106da0c83a77fd640cc73c3364e4a198cea237
SSDeep: 48:eJ/AVjkMrX8GKTklVfmV4uU7vUkm1JpUT0XJtP987:DjkMrXWw3fG48pUTmtP9e
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00174_.wmf.id-b4197730.[ms_13@aol.com].ms13 8.40 KB MD5: 55f7a0fca8f07d888db8743517f2a782
SHA1: efd84fb259da51dd891670fcd9929e9cb832406d
SHA256: a2e98c4fdf7864b8a014490598e06619cbe94b59ce715d7995da3f9816e7b531
SSDeep: 192:R5Us8dgteWcyZL3LyWP1UDUkxdBve88cCfWvzrUkbV7Yjiah02s:RD8dmeWcQLx1CJxl8ZSrrNY2aK
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00184_.wmf.id-b4197730.[ms_13@aol.com].ms13 5.11 KB MD5: 1245dc9d89a54c58b75e6227518d8ef1
SHA1: 1089d62a29ce6a9dfee344acd905b063845f6e56
SHA256: c80582de225049a9507413ce26b35d7560a8c7ef8831f03d4d19ddc0ef0bc747
SSDeep: 96:7FifSg4bp5STRDVkvVkj6nq+czeTx0hKbGGlMfo17xPQaWK3+G3zyLq+taOh/BXS:7Fifq5MUkun2eFjbJ1xPlWwinaO1GoC
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00145_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.92 KB MD5: 50d836aa6d0c73ff854c22396360734c
SHA1: 7ae5105162499e5188423013270201a28bdb967a
SHA256: fd5517939fb449cf3390c66c9c7c291857c271b06f0e619241076bb4a214d4d3
SSDeep: 48:Xconrx8dykaCN59qE97c5/UqJhFFJNk8Ywyq/8gpJbVLkTFK76fB87:XhtMZa+Ke7cNrbvYY8OJRLkTFKcBe
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_pt_br.properties.id-b4197730.[ms_13@aol.com].ms13 3.47 KB MD5: 4acc75f8f4f56c6c9b7cfcadfefa7bf8
SHA1: 87e06b439b84e8c03061e7eb5d57bbeed1065b0e
SHA256: 1b739a4a4d2cc4fc7506e37246f1c9dfd31ab228763068570cd0ff54bc0dd2d5
SSDeep: 96:g6Zi7Vr/Q8aeWdz1mWUyLOwqIv9FANNmgRLLl/NIctWz3:g6A10b9FAXmgRdNJWz3
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_zh_cn.properties.id-b4197730.[ms_13@aol.com].ms13 4.24 KB MD5: e03ea4129e54848cf9f97a8e2cf893a6
SHA1: e41e27d03afae4e020f54ea990de93ae564d1772
SHA256: 6a6228e74584e5adb6fa613230a50f32a4e241be6d545cec8ea52ebf0fa27964
SSDeep: 48:4mCV0StUss4W2J6ka5pGwHVZOa1QQx1lFZhmiDs7wmaMmPhwMs6rITi5effTmy7c:Q0Sjst4anvuIrpm6nkICMFITiKrmy7u3
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_zh_hk.properties.id-b4197730.[ms_13@aol.com].ms13 3.93 KB MD5: ed05e230012e78e5d9fe5916785e651c
SHA1: 244044aac291e50d183cf1ab8e62d32214887c56
SHA256: d80a98016634eb82153788def17f6430ec6a9e4cb51bb43d5c2a0e4233c924ae
SSDeep: 96:1pGquEEUignorMTOypv52XME29AllHCHQ63:1EquEraypB2XKLw63
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\deploy\messages_sv.properties.id-b4197730.[ms_13@aol.com].ms13 3.59 KB MD5: 4997818916b1a37f75908e8110dd9b11
SHA1: 7bf779a5e1f62b1d47c27d5f353e8fd74904e166
SHA256: 87304ee08a685c8d8499b78f3452978ded833aff192430b0921bfff0aaddb62c
SSDeep: 96:6Vp68XAWkNQw6MmE595A8X6UtxmoCa/WJ8c4OKLTn+n0RV:XlWiQweq5AIrtw5a/Wac4tTY0RV
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\ext\access-bridge-64.jar.id-b4197730.[ms_13@aol.com].ms13 183.87 KB MD5: 78105eb1bce0e619cb90f15eba922cb9
SHA1: 3efe3f52d1561d79e43c708eff7898db37386b80
SHA256: 5c5a05f2e993d5e1100fc68f763670d06f4eab212780c0a040226c4b61c78fcd
SSDeep: 3072:vlagHCpOJ/i9OOSkGnb0MqRSnCyZDf0FbiCr2rRvCjph05iZl6UFUF0eI1m/FM27:nCpfGq4jBsF3K1qj45inDed+2gtS
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\ext\dnsns.jar.id-b4197730.[ms_13@aol.com].ms13 8.32 KB MD5: 46a13ae36cdec65919792f1c648d0d6e
SHA1: e4a44712ce34e7435202a91be9042ccd219c2365
SHA256: ba5c446ab9c438df9f15b48fccfd727aa1d7ff2519d32c5bec8e92188d0c82a9
SSDeep: 192:dHxQysxZkTej8wRYzX/NZiBGBny6RHJPeVmjyeVX:jMxse/K/N8BGFyawmjx
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00135_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.26 KB MD5: 1aff66fc5b31e9b9d7c3f30ad6daff53
SHA1: 3c92f8c87be2180bfd05131dc099b27673fd1105
SHA256: 790c2f4be54564a70d2c110bca9eb203fbe2fc557105b14aad711d6991171af3
SSDeep: 24:8T3i1qFjCuX5L02phWPHUztIg7ID70Tz6oE0r03YKnlotlKIGh7:K3iUvJL06hiHUxIg7GOVr0IKlg87
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00200_.wmf.id-b4197730.[ms_13@aol.com].ms13 3.28 KB MD5: b2733f217f885f49c15462af43f9d742
SHA1: 895ea9a28b8812a293a583e2e0a4e001fcded86e
SHA256: 320fb6face8385d360753143eed936f73e2250b14c40dd49f2039fca7d47383a
SSDeep: 96:f5ZLmw6AufXr4J4qAVzQn/uXvwhRSy+uarkMe:f5ZLmwt4qAGtvS4arkT
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00186_.wmf.id-b4197730.[ms_13@aol.com].ms13 12.73 KB MD5: 122e9fd1b719d9dc3df8a9a5bc71d0a1
SHA1: 49d9bb1c2d872732de113f41680b9e14c18f1526
SHA256: 0105ed8d084b372f236adc861de3a8aebcf5c0ae4fd760b8c6ae67b12c1136e0
SSDeep: 384:Z23VuY6QsV+SnNpHJ6QC83mnLA18+RogGugClf:ZHY69N883mnLuog1gU
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\ext\meta-index.id-b4197730.[ms_13@aol.com].ms13 1.66 KB MD5: 0f987d7cc4563c28be100cc7c6e2e900
SHA1: 9708d35837b991c1fdbef829d5af344cd5060c18
SHA256: b5c1c4f9968b73dbcc2c5cf9009f7eead657068d7efd2ac2a51003215c016c02
SSDeep: 48:IWxxInlqVJKhs8QG8SIYQPRzQYP1XU3jfLt:r6AF53StQPRZ9X0ft
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00438_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.42 KB MD5: c4be54101e7a1d7d2c26e26a94115179
SHA1: f6983f6305cc4e88fae8039fbe68b86fcaa421b3
SHA256: 115b677f78aa67c3e9c845af5f22f1863f6fabd7be13e31a5e2a5fcb6864203b
SSDeep: 24:15WRor9T8C+6+sLAF71dn4p3l0cyMb0w0Wnf/LQCeJRAupIOMgHINcsbug7lKIG5:RX+BFbnQV0gsWnf/CJRzpIOo5HR87
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00440_.wmf.id-b4197730.[ms_13@aol.com].ms13 5.68 KB MD5: 7eea1ce5db6f95ec0c0b04d85520ce82
SHA1: a19c1f47d37f3bd333a96d45f3d5913bf821a911
SHA256: e78b92a34e9b797d021e777daf8ed4c6aab998c50ec1d82f084cf7beb886ddde
SSDeep: 96:Ws39DgGhXHkl3uH0OiknI4z46W9Kn3ehgyc03x7/agrlnR0p8S8QmOmrcIbwYW8O:W6fXHy3M0OiWZU6W9KnOSYFa0R0p8FIP
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00439_.wmf.id-b4197730.[ms_13@aol.com].ms13 2.25 KB MD5: cd015030c97169af2bd935912c9b767a
SHA1: 03115e0c4b7f1c18d6d1a872e72699a46cadea5b
SHA256: 438d263abd1ce51306970cb8e00503f68bfc3e3f7c2677976a934b17e270930a
SSDeep: 48:EUIrWBT6h6tobs5dZZ+RSjahBdS2uAqv2xMP58xDTWXKZjlSHnfwdaaF/87:E5rWBm8tBHqsaHd9uAa22uDTkCjwnfS8
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00441_.wmf.id-b4197730.[ms_13@aol.com].ms13 3.68 KB MD5: f99e652f56c625e20965139031fa7f03
SHA1: 91b511fb5d6b0d8e62b92114c9aa98289c6d6852
SHA256: a745f8f6d32ef7cd6b2f6ee404d6acf98d5ea539322afb239ee4eda415c3daa3
SSDeep: 96:o1vXVUapmsAW7yq4dUPLQuM8BixbnlTWbmu2dFZ3bMMEpe:o1iaplAWn4dUPkuzQnNAB2VTEw
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00442_.wmf.id-b4197730.[ms_13@aol.com].ms13 2.67 KB MD5: 81243353c3f7799269572c3fb5f3eae4
SHA1: a12d227e1f6b5840b67648fb1092c0bba2d5bc39
SHA256: c0b37ab4604aa96ac05f5c406fa24b863c5556bacd965db01dfcf6dec649cf86
SSDeep: 48:wU0NF45DEVPrNoD6iznAmcIg1Xzx6DvNOWreKCuJpTM6Rp1EWpY1L87:wUmKE926iTNXkFU1RrSuJpTeqY1Le
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\microsoft office\root\clipart\pub60cor\bs00224_.wmf.id-b4197730.[ms_13@aol.com].ms13 1.79 KB MD5: 6bb1d123e341f8460070271a39fadd8e
SHA1: 0f91525d67f0dbcfb696841989318216a9ad399e
SHA256: 2bece47e6e71000634522c51a0e9352a50faab28b0babc6955ecbe6356e5707b
SSDeep: 48:LEzZcHLG/B4Hk46e8ItKjSgf10JaX4jfTT87:LEzz+Hk4exX4jTTe
False
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\lib\ext\jaccess.jar.id-b4197730.[ms_13@aol.com].ms13 43.71 KB MD5: d9a83e600dec965517f60acedaef53ba
SHA1: f382b1384736f7fd20c287668fe5a3d4d271dc62
SHA256: 87d8367b2c89c1d00fa4eae37db64af4722a7c0cb38626f587106e5cd6315868
SSDeep: 768:xINO/opcKMZEWuTkZBL5TpK4gzBq2dSyOLoAHYVcjLvsY+car3PnzJcLSrwttiT1:xITcKUET4Zx5s4gtJBJFcH5Qn2LRttO1
False
Modified Files
»
Filename File Size Hash Values YARA Match Actions
c:\users\fd1hvy\appdata\local\virtualstore\program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[ms_13@aol.com].ms13 18.56 MB MD5: 71f75a5ac7b2683824657a393d2d7e1e
SHA1: ae932a82ab59db4875cf9129f277baab43ec05bb
SHA256: 4f8a407efe78ef761e70c4bca0d47b522a56892bfdbc9b951b7474e896394f17
SSDeep: 49152:QYvE9A5QyfuZAinzfF/X5Tyyd8DlTI6mtbk6Yf8fA/bPmcGJaSX31B:hx2WCQmc83
False
Host Behavior
File (3532)
»
Operation Filename Additional Information Success Count Logfile
Create C:\Windows\System32\chrome64.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 2
Fn
Create C:\WINDOWS\System32\chrome64.exe desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\FD1HVy\AppData\Roaming\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\Windows\System32\chrome64.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 2
Fn
Create C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe desired_access = GENERIC_WRITE False 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$WINRE_BACKUP_PARTITION.MARKER desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BCD.LOG desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\updaterevokesipolicy.p7b desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\updaterevokesipolicy.p7b desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\BCD desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\BCD.LOG1 desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BCD.LOG2 desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bg-BG\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bg-BG\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\bootspaces.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bootspaces.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\bootvhd.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bootvhd.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\cs-CZ\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\cs-CZ\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\kor_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\malgunn_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\malgunn_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\malgun_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\malgun_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\meiryon_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\meiryon_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\meiryo_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\meiryo_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\msjhn_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\msjhn_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\msjh_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\msyhn_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\msyh_boot.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Content.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-split.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-split.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\correct.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\correct.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\delete.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\delete.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\join.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\join.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Content.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ja-jp.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ja-jp.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-phonetic.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-phonetic.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipschs.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipschs.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipscsy.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipscsy.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\msyh_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\hiberfil.sys desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\pagefile.sys desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVCatalog.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVCatalog.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIntegration.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\bootmgr desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\Fonts\msyhn_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\Fonts\msjh_boot.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\InputPersonalization.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\InputPersonalization.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fr-CA\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\fr-CA\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\ado\msado25.tlb desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\msado25.tlb desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Internet Explorer\en-US\hmmapi.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Internet Explorer\en-US\hmmapi.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Internet Explorer\iediagcmd.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Internet Explorer\iediagcmd.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Internet Explorer\iexplore.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Internet Explorer\iexplore.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\classlist.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\currency.data desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\currency.data desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\currency.data.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jce.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jce.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jce.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\logging.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\logging.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\logging.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\management.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\management.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\management\management.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\meta-index desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\meta-index desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\meta-index.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\net.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\net.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\net.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\plugin.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\resources.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\rt.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\java.policy desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\java.policy desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\java.policy.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\java.security desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\java.security desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\java.security.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\trusted.libraries desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\sound.properties desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\tzmappings desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\tzmappings desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\tzmappings.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\sound.properties desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\sound.properties.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\LICENSE desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\LICENSE desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\LICENSE.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\release desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\release desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\release.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\elementaryeast.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\elementaryeast.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-file-l1-2-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-file-l1-2-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-file-l2-1-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-localization-l1-2-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-processthreads-l1-1-1.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-localization-l1-2-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-file-l2-1-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-processthreads-l1-1-1.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-synch-l1-2-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-synch-l1-2-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-timezone-l1-1-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-timezone-l1-1-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-xstate-l2-1-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-core-xstate-l2-1-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-crt-conio-l1-1-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-crt-conio-l1-1-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-crt-convert-l1-1-0.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\api-ms-win-crt-convert-l1-1-0.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\client\AppVDllSurrogate32.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\client\AppVDllSurrogate32.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JAVA_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JAVA_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JAVA_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JNGLE_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JNGLE_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JNGLE_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\MUSIC_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\MUSIC_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\MUSIC_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\NBOOK_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\NBOOK_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\NBOOK_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OCEAN_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OCEAN_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OCEAN_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OUTDR_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OUTDR_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OUTDR_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PAPER_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PAPER_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PAPER_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_02.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_02.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_02.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_03.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_03.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_03.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_04.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_04.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_04.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_05.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_05.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_05.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_06.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_06.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_06.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_07.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_07.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_07.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_09.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_09.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_09.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ROAD_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SAFRI_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SCHOL_02.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_08.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SAFRI_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SAFRI_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SHOW_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SCHOL_02.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SCHOL_02.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_08.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_08.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPACE_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPACE_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPACE_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPRNG_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPRNG_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPRNG_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SUMER_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SUMER_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SUMER_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SWEST_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SWEST_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SWEST_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ROAD_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ROAD_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\URBAN_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\URBAN_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\URBAN_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\VCTRN_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\VCTRN_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\VCTRN_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SHOW_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SHOW_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WNTER_01.MID desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WNTER_01.MID desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WNTER_01.MID.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Banded Edge.eftx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Banded Edge.eftx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Banded Edge.eftx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Extreme Shadow.eftx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Extreme Shadow.eftx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Extreme Shadow.eftx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glossy.eftx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1744 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5760 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.id-B4197730.[ms_13@aol.com].ms13 size = 3248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2656 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.id-B4197730.[ms_13@aol.com].ms13 size = 640 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.id-B4197730.[ms_13@aol.com].ms13 size = 160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.id-B4197730.[ms_13@aol.com].ms13 size = 1392 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.id-B4197730.[ms_13@aol.com].ms13 size = 51248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3792 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.id-B4197730.[ms_13@aol.com].ms13 size = 640 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13104 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 27056 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.id-B4197730.[ms_13@aol.com].ms13 size = 274480 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 1056 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 816 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar size = 1552 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.id-B4197730.[ms_13@aol.com].ms13 size = 4720 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 3152 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.id-B4197730.[ms_13@aol.com].ms13 size = 5552 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\classlist.id-B4197730.[ms_13@aol.com].ms13 size = 84368 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\classlist.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6272 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\currency.data.id-B4197730.[ms_13@aol.com].ms13 size = 4128 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\currency.data.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11504 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 19488 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3776 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.id-B4197730.[ms_13@aol.com].ms13 size = 2864 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3312 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties size = 29008 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3616 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3424 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1344 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1456 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.id-B4197730.[ms_13@aol.com].ms13 size = 6352 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.id-B4197730.[ms_13@aol.com].ms13 size = 5728 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2384 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 27568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8368 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4992 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1728 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3296 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.id-B4197730.[ms_13@aol.com].ms13 size = 4080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3760 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3760 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3424 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.id-B4197730.[ms_13@aol.com].ms13 size = 188032 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.id-B4197730.[ms_13@aol.com].ms13 size = 8288 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1056 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3120 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.id-B4197730.[ms_13@aol.com].ms13 size = 786690 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 1472 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1216 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5584 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2064 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3536 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar size = 1600 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1680 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 44528 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.id-B4197730.[ms_13@aol.com].ms13 size = 280176 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.id-B4197730.[ms_13@aol.com].ms13 size = 32704 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.id-B4197730.[ms_13@aol.com].ms13 size = 42192 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3936 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.id-B4197730.[ms_13@aol.com].ms13 size = 3776 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2736 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2448 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.id-B4197730.[ms_13@aol.com].ms13 size = 251328 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src.id-B4197730.[ms_13@aol.com].ms13 size = 10576 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.id-B4197730.[ms_13@aol.com].ms13 size = 68928 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 75152 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 75136 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 264 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 80864 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 344912 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 698240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 234080 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 317904 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1888 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF size = 13968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF size = 278 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 242704 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 266 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.id-B4197730.[ms_13@aol.com].ms13 size = 254 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.id-B4197730.[ms_13@aol.com].ms13 size = 1296 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.id-B4197730.[ms_13@aol.com].ms13 size = 248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties.id-B4197730.[ms_13@aol.com].ms13 size = 64 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties.id-B4197730.[ms_13@aol.com].ms13 size = 246 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jce.jar.id-B4197730.[ms_13@aol.com].ms13 size = 116448 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jce.jar.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc.id-B4197730.[ms_13@aol.com].ms13 size = 20112 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7184 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3504 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc.id-B4197730.[ms_13@aol.com].ms13 size = 20080 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10544 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2432 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.id-B4197730.[ms_13@aol.com].ms13 size = 33936 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar.id-B4197730.[ms_13@aol.com].ms13 size = 944176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 49552 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar.id-B4197730.[ms_13@aol.com].ms13 size = 560592 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 31136 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar.id-B4197730.[ms_13@aol.com].ms13 size = 584592 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 29632 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\logging.properties.id-B4197730.[ms_13@aol.com].ms13 size = 2464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\logging.properties.id-B4197730.[ms_13@aol.com].ms13 size = 248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access.id-B4197730.[ms_13@aol.com].ms13 size = 4000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2704 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2848 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 37984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.id-B4197730.[ms_13@aol.com].ms13 size = 384 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 2
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template.id-B4197730.[ms_13@aol.com].ms13 size = 800 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7840 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 40032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 43008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 720 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 42912 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template.id-B4197730.[ms_13@aol.com].ms13 size = 3392 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template.id-B4197730.[ms_13@aol.com].ms13 size = 246 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 2128 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 2864 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 266 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\net.properties.id-B4197730.[ms_13@aol.com].ms13 size = 4480 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\net.properties.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\plugin.jar size = 14640 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\plugin.jar size = 254 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.id-B4197730.[ms_13@aol.com].ms13 size = 10400 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist.id-B4197730.[ms_13@aol.com].ms13 size = 4064 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1936 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 24592 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts size = 1264 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts size = 246 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs size = 2800 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\java.policy.id-B4197730.[ms_13@aol.com].ms13 size = 2480 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\java.policy.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 20800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14832 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3696 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\java.security.id-B4197730.[ms_13@aol.com].ms13 size = 36528 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\java.security.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy.id-B4197730.[ms_13@aol.com].ms13 size = 112 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3632 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.id-B4197730.[ms_13@aol.com].ms13 size = 3536 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\tzmappings.id-B4197730.[ms_13@aol.com].ms13 size = 8416 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\tzmappings.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar size = 2144 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3648 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\sound.properties.id-B4197730.[ms_13@aol.com].ms13 size = 1216 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3600 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\sound.properties.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\LICENSE.id-B4197730.[ms_13@aol.com].ms13 size = 48 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\LICENSE.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\release.id-B4197730.[ms_13@aol.com].ms13 size = 544 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\release.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2096 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts.id-B4197730.[ms_13@aol.com].ms13 size = 114928 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2064 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2016 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2096 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF size = 3040 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF size = 252 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\client\api-ms-win-core-processthreads-l1-1-1.dll size = 2032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\client\api-ms-win-core-processthreads-l1-1-1.dll size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2096 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1456 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\client\api-ms-win-crt-convert-l1-1-0.dll size = 8576 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\client\api-ms-win-crt-convert-l1-1-0.dll size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1776 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 912 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2528 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF size = 2336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 592 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 19072 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4160 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 7392 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 10576 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 4848 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 12992 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1392 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13056 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 9328 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID.id-B4197730.[ms_13@aol.com].ms13 size = 9328 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2704 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 7568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6944 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12368 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2288 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 7184 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 752 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 8576 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17312 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 30256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 29216 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14208 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15872 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 18208 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JAVA_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 9808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JAVA_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\MUSIC_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6896 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\MUSIC_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\NBOOK_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 5984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\NBOOK_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OUTDR_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6656 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OUTDR_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PAPER_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PAPER_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8432 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 37392 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 46816 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7888 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JNGLE_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 5856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JNGLE_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 16400 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_04.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_04.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OCEAN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 5456 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OCEAN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_05.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_05.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2112 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_06.MID.id-B4197730.[ms_13@aol.com].ms13 size = 7776 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_06.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5104 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_07.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6576 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_07.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_02.MID.id-B4197730.[ms_13@aol.com].ms13 size = 5728 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_02.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10832 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_09.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_09.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID size = 8544 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID.id-B4197730.[ms_13@aol.com].ms13 size = 5408 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8928 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17408 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1488 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SAFRI_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 10128 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SAFRI_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_08.MID.id-B4197730.[ms_13@aol.com].ms13 size = 7360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_08.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SCHOL_02.MID.id-B4197730.[ms_13@aol.com].ms13 size = 5072 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SCHOL_02.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPACE_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 4224 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPACE_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPRNG_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6704 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPRNG_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SUMER_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 14048 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SUMER_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ROAD_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 5984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ROAD_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\URBAN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 13360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\URBAN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\VCTRN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 4976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\VCTRN_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SHOW_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6400 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SHOW_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 912 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WNTER_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 6928 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WNTER_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SWEST_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 8512 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SWEST_01.MID.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4640 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 42720 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 334144 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 248 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glossy.eftx size = 340224 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glossy.eftx size = 250 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4992 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 54352 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Grunge Texture.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 352784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Grunge Texture.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF size = 335040 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Banded Edge.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 47856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Banded Edge.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Inset.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 44976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Inset.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 30416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Office 2007 - 2010.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 45232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Office 2007 - 2010.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Milk Glass.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 46416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Milk Glass.eftx.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10320 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 65 True 1
Fn
Data
For performance reasons, the remaining 2517 entries are omitted.
The remaining entries can be found in glog.xml.
Registry (10)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 2
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Startup, data = 83, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Write Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run value_name = chrome64.exe, data = 5411136, size = 88, type = REG_SZ False 1
Fn
Write Value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run value_name = chrome64.exe, data = C:\Users\FD1HVy\AppData\Roaming\chrome64.exe, size = 88, type = REG_SZ True 1
Fn
Process (995)
»
Operation Process Additional Information Success Count Logfile
Create C:\WINDOWS\system32\cmd.exe os_pid = 0xd50, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
Create C:\Windows\System32\chrome64.exe show_window = SW_SHOWNORMAL True 1
Fn
Create C:\WINDOWS\system32\cmd.exe os_pid = 0xfec, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
Enumerate Processes - - True 969
Fn
Enumerate Processes - - False 23
Fn
Module (164)
»
Operation Module Additional Information Success Count Logfile
Load kernel32.dll base_address = 0x74830000 True 1
Fn
Load advapi32.dll base_address = 0x75270000 True 1
Fn
Load user32.dll base_address = 0x74620000 True 1
Fn
Load Shell32.dll base_address = 0x76410000 True 1
Fn
Load ntdll.dll base_address = 0x77850000 True 1
Fn
Load mpr.dll base_address = 0x74250000 True 1
Fn
Load ws2_32.dll base_address = 0x752f0000 True 1
Fn
Get Handle c:\windows\syswow64\kernel32.dll base_address = 0x74830000 True 30
Fn
Get Filename - process_name = c:\windows\system32\chrome64.exe, file_name_orig = C:\Windows\System32\chrome64.exe, size = 32767 True 4
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcAddress, address_out = 0x748451b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleHandleW, address_out = 0x748450d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindNextFileW, address_out = 0x7489ee40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindClose, address_out = 0x7489ed70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = MoveFileW, address_out = 0x7487e500 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileSizeEx, address_out = 0x7489ef40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleFileNameW, address_out = 0x74845090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileAttributesW, address_out = 0x7489ef10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExitProcess, address_out = 0x74843cb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCommandLineW, address_out = 0x74844cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameW, address_out = 0x748732c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameA, address_out = 0x74873780 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateMutexW, address_out = 0x7489eb70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenW, address_out = 0x74846c70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenA, address_out = 0x74846c50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcess, address_out = 0x7489ea10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForSingleObject, address_out = 0x7489eca0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLogicalDrives, address_out = 0x74840d20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetTickCount, address_out = 0x7489dd50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteFileW, address_out = 0x7489ed40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WideCharToMultiByte, address_out = 0x74846b10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeCriticalSectionAndSpinCount, address_out = 0x7489ebb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Sleep, address_out = 0x74846760 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LeaveCriticalSection, address_out = 0x7789b250 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReadFile, address_out = 0x7489f090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateFileW, address_out = 0x7489ed10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenMutexW, address_out = 0x7489ebf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = EnterCriticalSection, address_out = 0x7789b2d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForMultipleObjects, address_out = 0x7489ec80 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiW, address_out = 0x74846bf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiA, address_out = 0x74846bd0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteCriticalSection, address_out = 0x7787fb90 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReleaseMutex, address_out = 0x7489ec20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseHandle, address_out = 0x7489eab0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVersion, address_out = 0x748456c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThread, address_out = 0x748446b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExpandEnvironmentStringsW, address_out = 0x74844a40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceCounter, address_out = 0x74845da0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceFrequency, address_out = 0x74845dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcessId, address_out = 0x7489ea20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFileAttributesW, address_out = 0x7489f100 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVolumeInformationW, address_out = 0x7489f020 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WriteFile, address_out = 0x7489f180 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFilePointerEx, address_out = 0x7489f130 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetEndOfFile, address_out = 0x7489f0e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindFirstFileW, address_out = 0x7489edf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcessHeap, address_out = 0x748451f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapReAlloc, address_out = 0x7788f630 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapAlloc, address_out = 0x77892dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapFree, address_out = 0x748457f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreatePipe, address_out = 0x74844590 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetHandleInformation, address_out = 0x7489eae0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateProcessW, address_out = 0x74844610 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringW, address_out = 0x74844430 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringA, address_out = 0x74844410 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenProcess, address_out = 0x74845cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = TerminateProcess, address_out = 0x748467e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetSystemTime, address_out = 0x748454e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SystemTimeToFileTime, address_out = 0x748467a0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLastError, address_out = 0x74845010 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateToolhelp32Snapshot, address_out = 0x7487edc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32NextW, address_out = 0x7487f8f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32FirstW, address_out = 0x7487f750 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegOpenKeyExW, address_out = 0x7528e580 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegQueryValueExW, address_out = 0x7528e5a0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegSetValueExW, address_out = 0x7528f530 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegCloseKey, address_out = 0x7528ed60 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenProcessToken, address_out = 0x7528efb0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = GetTokenInformation, address_out = 0x7528ee90 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenSCManagerW, address_out = 0x75290540 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenServiceW, address_out = 0x7528fa20 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = CloseServiceHandle, address_out = 0x7528fc00 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = ControlService, address_out = 0x752a26d0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = QueryServiceStatus, address_out = 0x75292380 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumDependentServicesW, address_out = 0x752a2f70 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumServicesStatusExW, address_out = 0x7528fc80 True 1
Fn
Get Address c:\windows\syswow64\user32.dll function = SystemParametersInfoW, address_out = 0x7464f210 True 1
Fn
Get Address c:\windows\syswow64\shell32.dll function = ShellExecuteExW, address_out = 0x76574730 True 1
Fn
Get Address c:\windows\syswow64\ntdll.dll function = NtQuerySystemInformation, address_out = 0x778c2070 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetCloseEnum, address_out = 0x74252640 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetOpenEnumW, address_out = 0x74252790 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetEnumResourceW, address_out = 0x74252410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = WSAStartup, address_out = 0x752f5b40 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = socket, address_out = 0x75304510 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = send, address_out = 0x752f5030 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = recv, address_out = 0x75300c50 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = connect, address_out = 0x752f5410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = closesocket, address_out = 0x75300910 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = gethostbyname, address_out = 0x75326cb0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = inet_addr, address_out = 0x75309160 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = ntohl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htonl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htons, address_out = 0x75308ff0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Wow64DisableWow64FsRedirection, address_out = 0x74846b30 True 30
Fn
Service (72)
»
Operation Additional Information Success Count Logfile
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System (319)
»
Operation Additional Information Success Count Logfile
Get Computer Name result_out = NQDPDE True 1
Fn
Sleep duration = -1 (infinite) True 3
Fn
Sleep duration = 500 milliseconds (0.500 seconds) True 24
Fn
Sleep duration = 100 milliseconds (0.100 seconds) True 62
Fn
Get Time type = Performance Ctr, time = 11003483885 True 1
Fn
Get Time type = Ticks, time = 110000 True 3
Fn
Get Time type = Ticks, time = 110640 True 1
Fn
Get Time type = Ticks, time = 110843 True 1
Fn
Get Time type = Ticks, time = 110968 True 1
Fn
Get Time type = Ticks, time = 111031 True 1
Fn
Get Time type = Ticks, time = 111203 True 1
Fn
Get Time type = Ticks, time = 111531 True 1
Fn
Get Time type = Ticks, time = 111640 True 1
Fn
Get Time type = Ticks, time = 111765 True 2
Fn
Get Time type = Ticks, time = 111968 True 1
Fn
Get Time type = Ticks, time = 112046 True 1
Fn
Get Time type = Ticks, time = 112390 True 2
Fn
Get Time type = Ticks, time = 112437 True 1
Fn
Get Time type = Ticks, time = 112546 True 1
Fn
Get Time type = Ticks, time = 112593 True 1
Fn
Get Time type = Ticks, time = 112656 True 1
Fn
Get Time type = Ticks, time = 112718 True 1
Fn
Get Time type = Ticks, time = 112765 True 1
Fn
Get Time type = Ticks, time = 112828 True 2
Fn
Get Time type = Ticks, time = 112890 True 1
Fn
Get Time type = Ticks, time = 113046 True 1
Fn
Get Time type = Ticks, time = 113203 True 1
Fn
Get Time type = Ticks, time = 113296 True 1
Fn
Get Time type = Ticks, time = 113750 True 3
Fn
Get Time type = Ticks, time = 113875 True 3
Fn
Get Time type = Ticks, time = 114000 True 2
Fn
Get Time type = Ticks, time = 114406 True 2
Fn
Get Time type = Ticks, time = 114671 True 2
Fn
Get Time type = Ticks, time = 115140 True 4
Fn
Get Time type = Ticks, time = 115437 True 2
Fn
Get Time type = Ticks, time = 115750 True 2
Fn
Get Time type = Ticks, time = 116359 True 4
Fn
Get Time type = Ticks, time = 116734 True 2
Fn
Get Time type = Ticks, time = 117000 True 2
Fn
Get Time type = Ticks, time = 117390 True 4
Fn
Get Time type = Ticks, time = 117703 True 2
Fn
Get Time type = Ticks, time = 117812 True 2
Fn
Get Time type = Ticks, time = 117984 True 2
Fn
Get Time type = Ticks, time = 118171 True 1
Fn
Get Time type = Ticks, time = 118187 True 1
Fn
Get Time type = Ticks, time = 118484 True 2
Fn
Get Time type = Ticks, time = 118515 True 2
Fn
Get Time type = Ticks, time = 118671 True 2
Fn
Get Time type = Ticks, time = 118859 True 2
Fn
Get Time type = Ticks, time = 119062 True 2
Fn
Get Time type = Ticks, time = 119281 True 1
Fn
Get Time type = Ticks, time = 119296 True 1
Fn
Get Time type = Ticks, time = 119578 True 2
Fn
Get Time type = Ticks, time = 119609 True 2
Fn
Get Time type = Ticks, time = 119937 True 2
Fn
Get Time type = Ticks, time = 120187 True 2
Fn
Get Time type = Ticks, time = 120421 True 2
Fn
Get Time type = Ticks, time = 120562 True 2
Fn
Get Time type = Ticks, time = 120718 True 4
Fn
Get Time type = Ticks, time = 120859 True 2
Fn
Get Time type = Ticks, time = 120968 True 2
Fn
Get Time type = Ticks, time = 121093 True 2
Fn
Get Time type = Ticks, time = 121234 True 2
Fn
Get Time type = Ticks, time = 121359 True 2
Fn
Get Time type = Ticks, time = 121484 True 2
Fn
Get Time type = Ticks, time = 121796 True 4
Fn
Get Time type = Ticks, time = 121984 True 2
Fn
Get Time type = Ticks, time = 122125 True 2
Fn
Get Time type = Ticks, time = 122578 True 2
Fn
Get Time type = Ticks, time = 123046 True 4
Fn
Get Time type = Ticks, time = 123765 True 2
Fn
Get Time type = Ticks, time = 125359 True 4
Fn
Get Time type = Ticks, time = 125468 True 2
Fn
Get Time type = Ticks, time = 125578 True 2
Fn
Get Time type = Ticks, time = 125687 True 2
Fn
Get Time type = Ticks, time = 125796 True 2
Fn
Get Time type = Ticks, time = 126031 True 2
Fn
Get Time type = Ticks, time = 126656 True 4
Fn
Get Time type = Ticks, time = 127015 True 2
Fn
Get Time type = Ticks, time = 127437 True 2
Fn
Get Time type = Ticks, time = 127671 True 4
Fn
Get Time type = Ticks, time = 127906 True 2
Fn
Get Time type = Ticks, time = 128203 True 2
Fn
Get Time type = Ticks, time = 128578 True 2
Fn
Get Time type = Ticks, time = 128734 True 2
Fn
Get Time type = Ticks, time = 128812 True 2
Fn
Get Time type = Ticks, time = 129312 True 1
Fn
Get Time type = Ticks, time = 129328 True 1
Fn
Get Time type = Ticks, time = 129953 True 4
Fn
Get Time type = Ticks, time = 130156 True 2
Fn
Get Time type = Ticks, time = 130312 True 2
Fn
Get Time type = Ticks, time = 131000 True 4
Fn
Get Time type = Ticks, time = 131312 True 2
Fn
Get Time type = Ticks, time = 131812 True 2
Fn
Get Time type = Ticks, time = 131984 True 2
Fn
Get Time type = Ticks, time = 132250 True 4
Fn
Get Time type = Ticks, time = 132515 True 2
Fn
Get Time type = Ticks, time = 132640 True 2
Fn
Get Time type = Ticks, time = 132984 True 2
Fn
Get Time type = Ticks, time = 133515 True 4
Fn
Get Time type = Ticks, time = 133875 True 2
Fn
Get Time type = Ticks, time = 134359 True 2
Fn
Get Time type = Ticks, time = 134671 True 4
Fn
Get Time type = Ticks, time = 134796 True 2
Fn
Get Time type = Ticks, time = 135000 True 2
Fn
Get Time type = Ticks, time = 135250 True 2
Fn
Get Time type = Ticks, time = 135421 True 2
Fn
Get Time type = Ticks, time = 135578 True 2
Fn
Get Time type = Ticks, time = 135828 True 4
Fn
Get Time type = Ticks, time = 136046 True 2
Fn
Get Time type = Ticks, time = 136265 True 2
Fn
Get Time type = Ticks, time = 136375 True 2
Fn
Get Time type = Ticks, time = 136562 True 2
Fn
Get Time type = Ticks, time = 136750 True 2
Fn
Get Info type = Operating System True 2
Fn
Mutex (6)
»
Operation Additional Information Success Count Logfile
Create mutex_name = Global\syncronize_6129M1A True 1
Fn
Create mutex_name = Global\syncronize_6129M1U True 1
Fn
Open mutex_name = Global\syncronize_6129M1A, desired_access = SYNCHRONIZE False 1
Fn
Open mutex_name = Global\syncronize_6129M1U, desired_access = SYNCHRONIZE False 1
Fn
Release mutex_name = Global\syncronize_6129M1A True 2
Fn
Process #7: chrome64.exe
111 0
»
Information Value
ID #7
File Name c:\programdata\microsoft\windows\start menu\programs\startup\chrome64.exe
Command Line "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe"
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:00, Reason: Autostart
Unmonitor End Time: 00:04:03, Reason: Self Terminated
Monitor Duration 00:00:02
OS Process Information
»
Information Value
PID 0xd28
Parent PID 0xa64 (c:\windows\explorer.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level Medium
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeCreateGlobalPrivilege
Thread IDs
0x D2C
0x D30
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
chrome64.exe 0x00400000 0x00418FFF Process Termination - 32-bit - False
Host Behavior
Module (100)
»
Operation Module Additional Information Success Count Logfile
Load kernel32.dll base_address = 0x74830000 True 1
Fn
Load advapi32.dll base_address = 0x75270000 True 1
Fn
Load user32.dll base_address = 0x74620000 True 1
Fn
Load Shell32.dll base_address = 0x76410000 True 1
Fn
Load ntdll.dll base_address = 0x77850000 True 1
Fn
Load mpr.dll base_address = 0x74250000 True 1
Fn
Load ws2_32.dll base_address = 0x752f0000 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcAddress, address_out = 0x748451b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleHandleW, address_out = 0x748450d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindNextFileW, address_out = 0x7489ee40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindClose, address_out = 0x7489ed70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = MoveFileW, address_out = 0x7487e500 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileSizeEx, address_out = 0x7489ef40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleFileNameW, address_out = 0x74845090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileAttributesW, address_out = 0x7489ef10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExitProcess, address_out = 0x74843cb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCommandLineW, address_out = 0x74844cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameW, address_out = 0x748732c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameA, address_out = 0x74873780 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateMutexW, address_out = 0x7489eb70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenW, address_out = 0x74846c70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenA, address_out = 0x74846c50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcess, address_out = 0x7489ea10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForSingleObject, address_out = 0x7489eca0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLogicalDrives, address_out = 0x74840d20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetTickCount, address_out = 0x7489dd50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteFileW, address_out = 0x7489ed40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WideCharToMultiByte, address_out = 0x74846b10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeCriticalSectionAndSpinCount, address_out = 0x7489ebb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Sleep, address_out = 0x74846760 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LeaveCriticalSection, address_out = 0x7789b250 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReadFile, address_out = 0x7489f090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateFileW, address_out = 0x7489ed10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenMutexW, address_out = 0x7489ebf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = EnterCriticalSection, address_out = 0x7789b2d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForMultipleObjects, address_out = 0x7489ec80 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiW, address_out = 0x74846bf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiA, address_out = 0x74846bd0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteCriticalSection, address_out = 0x7787fb90 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReleaseMutex, address_out = 0x7489ec20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseHandle, address_out = 0x7489eab0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVersion, address_out = 0x748456c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThread, address_out = 0x748446b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExpandEnvironmentStringsW, address_out = 0x74844a40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceCounter, address_out = 0x74845da0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceFrequency, address_out = 0x74845dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcessId, address_out = 0x7489ea20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFileAttributesW, address_out = 0x7489f100 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVolumeInformationW, address_out = 0x7489f020 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WriteFile, address_out = 0x7489f180 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFilePointerEx, address_out = 0x7489f130 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetEndOfFile, address_out = 0x7489f0e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindFirstFileW, address_out = 0x7489edf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcessHeap, address_out = 0x748451f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapReAlloc, address_out = 0x7788f630 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapAlloc, address_out = 0x77892dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapFree, address_out = 0x748457f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreatePipe, address_out = 0x74844590 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetHandleInformation, address_out = 0x7489eae0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateProcessW, address_out = 0x74844610 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringW, address_out = 0x74844430 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringA, address_out = 0x74844410 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenProcess, address_out = 0x74845cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = TerminateProcess, address_out = 0x748467e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetSystemTime, address_out = 0x748454e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SystemTimeToFileTime, address_out = 0x748467a0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLastError, address_out = 0x74845010 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateToolhelp32Snapshot, address_out = 0x7487edc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32NextW, address_out = 0x7487f8f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32FirstW, address_out = 0x7487f750 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegOpenKeyExW, address_out = 0x7528e580 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegQueryValueExW, address_out = 0x7528e5a0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegSetValueExW, address_out = 0x7528f530 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegCloseKey, address_out = 0x7528ed60 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenProcessToken, address_out = 0x7528efb0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = GetTokenInformation, address_out = 0x7528ee90 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenSCManagerW, address_out = 0x75290540 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenServiceW, address_out = 0x7528fa20 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = CloseServiceHandle, address_out = 0x7528fc00 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = ControlService, address_out = 0x752a26d0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = QueryServiceStatus, address_out = 0x75292380 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumDependentServicesW, address_out = 0x752a2f70 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumServicesStatusExW, address_out = 0x7528fc80 True 1
Fn
Get Address c:\windows\syswow64\user32.dll function = SystemParametersInfoW, address_out = 0x7464f210 True 1
Fn
Get Address c:\windows\syswow64\shell32.dll function = ShellExecuteExW, address_out = 0x76574730 True 1
Fn
Get Address c:\windows\syswow64\ntdll.dll function = NtQuerySystemInformation, address_out = 0x778c2070 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetCloseEnum, address_out = 0x74252640 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetOpenEnumW, address_out = 0x74252790 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetEnumResourceW, address_out = 0x74252410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = WSAStartup, address_out = 0x752f5b40 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = socket, address_out = 0x75304510 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = send, address_out = 0x752f5030 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = recv, address_out = 0x75300c50 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = connect, address_out = 0x752f5410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = closesocket, address_out = 0x75300910 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = gethostbyname, address_out = 0x75326cb0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = inet_addr, address_out = 0x75309160 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = ntohl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htonl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htons, address_out = 0x75308ff0 True 1
Fn
System (6)
»
Operation Additional Information Success Count Logfile
Get Time type = Performance Ctr, time = 11005831795 True 1
Fn
Get Time type = Ticks, time = 110015 True 3
Fn
Get Info type = Operating System True 2
Fn
Mutex (2)
»
Operation Additional Information Success Count Logfile
Open mutex_name = Global\syncronize_6129M1A, desired_access = SYNCHRONIZE True 1
Fn
Open mutex_name = Global\syncronize_6129M1U, desired_access = SYNCHRONIZE True 1
Fn
Process #8: chrome64.exe
111 0
»
Information Value
ID #8
File Name c:\users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\chrome64.exe
Command Line "C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe"
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:01, Reason: Autostart
Unmonitor End Time: 00:04:03, Reason: Self Terminated
Monitor Duration 00:00:02
OS Process Information
»
Information Value
PID 0xd34
Parent PID 0xa64 (c:\windows\explorer.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level Medium
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeCreateGlobalPrivilege
Thread IDs
0x D38
0x D3C
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
chrome64.exe 0x00400000 0x00418FFF Process Termination - 32-bit - False
Host Behavior
Module (100)
»
Operation Module Additional Information Success Count Logfile
Load kernel32.dll base_address = 0x74830000 True 1
Fn
Load advapi32.dll base_address = 0x75270000 True 1
Fn
Load user32.dll base_address = 0x74620000 True 1
Fn
Load Shell32.dll base_address = 0x76410000 True 1
Fn
Load ntdll.dll base_address = 0x77850000 True 1
Fn
Load mpr.dll base_address = 0x74250000 True 1
Fn
Load ws2_32.dll base_address = 0x752f0000 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcAddress, address_out = 0x748451b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleHandleW, address_out = 0x748450d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindNextFileW, address_out = 0x7489ee40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindClose, address_out = 0x7489ed70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = MoveFileW, address_out = 0x7487e500 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileSizeEx, address_out = 0x7489ef40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleFileNameW, address_out = 0x74845090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileAttributesW, address_out = 0x7489ef10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExitProcess, address_out = 0x74843cb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCommandLineW, address_out = 0x74844cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameW, address_out = 0x748732c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameA, address_out = 0x74873780 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateMutexW, address_out = 0x7489eb70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenW, address_out = 0x74846c70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenA, address_out = 0x74846c50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcess, address_out = 0x7489ea10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForSingleObject, address_out = 0x7489eca0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLogicalDrives, address_out = 0x74840d20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetTickCount, address_out = 0x7489dd50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteFileW, address_out = 0x7489ed40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WideCharToMultiByte, address_out = 0x74846b10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeCriticalSectionAndSpinCount, address_out = 0x7489ebb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Sleep, address_out = 0x74846760 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LeaveCriticalSection, address_out = 0x7789b250 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReadFile, address_out = 0x7489f090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateFileW, address_out = 0x7489ed10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenMutexW, address_out = 0x7489ebf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = EnterCriticalSection, address_out = 0x7789b2d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForMultipleObjects, address_out = 0x7489ec80 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiW, address_out = 0x74846bf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiA, address_out = 0x74846bd0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteCriticalSection, address_out = 0x7787fb90 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReleaseMutex, address_out = 0x7489ec20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseHandle, address_out = 0x7489eab0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVersion, address_out = 0x748456c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThread, address_out = 0x748446b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExpandEnvironmentStringsW, address_out = 0x74844a40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceCounter, address_out = 0x74845da0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceFrequency, address_out = 0x74845dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcessId, address_out = 0x7489ea20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFileAttributesW, address_out = 0x7489f100 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVolumeInformationW, address_out = 0x7489f020 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WriteFile, address_out = 0x7489f180 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFilePointerEx, address_out = 0x7489f130 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetEndOfFile, address_out = 0x7489f0e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindFirstFileW, address_out = 0x7489edf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcessHeap, address_out = 0x748451f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapReAlloc, address_out = 0x7788f630 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapAlloc, address_out = 0x77892dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapFree, address_out = 0x748457f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreatePipe, address_out = 0x74844590 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetHandleInformation, address_out = 0x7489eae0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateProcessW, address_out = 0x74844610 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringW, address_out = 0x74844430 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringA, address_out = 0x74844410 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenProcess, address_out = 0x74845cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = TerminateProcess, address_out = 0x748467e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetSystemTime, address_out = 0x748454e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SystemTimeToFileTime, address_out = 0x748467a0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLastError, address_out = 0x74845010 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateToolhelp32Snapshot, address_out = 0x7487edc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32NextW, address_out = 0x7487f8f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32FirstW, address_out = 0x7487f750 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegOpenKeyExW, address_out = 0x7528e580 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegQueryValueExW, address_out = 0x7528e5a0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegSetValueExW, address_out = 0x7528f530 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegCloseKey, address_out = 0x7528ed60 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenProcessToken, address_out = 0x7528efb0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = GetTokenInformation, address_out = 0x7528ee90 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenSCManagerW, address_out = 0x75290540 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenServiceW, address_out = 0x7528fa20 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = CloseServiceHandle, address_out = 0x7528fc00 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = ControlService, address_out = 0x752a26d0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = QueryServiceStatus, address_out = 0x75292380 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumDependentServicesW, address_out = 0x752a2f70 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumServicesStatusExW, address_out = 0x7528fc80 True 1
Fn
Get Address c:\windows\syswow64\user32.dll function = SystemParametersInfoW, address_out = 0x7464f210 True 1
Fn
Get Address c:\windows\syswow64\shell32.dll function = ShellExecuteExW, address_out = 0x76574730 True 1
Fn
Get Address c:\windows\syswow64\ntdll.dll function = NtQuerySystemInformation, address_out = 0x778c2070 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetCloseEnum, address_out = 0x74252640 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetOpenEnumW, address_out = 0x74252790 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetEnumResourceW, address_out = 0x74252410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = WSAStartup, address_out = 0x752f5b40 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = socket, address_out = 0x75304510 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = send, address_out = 0x752f5030 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = recv, address_out = 0x75300c50 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = connect, address_out = 0x752f5410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = closesocket, address_out = 0x75300910 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = gethostbyname, address_out = 0x75326cb0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = inet_addr, address_out = 0x75309160 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = ntohl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htonl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htons, address_out = 0x75308ff0 True 1
Fn
System (6)
»
Operation Additional Information Success Count Logfile
Get Time type = Performance Ctr, time = 11007027801 True 1
Fn
Get Time type = Ticks, time = 110031 True 1
Fn
Get Time type = Ticks, time = 110046 True 2
Fn
Get Info type = Operating System True 2
Fn
Mutex (2)
»
Operation Additional Information Success Count Logfile
Open mutex_name = Global\syncronize_6129M1A, desired_access = SYNCHRONIZE True 1
Fn
Open mutex_name = Global\syncronize_6129M1U, desired_access = SYNCHRONIZE True 1
Fn
Process #9: cmd.exe
284 0
»
Information Value
ID #9
File Name c:\windows\system32\cmd.exe
Command Line "C:\WINDOWS\system32\cmd.exe"
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:03, Reason: Child Process
Unmonitor End Time: 00:04:22, Reason: Self Terminated
Monitor Duration 00:00:19
OS Process Information
»
Information Value
PID 0xd50
Parent PID 0xd10 (c:\windows\system32\chrome64.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level Medium
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeCreateGlobalPrivilege
Thread IDs
0x D54
0x DBC
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
cmd.exe 0x7FF7B95A0000 0x7FF7B9602FFF Process Termination - 64-bit - False
Host Behavior
File (218)
»
Operation Filename Additional Information Success Count Logfile
Get Info C:\WINDOWS\system32 type = file_attributes True 1
Fn
Get Info C:\Windows\System32 type = file_attributes True 1
Fn
Get Info STD_OUTPUT_HANDLE type = file_type True 14
Fn
Get Info STD_INPUT_HANDLE type = file_type True 7
Fn
Open STD_OUTPUT_HANDLE - True 36
Fn
Open STD_INPUT_HANDLE - True 81
Fn
Read STD_INPUT_HANDLE size = 1, size_out = 1 True 65
Fn
Data
Write STD_OUTPUT_HANDLE size = 38 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 2 True 5
Fn
Data
Write STD_OUTPUT_HANDLE size = 52 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 20 True 3
Fn
Data
Write STD_OUTPUT_HANDLE size = 24 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 36 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 5 True 1
Fn
Data
Registry (17)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System - False 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Command Processor - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 4, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Process (4)
»
Operation Process Additional Information Success Count Logfile
Create C:\WINDOWS\system32\mode.com os_pid = 0xdd4, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Create C:\WINDOWS\system32\vssadmin.exe os_pid = 0xe54, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Get Info C:\WINDOWS\system32\mode.com type = PROCESS_BASIC_INFORMATION True 1
Fn
Get Info C:\WINDOWS\system32\vssadmin.exe type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory (2)
»
Operation Process Additional Information Success Count Logfile
Read C:\WINDOWS\system32\mode.com address = 274741522432, size = 1952 True 1
Fn
Data
Read C:\WINDOWS\system32\vssadmin.exe address = 136921423872, size = 1952 True 1
Fn
Data
Module (10)
»
Operation Module Additional Information Success Count Logfile
Load NTDLL.DLL base_address = 0x7ff97dfb0000 True 1
Fn
Get Handle c:\windows\system32\cmd.exe base_address = 0x7ff7b95a0000 True 1
Fn
Get Handle c:\windows\system32\kernel32.dll base_address = 0x7ff97bba0000 True 2
Fn
Get Filename - process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\WINDOWS\system32\cmd.exe, size = 32743 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetThreadUILanguage, address_out = 0x7ff97bbba990 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CopyFileExW, address_out = 0x7ff97bbbe830 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = IsDebuggerPresent, address_out = 0x7ff97bbbe300 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetConsoleInputExeNameW, address_out = 0x7ff97a530a40 True 1
Fn
Get Address c:\windows\system32\ntdll.dll function = NtQueryInformationProcess, address_out = 0x7ff97e0556b0 True 1
Fn
System (1)
»
Operation Additional Information Success Count Logfile
Get Info type = Operating System True 1
Fn
Environment (30)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 10
Fn
Data
Get Environment String name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps; True 3
Fn
Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 3
Fn
Get Environment String name = PROMPT False 1
Fn
Get Environment String name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe True 1
Fn
Get Environment String name = KEYS False 1
Fn
Get Environment String name = PROMPT, result_out = $P$G True 3
Fn
Set Environment String name = PROMPT, value = $P$G True 1
Fn
Set Environment String name = =C:, value = C:\Windows\System32 True 1
Fn
Set Environment String name = COPYCMD True 2
Fn
Set Environment String name = =ExitCode, value = 00000000 True 1
Fn
Set Environment String name = =ExitCodeAscii True 2
Fn
Set Environment String name = =ExitCode, value = 00000002 True 1
Fn
Process #12: mode.com
0 0
»
Information Value
ID #12
File Name c:\windows\system32\mode.com
Command Line mode con cp select=1251
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:10, Reason: Child Process
Unmonitor End Time: 00:04:15, Reason: Self Terminated
Monitor Duration 00:00:04
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0xdd4
Parent PID 0xd50 (c:\windows\system32\cmd.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level Medium
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeCreateGlobalPrivilege
Thread IDs
0x DD8
0x DDC
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
mode.com 0x7FF7ABE90000 0x7FF7ABE9BFFF Process Termination - 64-bit - False
Process #13: vssadmin.exe
0 0
»
Information Value
ID #13
File Name c:\windows\system32\vssadmin.exe
Command Line vssadmin delete shadows /all /quiet
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:14, Reason: Child Process
Unmonitor End Time: 00:04:21, Reason: Self Terminated
Monitor Duration 00:00:06
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0xe54
Parent PID 0xd50 (c:\windows\system32\cmd.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level Medium
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeCreateGlobalPrivilege
Thread IDs
0x E58
0x E5C
0x E60
0x E6C
0x E70
0x E74
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
vssadmin.exe 0x7FF667F00000 0x7FF667F26FFF Process Termination - 64-bit - False
Process #14: chrome64.exe
37827 0
»
Information Value
ID #14
File Name c:\windows\system32\chrome64.exe
Command Line "C:\Windows\System32\chrome64.exe" -a
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:27, Reason: Child Process
Unmonitor End Time: 00:04:54, Reason: Terminated by Timeout
Monitor Duration 00:00:26
OS Process Information
»
Information Value
PID 0xf74
Parent PID 0xd10 (c:\windows\system32\chrome64.exe)
Bitness 32-bit
Is Created or Modified Executable True
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x F78
0x F88
0x FA0
0x FA4
0x FA8
0x FAC
0x FB0
0x FC0
0x FC4
0x FC8
0x FCC
0x FD0
0x FD4
0x FD8
0x FDC
0x FE0
0x FE4
Host Behavior
File (5036)
»
Operation Filename Additional Information Success Count Logfile
Create C:\Windows\System32\chrome64.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 2
Fn
Create C:\WINDOWS\System32\chrome64.exe desired_access = GENERIC_WRITE False 1
Fn
Create C:\Users\FD1HVy\AppData\Roaming\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\Windows\System32\chrome64.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ True 2
Fn
Create C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\chrome64.exe desired_access = GENERIC_WRITE True 1
Fn
Create C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\$WINRE_BACKUP_PARTITION.MARKER desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BCD.LOG desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\updaterevokesipolicy.p7b desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\updaterevokesipolicy.p7b desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\BCD desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\BCD.LOG1 desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\BCD.LOG2 desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bg-BG\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bg-BG\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\bootspaces.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bootspaces.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\bootvhd.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\bootvhd.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\it-IT\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\it-IT\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\it-IT\memtest.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\it-IT\memtest.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\ja-JP\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\ja-JP\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\ja-JP\memtest.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\ja-JP\memtest.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\ko-KR\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\ko-KR\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\ko-KR\memtest.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\ko-KR\memtest.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Boot\lt-LT\bootmgr.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Boot\lt-LT\bootmgr.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\bootmgr desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIntegration.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvApi.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvStreamingManager.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Content.xml desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\Content.xml desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Stationery\Bears.htm desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Stationery\Bears.jpg desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Stationery\Garden.htm desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Stationery\Garden.htm desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Stationery\Bears.jpg desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Stationery\Bears.htm desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvStreamingManager.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvVirtualization.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvVirtualization.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVManifest.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVManifest.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVOrchestration.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVOrchestration.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVPolicy.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVPolicy.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.en-us.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\i641033.hash.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvApi.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\mso20win32client.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\mso30win32client.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\mso40uires.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\mso40uiwin32client.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\msointl30.en-us.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp120.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp120.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcr120.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcr120.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\StreamServer.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\StreamServer.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\bg-BG\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\bg-BG\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\da-DK\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\da-DK\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\el-GR\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-GB\tipresx.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-GB\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\FlickLearningWizard.exe.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\FlickLearningWizard.exe.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\ink\el-GR\tipresx.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VGX\VGX.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VGX\VGX.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\ado\msader15.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\msader15.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\ado\msado15.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\msado15.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\ado\msado20.tlb desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\msado20.tlb desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\ado\msado21.tlb desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\msado21.tlb desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\ado\msado25.tlb desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\ado\msado25.tlb desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdaosp.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdaosp.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdaps.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdaps.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdasql.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdasql.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdatl3.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msdatl3.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msxactps.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\msxactps.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\oledb32.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\oledb32.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\oledb32r.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\oledb32r.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\sqloledb.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\sqloledb.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\sqloledb.rll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Common Files\System\Ole DB\sqloledb.rll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE False 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Internet Explorer\SIGNUP\install.ins desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Internet Explorer\SIGNUP\install.ins desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Internet Explorer\SIGNUP\install.ins.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\awt.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\bci.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dcpr.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\decora_sse.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\decora_sse.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\decora_sse.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\deploy.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\deploy.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\deploy.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\deployJava1.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\deployJava1.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\deployJava1.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npdeployJava1.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npdeployJava1.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npdeployJava1.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dt_shmem.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dt_shmem.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dt_shmem.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dt_socket.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dt_socket.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\dt_socket.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\eula.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\eula.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\eula.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\fontmanager.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\fontmanager.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\fontmanager.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\fxplugins.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\fxplugins.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\fxplugins.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\glass.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\glass.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\glass.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\glib-lite.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\glib-lite.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\glib-lite.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\gstreamer-lite.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\gstreamer-lite.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\gstreamer-lite.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\hprof.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\hprof.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\hprof.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\instrument.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\instrument.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\instrument.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\j2pcsc.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\j2pcsc.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\j2pcsc.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\j2pkcs11.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jaas_nt.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jaas_nt.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jaas_nt.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\j2pkcs11.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\j2pkcs11.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jabswitch.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jabswitch.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jabswitch.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java-rmi.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java-rmi.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java-rmi.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\JavaAccessBridge-64.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\JavaAccessBridge-64.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\JavaAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javacpl.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_font.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_font.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_font.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javacpl.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javacpl.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_font_t2k.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_font_t2k.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_font_t2k.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_iio.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_iio.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javafx_iio.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javaw.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javaw.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javaw.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javaws.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javaws.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\javaws.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java_crw_demo.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java_crw_demo.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\java_crw_demo.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jawt.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jawt.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jawt.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\JAWTAccessBridge-64.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\JAWTAccessBridge-64.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\JAWTAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jdwp.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jdwp.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jdwp.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfr.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfr.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfr.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfxmedia.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfxmedia.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfxmedia.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfxwebkit.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jfxwebkit.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE, GENERIC_READ True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jjs.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jjs.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jjs.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jli.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jli.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jli.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2iexp.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2iexp.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2iexp.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2launcher.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2launcher.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2launcher.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2native.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2native.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2native.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jpeg.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jpeg.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jpeg.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsdt.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsdt.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsdt.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsound.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsound.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsoundds.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsoundds.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsoundds.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\kcms.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\kcms.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\kcms.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\keytool.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\keytool.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\keytool.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\kinit.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00799_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\klist.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\klist.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\klist.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\jsound.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\ktab.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\ktab.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\ktab.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\kinit.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\lcms.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\lcms.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\lcms.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\kinit.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\management.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\mlib_image.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\mlib_image.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\mlib_image.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcp120.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcp120.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcp120.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcr100.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcr100.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcr100.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01659_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01659_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01659_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01660_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01660_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01660_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02068_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02068_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02068_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02071_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02071_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02071_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02075_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02075_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02075_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02088_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02097_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02088_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02088_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02097_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02097_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02115_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02115_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02115_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02116_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02116_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02116_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02141_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02141_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02141_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02153_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02153_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02153_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\management.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\management.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcr120.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcr120.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\msvcr120.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\net.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\net.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\net.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02158_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02158_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02158_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01658_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01658_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01658_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\nio.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\nio.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\nio.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\npt.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\npt.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\npt.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02161_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02161_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02161_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FLAP.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FLAP.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FLAP.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00057_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00057_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00057_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00084_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00084_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00084_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\orbd.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\orbd.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\orbd.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\pack200.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\pack200.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\pack200.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00231_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00231_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00231_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\plugin2\msvcr100.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\plugin2\msvcr100.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\plugin2\msvcr100.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00235_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00235_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00235_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00236_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00236_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00236_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00241_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00241_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00241_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00260_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00260_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00260_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\policytool.exe desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\policytool.exe desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\policytool.exe.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00334_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_common.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_common.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_common.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00334_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00334_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00443_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_d3d.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_d3d.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_d3d.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00513_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00443_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00513_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00513_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_sw.dll desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_sw.dll desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Java\jre1.8.0_144\bin\prism_sw.dll.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00524_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00526_.WMF desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00524_.WMF desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE True 1
Fn
Create C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 desired_access = GENERIC_WRITE True 1
Fn
Read C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 1048560, size_out = 4624 True 1
Fn
Data
Read C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 1048560, size_out = 0 True 3
Fn
Read C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 1048560, size_out = 8252 True 1
Fn
Data
Read C:\$Recycle.Bin\S-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini size = 1048560, size_out = 3328 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\msointl30.en-us.dll.id-B4197730.[ms_13@aol.com].ms13 size = 61040 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\msointl30.en-us.dll.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe.id-B4197730.[ms_13@aol.com].ms13 size = 358624 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\i641033.hash.id-B4197730.[ms_13@aol.com].ms13 size = 112 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\i641033.hash.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.id-B4197730.[ms_13@aol.com].ms13 size = 786706 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe.id-B4197730.[ms_13@aol.com].ms13 size = 1048560 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll.id-B4197730.[ms_13@aol.com].ms13 size = 996576 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1552 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4720 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5760 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00265_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2656 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3792 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 816 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 27056 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe.id-B4197730.[ms_13@aol.com].ms13 size = 44704 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll.id-B4197730.[ms_13@aol.com].ms13 size = 982736 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1744 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13104 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 27568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11504 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 19488 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3776 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3360 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 29008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1344 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1456 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll.id-B4197730.[ms_13@aol.com].ms13 size = 390336 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2384 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1056 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1728 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4992 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3120 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1216 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2064 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE.id-B4197730.[ms_13@aol.com].ms13 size = 363744 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5584 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll.id-B4197730.[ms_13@aol.com].ms13 size = 18640 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE.id-B4197730.[ms_13@aol.com].ms13 size = 244304 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll.id-B4197730.[ms_13@aol.com].ms13 size = 990048 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1680 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8368 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2736 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2448 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7184 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3504 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1888 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll.id-B4197730.[ms_13@aol.com].ms13 size = 1048560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3536 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms.id-B4197730.[ms_13@aol.com].ms13 size = 590528 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll.id-B4197730.[ms_13@aol.com].ms13 size = 12464 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll.id-B4197730.[ms_13@aol.com].ms13 size = 20624 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll.id-B4197730.[ms_13@aol.com].ms13 size = 855392 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe.id-B4197730.[ms_13@aol.com].ms13 size = 100496 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe.id-B4197730.[ms_13@aol.com].ms13 size = 246 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll.id-B4197730.[ms_13@aol.com].ms13 size = 367232 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll.id-B4197730.[ms_13@aol.com].ms13 size = 48880 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb size = 240 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb.id-B4197730.[ms_13@aol.com].ms13 size = 17056 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll.id-B4197730.[ms_13@aol.com].ms13 size = 168080 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb.id-B4197730.[ms_13@aol.com].ms13 size = 22688 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2432 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10544 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 49552 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 29632 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2704 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00255_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll.id-B4197730.[ms_13@aol.com].ms13 size = 426608 True 1
Fn
Data
Write C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 37984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00261_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 40032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00372_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7840 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00407_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 43008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00413_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 31136 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00117_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 720 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\awt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 1048560 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dcpr.dll.id-B4197730.[ms_13@aol.com].ms13 size = 159824 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dcpr.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\bci.dll.id-B4197730.[ms_13@aol.com].ms13 size = 16976 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\bci.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00419_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\decora_sse.dll.id-B4197730.[ms_13@aol.com].ms13 size = 86096 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\decora_sse.dll.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\deploy.dll.id-B4197730.[ms_13@aol.com].ms13 size = 587856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1936 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00437_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00448_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2848 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00256_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 20800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 24592 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00705_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Internet Explorer\SIGNUP\install.ins.id-B4197730.[ms_13@aol.com].ms13 size = 464 True 1
Fn
Data
Write C:\Program Files\Internet Explorer\SIGNUP\install.ins.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00405_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3696 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01138_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3648 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01139_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3632 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01140_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 42912 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01145_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01146_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01151_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\deploy.dll.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00449_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01157_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01160_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01162_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14832 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01039_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2096 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01166_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2096 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01167_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2016 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\deployJava1.dll.id-B4197730.[ms_13@aol.com].ms13 size = 1026128 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dt_shmem.dll.id-B4197730.[ms_13@aol.com].ms13 size = 29776 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dt_shmem.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dt_socket.dll.id-B4197730.[ms_13@aol.com].ms13 size = 24656 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dt_socket.dll.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npdeployJava1.dll.id-B4197730.[ms_13@aol.com].ms13 size = 1048560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2144 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01143_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\eula.dll.id-B4197730.[ms_13@aol.com].ms13 size = 136272 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\eula.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01169_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01170_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2064 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01171_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01152_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01173_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01178_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\awt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 468064 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\awt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01163_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2096 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01180_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1456 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01181_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01182_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01168_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8576 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01186_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1776 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01366_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 912 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01434_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2528 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\deployJava1.dll.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\fxplugins.dll.id-B4197730.[ms_13@aol.com].ms13 size = 186960 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\fxplugins.dll.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npdeployJava1.dll.id-B4197730.[ms_13@aol.com].ms13 size = 108128 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01586_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 19072 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01628_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 592 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01629_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01630_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01179_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01631_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4160 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01761_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01772_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01793_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1392 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00010_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01183_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\fontmanager.dll.id-B4197730.[ms_13@aol.com].ms13 size = 274512 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\fontmanager.dll.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\glass.dll.id-B4197730.[ms_13@aol.com].ms13 size = 265808 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\glass.dll.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\glib-lite.dll.id-B4197730.[ms_13@aol.com].ms13 size = 455760 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\glib-lite.dll.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\gstreamer-lite.dll.id-B4197730.[ms_13@aol.com].ms13 size = 619600 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\hprof.dll.id-B4197730.[ms_13@aol.com].ms13 size = 158288 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD01585_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2704 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00184_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00006_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6944 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00202_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12368 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00222_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13056 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ED00019_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00242_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2288 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00319_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 752 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00320_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\hprof.dll.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\instrument.dll.id-B4197730.[ms_13@aol.com].ms13 size = 123472 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\instrument.dll.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\gstreamer-lite.dll.id-B4197730.[ms_13@aol.com].ms13 size = 248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\j2pcsc.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19024 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\j2pcsc.dll.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jabswitch.exe.id-B4197730.[ms_13@aol.com].ms13 size = 34384 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jabswitch.exe.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\j2pkcs11.dll.id-B4197730.[ms_13@aol.com].ms13 size = 63568 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\j2pkcs11.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java-rmi.exe.id-B4197730.[ms_13@aol.com].ms13 size = 15952 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java-rmi.exe.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java.dll.id-B4197730.[ms_13@aol.com].ms13 size = 159824 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java.exe.id-B4197730.[ms_13@aol.com].ms13 size = 206928 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\JavaAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 142416 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\JavaAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java.exe.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npdeployJava1.dll.id-B4197730.[ms_13@aol.com].ms13 size = 246 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl.id-B4197730.[ms_13@aol.com].ms13 size = 187408 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javacpl.exe.id-B4197730.[ms_13@aol.com].ms13 size = 80464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javacpl.exe.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17312 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javafx_font.dll.id-B4197730.[ms_13@aol.com].ms13 size = 69200 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javafx_font.dll.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javafx_font_t2k.dll.id-B4197730.[ms_13@aol.com].ms13 size = 538192 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javafx_font_t2k.dll.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javafx_iio.dll.id-B4197730.[ms_13@aol.com].ms13 size = 128080 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javafx_iio.dll.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EN00902_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javaws.exe.id-B4197730.[ms_13@aol.com].ms13 size = 319568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00076_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 30256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00077_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14208 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00090_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 37392 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00096_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15872 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00296_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 18208 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00297_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 46816 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00306_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00336_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8560 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00369_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8432 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00382_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10832 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00397_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7888 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00403_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00414_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 21072 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00428_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2112 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00435_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5104 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00438_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8928 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00455_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17408 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00459_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java_crw_demo.dll.id-B4197730.[ms_13@aol.com].ms13 size = 29776 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\java_crw_demo.dll.id-B4197730.[ms_13@aol.com].ms13 size = 246 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jawt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 14416 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jawt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javaw.exe.id-B4197730.[ms_13@aol.com].ms13 size = 206928 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javaw.exe.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\javaws.exe.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\JAWTAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 15440 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\JAWTAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 258 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jfxmedia.dll.id-B4197730.[ms_13@aol.com].ms13 size = 139856 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jfxmedia.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jdwp.dll.id-B4197730.[ms_13@aol.com].ms13 size = 201808 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jdwp.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jjs.exe.id-B4197730.[ms_13@aol.com].ms13 size = 15952 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jjs.exe.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jfr.dll.id-B4197730.[ms_13@aol.com].ms13 size = 26704 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jfr.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jli.dll.id-B4197730.[ms_13@aol.com].ms13 size = 174672 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jli.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2iexp.dll.id-B4197730.[ms_13@aol.com].ms13 size = 296016 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2iexp.dll.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2launcher.exe.id-B4197730.[ms_13@aol.com].ms13 size = 112208 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2launcher.exe.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jfxwebkit.dll.id-B4197730.[ms_13@aol.com].ms13 size = 786694 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jfxwebkit.dll.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2native.dll.id-B4197730.[ms_13@aol.com].ms13 size = 20048 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2native.dll.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll.id-B4197730.[ms_13@aol.com].ms13 size = 235600 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jpeg.dll.id-B4197730.[ms_13@aol.com].ms13 size = 185936 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jpeg.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jsdt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 18512 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jsdt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jsoundds.dll.id-B4197730.[ms_13@aol.com].ms13 size = 31312 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\jsoundds.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\kcms.dll.id-B4197730.[ms_13@aol.com].ms13 size = 220752 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\kcms.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 29216 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00086_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00361_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00544_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1488 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00543_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 912 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00564_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00586_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00775_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00779_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 16400 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00814_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\keytool.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\keytool.exe.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\ktab.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\ktab.exe.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\lcms.dll.id-B4197730.[ms_13@aol.com].ms13 size = 233552 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\lcms.dll.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\klist.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\klist.exe.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\kinit.exe.id-B4197730.[ms_13@aol.com].ms13 size = 35408 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\kinit.exe.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\mlib_image.dll.id-B4197730.[ms_13@aol.com].ms13 size = 653904 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\mlib_image.dll.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcp120.dll.id-B4197730.[ms_13@aol.com].ms13 size = 660144 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcp120.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4640 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01074_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4992 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01176_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01191_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 2
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF size = 13984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2336 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01196_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10320 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01548_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 30416 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01657_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcp120.dll.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcp120.dll.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD00965_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01193_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 42720 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcr100.dll.id-B4197730.[ms_13@aol.com].ms13 size = 829280 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcr100.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01659_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 31184 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01659_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02068_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02068_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01660_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01660_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02071_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02071_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02075_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4400 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02075_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02097_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02097_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02088_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3712 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02088_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02116_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4000 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02116_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02115_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4672 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02115_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\nio.dll.id-B4197730.[ms_13@aol.com].ms13 size = 60496 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\nio.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01658_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17936 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD01658_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcr120.dll.id-B4197730.[ms_13@aol.com].ms13 size = 963248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\msvcr120.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02153_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5408 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02153_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02141_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2640 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02141_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02158_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1664 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02158_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\net.dll.id-B4197730.[ms_13@aol.com].ms13 size = 96848 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\net.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\management.dll.id-B4197730.[ms_13@aol.com].ms13 size = 36944 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\management.dll.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02161_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3136 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FD02161_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\npt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 19024 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\npt.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FLAP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FLAP.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00057_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3776 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00057_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2480 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00084_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\orbd.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\orbd.exe.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00231_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2240 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00231_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00235_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1040 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00235_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\pack200.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\pack200.exe.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\plugin2\msvcr100.dll.id-B4197730.[ms_13@aol.com].ms13 size = 829280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00236_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3296 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00236_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF size = 1968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00260_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3664 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00260_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\policytool.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\policytool.exe.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\prism_common.dll.id-B4197730.[ms_13@aol.com].ms13 size = 57424 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\prism_common.dll.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00334_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1536 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00334_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00276_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\prism_d3d.dll.id-B4197730.[ms_13@aol.com].ms13 size = 130640 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\prism_d3d.dll.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\prism_sw.dll.id-B4197730.[ms_13@aol.com].ms13 size = 97872 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\prism_sw.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3312 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00443_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13552 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00526_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00527_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00527_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00513_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 832 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00513_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00546_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3728 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00546_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14704 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00524_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00612_.WMF size = 1472 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00612_.WMF size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00602_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1408 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00602_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00625_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2128 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00625_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00612_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12640 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00612_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00623_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10656 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00623_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00636_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1584 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00636_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00681_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9312 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00681_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00669_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11504 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00669_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00685_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4048 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00685_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00693_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7104 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00693_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01013_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2864 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01013_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1152 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01015_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\plugin2\msvcr100.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll.id-B4197730.[ms_13@aol.com].ms13 size = 234576 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\rmid.exe.id-B4197730.[ms_13@aol.com].ms13 size = 15952 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\rmid.exe.id-B4197730.[ms_13@aol.com].ms13 size = 228 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\resource.dll.id-B4197730.[ms_13@aol.com].ms13 size = 15440 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\resource.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4352 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00687_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01058_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01058_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00688_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7088 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH00688_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01065_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01065_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01242_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7344 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01242_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01291_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15808 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01291_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5008 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01080_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01329_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6032 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01329_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01461_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01461_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01618_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7312 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01618_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01923_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 26720 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01923_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01875_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2624 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01875_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01759_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5424 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH01759_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02282_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 7936 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02282_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02298_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5568 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02298_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02313_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3088 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02313_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02155_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2720 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02155_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00005_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 23312 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00005_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02166_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1328 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02166_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\jvm.dll.id-B4197730.[ms_13@aol.com].ms13 size = 786682 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02312_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HH02312_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\rmiregistry.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\rmiregistry.exe.id-B4197730.[ms_13@aol.com].ms13 size = 242 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\servertool.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\servertool.exe.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\splashscreen.dll.id-B4197730.[ms_13@aol.com].ms13 size = 204880 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\splashscreen.dll.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll.id-B4197730.[ms_13@aol.com].ms13 size = 571984 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\ssvagent.exe.id-B4197730.[ms_13@aol.com].ms13 size = 70224 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\ssvagent.exe.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.id-B4197730.[ms_13@aol.com].ms13 size = 786690 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\sunmscapi.dll.id-B4197730.[ms_13@aol.com].ms13 size = 31824 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\sunmscapi.dll.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\t2k.dll.id-B4197730.[ms_13@aol.com].ms13 size = 255056 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\t2k.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\tnameserv.exe.id-B4197730.[ms_13@aol.com].ms13 size = 16464 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\tnameserv.exe.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\server\jvm.dll.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\sunec.dll.id-B4197730.[ms_13@aol.com].ms13 size = 135760 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\sunec.dll.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\verify.dll.id-B4197730.[ms_13@aol.com].ms13 size = 49232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\verify.dll.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\w2k_lsa_auth.dll.id-B4197730.[ms_13@aol.com].ms13 size = 24144 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\w2k_lsa_auth.dll.id-B4197730.[ms_13@aol.com].ms13 size = 244 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\WindowsAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 110160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\WindowsAccessBridge-64.dll.id-B4197730.[ms_13@aol.com].ms13 size = 264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00116_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00116_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00114_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 22128 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00114_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\zip.dll.id-B4197730.[ms_13@aol.com].ms13 size = 77904 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\zip.dll.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.id-B4197730.[ms_13@aol.com].ms13 size = 3248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.id-B4197730.[ms_13@aol.com].ms13 size = 160 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2848 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00172_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\unpack.dll.id-B4197730.[ms_13@aol.com].ms13 size = 79952 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\unpack.dll.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.id-B4197730.[ms_13@aol.com].ms13 size = 640 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.id-B4197730.[ms_13@aol.com].ms13 size = 1392 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00426_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 68784 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HM00426_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00046_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00046_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00118_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 800 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00118_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\unpack200.exe.id-B4197730.[ms_13@aol.com].ms13 size = 197200 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\unpack200.exe.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\classlist.id-B4197730.[ms_13@aol.com].ms13 size = 84368 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\classlist.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00204_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00204_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00346_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 704 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00346_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar.id-B4197730.[ms_13@aol.com].ms13 size = 786692 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00233_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 11200 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00233_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00343_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00343_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00351_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1936 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00351_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00557_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9184 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00557_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00915_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 12752 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00915_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00919_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6928 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00919_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00956_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00956_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00957_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00957_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0075478.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 1232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0075478.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086384.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9744 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086384.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.id-B4197730.[ms_13@aol.com].ms13 size = 51248 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.id-B4197730.[ms_13@aol.com].ms13 size = 640 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 1056 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.id-B4197730.[ms_13@aol.com].ms13 size = 274480 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086420.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9600 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086420.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086424.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17024 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086424.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086426.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 21792 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086426.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\wsdetect.dll.id-B4197730.[ms_13@aol.com].ms13 size = 192592 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\bin\wsdetect.dll.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 3152 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.id-B4197730.[ms_13@aol.com].ms13 size = 5552 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.id-B4197730.[ms_13@aol.com].ms13 size = 260 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\currency.data.id-B4197730.[ms_13@aol.com].ms13 size = 4128 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\currency.data.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3312 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3616 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3424 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3232 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00177_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1088 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\IN00177_.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086432.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 33440 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086432.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086478.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 14176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086478.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.id-B4197730.[ms_13@aol.com].ms13 size = 5728 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3296 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3424 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0089992.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15696 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0089992.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0089945.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 19904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0089945.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090087.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 46944 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090087.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090027.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 21280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090027.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090089.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 15776 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090089.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090149.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 28224 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090149.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090390.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17648 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090390.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090777.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3344 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090777.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090783.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6944 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090783.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090781.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5328 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090781.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090779.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1472 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0090779.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0093905.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 42064 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0093905.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0098497.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0098497.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099147.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 24384 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099147.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099148.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 18272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099148.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099145.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 24768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099145.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099150.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 21920 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099150.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099151.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 26096 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099151.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099149.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 73216 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099149.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099152.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 11696 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.id-B4197730.[ms_13@aol.com].ms13 size = 226 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086428.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 35360 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.id-B4197730.[ms_13@aol.com].ms13 size = 2864 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.id-B4197730.[ms_13@aol.com].ms13 size = 6352 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.id-B4197730.[ms_13@aol.com].ms13 size = 4080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099146.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 16608 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099153.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 13888 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099152.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099153.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099154.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 6944 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099154.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099146.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099156.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 13968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099156.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099155.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 8832 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099155.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099157.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 9680 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099157.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099158.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 26176 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099158.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099160.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 15152 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099160.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099159.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 27552 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099159.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099162.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 19664 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099162.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.id-B4197730.[ms_13@aol.com].ms13 size = 256 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0086428.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099164.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 21952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099164.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 50496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 64768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 43952 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 20192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099170.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 24304 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099170.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3760 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.id-B4197730.[ms_13@aol.com].ms13 size = 188032 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3760 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.id-B4197730.[ms_13@aol.com].ms13 size = 262 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.id-B4197730.[ms_13@aol.com].ms13 size = 8288 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.id-B4197730.[ms_13@aol.com].ms13 size = 44528 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.id-B4197730.[ms_13@aol.com].ms13 size = 234 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy.jar.id-B4197730.[ms_13@aol.com].ms13 size = 786688 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.id-B4197730.[ms_13@aol.com].ms13 size = 786696 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099161.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 7168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099161.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099172.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 58272 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099172.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099163.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 22368 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099163.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099169.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 10208 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099169.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099173.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 37152 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099173.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099174.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 6224 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099174.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099175.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9760 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099175.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099176.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 2496 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099176.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099177.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 5392 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099177.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099178.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3616 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099178.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099180.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3408 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099180.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099179.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 9168 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099179.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099182.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 3856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099182.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099183.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4960 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099183.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099184.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 4128 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099184.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099171.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 8768 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099171.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099185.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 3296 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099185.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099186.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 16752 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099186.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099187.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 24544 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099187.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099190.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 43904 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099190.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099189.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 8080 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099189.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099192.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 17968 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099192.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099193.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 35552 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099193.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099194.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 25280 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099194.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.id-B4197730.[ms_13@aol.com].ms13 size = 786692 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\deploy.jar.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.id-B4197730.[ms_13@aol.com].ms13 size = 786686 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 1472 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.id-B4197730.[ms_13@aol.com].ms13 size = 232 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099181.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 1200 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099181.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099188.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 9088 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099188.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099191.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 62368 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099191.JPG.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.id-B4197730.[ms_13@aol.com].ms13 size = 786690 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099195.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 19936 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099195.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099197.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 10912 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099197.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099196.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 14352 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099196.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099199.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 33984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099199.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099201.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 51408 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099201.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099203.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 3920 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099203.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099202.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 4976 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099202.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099204.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099204.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099205.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 17856 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099205.WMF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101856.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 78848 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101856.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099198.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 5264 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099198.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099200.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 16544 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099200.GIF.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101859.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 31984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101859.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101860.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 32192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101861.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 32192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101857.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 32192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101858.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 32192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101858.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101860.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101862.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 32192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101862.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101863.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 32192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101863.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101857.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101864.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 31984 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101864.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101865.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 32192 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101865.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101861.BMP.id-B4197730.[ms_13@aol.com].ms13 size = 236 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.id-B4197730.[ms_13@aol.com].ms13 size = 42192 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.id-B4197730.[ms_13@aol.com].ms13 size = 230 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.id-B4197730.[ms_13@aol.com].ms13 size = 280176 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.id-B4197730.[ms_13@aol.com].ms13 size = 250 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.id-B4197730.[ms_13@aol.com].ms13 size = 32704 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.id-B4197730.[ms_13@aol.com].ms13 size = 251328 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.id-B4197730.[ms_13@aol.com].ms13 size = 238 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.id-B4197730.[ms_13@aol.com].ms13 size = 262144 True 3
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.id-B4197730.[ms_13@aol.com].ms13 size = 3936 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.id-B4197730.[ms_13@aol.com].ms13 size = 252 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.id-B4197730.[ms_13@aol.com].ms13 size = 3776 True 1
Fn
Data
Write C:\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.id-B4197730.[ms_13@aol.com].ms13 size = 240 True 1
Fn
Data
For performance reasons, the remaining 3820 entries are omitted.
The remaining entries can be found in glog.xml.
Registry (8)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Startup, data = 83, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Startup, data = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders value_name = Common Startup, data = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup, type = REG_EXPAND_SZ True 1
Fn
Write Value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run value_name = chrome64.exe, data = C:\Users\FD1HVy\AppData\Roaming\chrome64.exe, size = 88, type = REG_SZ True 1
Fn
Process (799)
»
Operation Process Additional Information Success Count Logfile
Create C:\WINDOWS\system32\cmd.exe os_pid = 0xf98, startup_flags = STARTF_USESHOWWINDOW, STARTF_USESTDHANDLES, show_window = SW_HIDE True 1
Fn
Enumerate Processes - - True 779
Fn
Enumerate Processes - - False 19
Fn
Module (139)
»
Operation Module Additional Information Success Count Logfile
Load kernel32.dll base_address = 0x74830000 True 1
Fn
Load advapi32.dll base_address = 0x75270000 True 1
Fn
Load user32.dll base_address = 0x74620000 True 1
Fn
Load Shell32.dll base_address = 0x76410000 True 1
Fn
Load ntdll.dll base_address = 0x77850000 True 1
Fn
Load mpr.dll base_address = 0x74250000 True 1
Fn
Load ws2_32.dll base_address = 0x752f0000 True 1
Fn
Get Handle c:\windows\syswow64\kernel32.dll base_address = 0x74830000 True 18
Fn
Get Filename - process_name = c:\windows\system32\chrome64.exe, file_name_orig = C:\Windows\System32\chrome64.exe, size = 32767 True 3
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcAddress, address_out = 0x748451b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleHandleW, address_out = 0x748450d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindNextFileW, address_out = 0x7489ee40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindClose, address_out = 0x7489ed70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = MoveFileW, address_out = 0x7487e500 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileSizeEx, address_out = 0x7489ef40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetModuleFileNameW, address_out = 0x74845090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetFileAttributesW, address_out = 0x7489ef10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExitProcess, address_out = 0x74843cb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCommandLineW, address_out = 0x74844cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameW, address_out = 0x748732c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetComputerNameA, address_out = 0x74873780 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateMutexW, address_out = 0x7489eb70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenW, address_out = 0x74846c70 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrlenA, address_out = 0x74846c50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcess, address_out = 0x7489ea10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForSingleObject, address_out = 0x7489eca0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLogicalDrives, address_out = 0x74840d20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetTickCount, address_out = 0x7489dd50 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteFileW, address_out = 0x7489ed40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WideCharToMultiByte, address_out = 0x74846b10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = InitializeCriticalSectionAndSpinCount, address_out = 0x7489ebb0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Sleep, address_out = 0x74846760 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = LeaveCriticalSection, address_out = 0x7789b250 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReadFile, address_out = 0x7489f090 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateFileW, address_out = 0x7489ed10 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenMutexW, address_out = 0x7489ebf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = EnterCriticalSection, address_out = 0x7789b2d0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WaitForMultipleObjects, address_out = 0x7489ec80 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiW, address_out = 0x74846bf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = lstrcmpiA, address_out = 0x74846bd0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = DeleteCriticalSection, address_out = 0x7787fb90 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ReleaseMutex, address_out = 0x7489ec20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CloseHandle, address_out = 0x7489eab0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVersion, address_out = 0x748456c0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateThread, address_out = 0x748446b0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = ExpandEnvironmentStringsW, address_out = 0x74844a40 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceCounter, address_out = 0x74845da0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = QueryPerformanceFrequency, address_out = 0x74845dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetCurrentProcessId, address_out = 0x7489ea20 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFileAttributesW, address_out = 0x7489f100 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetVolumeInformationW, address_out = 0x7489f020 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = WriteFile, address_out = 0x7489f180 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetFilePointerEx, address_out = 0x7489f130 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetEndOfFile, address_out = 0x7489f0e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = FindFirstFileW, address_out = 0x7489edf0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetProcessHeap, address_out = 0x748451f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapReAlloc, address_out = 0x7788f630 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapAlloc, address_out = 0x77892dc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = HeapFree, address_out = 0x748457f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreatePipe, address_out = 0x74844590 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SetHandleInformation, address_out = 0x7489eae0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateProcessW, address_out = 0x74844610 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringW, address_out = 0x74844430 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CompareStringA, address_out = 0x74844410 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = OpenProcess, address_out = 0x74845cc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = TerminateProcess, address_out = 0x748467e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetSystemTime, address_out = 0x748454e0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = SystemTimeToFileTime, address_out = 0x748467a0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = GetLastError, address_out = 0x74845010 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = CreateToolhelp32Snapshot, address_out = 0x7487edc0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32NextW, address_out = 0x7487f8f0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Process32FirstW, address_out = 0x7487f750 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegOpenKeyExW, address_out = 0x7528e580 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegQueryValueExW, address_out = 0x7528e5a0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegSetValueExW, address_out = 0x7528f530 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = RegCloseKey, address_out = 0x7528ed60 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenProcessToken, address_out = 0x7528efb0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = GetTokenInformation, address_out = 0x7528ee90 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenSCManagerW, address_out = 0x75290540 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = OpenServiceW, address_out = 0x7528fa20 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = CloseServiceHandle, address_out = 0x7528fc00 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = ControlService, address_out = 0x752a26d0 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = QueryServiceStatus, address_out = 0x75292380 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumDependentServicesW, address_out = 0x752a2f70 True 1
Fn
Get Address c:\windows\syswow64\advapi32.dll function = EnumServicesStatusExW, address_out = 0x7528fc80 True 1
Fn
Get Address c:\windows\syswow64\user32.dll function = SystemParametersInfoW, address_out = 0x7464f210 True 1
Fn
Get Address c:\windows\syswow64\shell32.dll function = ShellExecuteExW, address_out = 0x76574730 True 1
Fn
Get Address c:\windows\syswow64\ntdll.dll function = NtQuerySystemInformation, address_out = 0x778c2070 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetCloseEnum, address_out = 0x74252640 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetOpenEnumW, address_out = 0x74252790 True 1
Fn
Get Address c:\windows\syswow64\mpr.dll function = WNetEnumResourceW, address_out = 0x74252410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = WSAStartup, address_out = 0x752f5b40 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = socket, address_out = 0x75304510 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = send, address_out = 0x752f5030 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = recv, address_out = 0x75300c50 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = connect, address_out = 0x752f5410 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = closesocket, address_out = 0x75300910 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = gethostbyname, address_out = 0x75326cb0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = inet_addr, address_out = 0x75309160 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = ntohl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htonl, address_out = 0x752f49d0 True 1
Fn
Get Address c:\windows\syswow64\ws2_32.dll function = htons, address_out = 0x75308ff0 True 1
Fn
Get Address c:\windows\syswow64\kernel32.dll function = Wow64DisableWow64FsRedirection, address_out = 0x74846b30 True 18
Fn
Service (57)
»
Operation Additional Information Success Count Logfile
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE False 1
Fn
Enumerate database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 2
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 3
Fn
Open Manager database_name = SERVICES_ACTIVE_DATABASE True 1
Fn
System (245)
»
Operation Additional Information Success Count Logfile
Get Computer Name result_out = NQDPDE True 1
Fn
Sleep duration = -1 (infinite) False 1
Fn
Sleep duration = 500 milliseconds (0.500 seconds) True 17
Fn
Sleep duration = 100 milliseconds (0.100 seconds) True 64
Fn
Get Time type = Performance Ctr, time = 13596001986 True 1
Fn
Get Time type = Ticks, time = 135921 True 1
Fn
Get Time type = Ticks, time = 136000 True 2
Fn
Get Time type = Ticks, time = 136734 True 1
Fn
Get Time type = Ticks, time = 136750 True 1
Fn
Get Time type = Ticks, time = 137828 True 4
Fn
Get Time type = Ticks, time = 138140 True 2
Fn
Get Time type = Ticks, time = 138296 True 2
Fn
Get Time type = Ticks, time = 138593 True 2
Fn
Get Time type = Ticks, time = 138859 True 4
Fn
Get Time type = Ticks, time = 139343 True 2
Fn
Get Time type = Ticks, time = 139765 True 2
Fn
Get Time type = Ticks, time = 141046 True 4
Fn
Get Time type = Ticks, time = 141703 True 2
Fn
Get Time type = Ticks, time = 142828 True 4
Fn
Get Time type = Ticks, time = 143296 True 2
Fn
Get Time type = Ticks, time = 143890 True 4
Fn
Get Time type = Ticks, time = 144468 True 1
Fn
Get Time type = Ticks, time = 145031 True 2
Fn
Get Time type = Ticks, time = 145687 True 3
Fn
Get Time type = Ticks, time = 146296 True 3
Fn
Get Time type = Ticks, time = 146875 True 3
Fn
Get Time type = Ticks, time = 147562 True 3
Fn
Get Time type = Ticks, time = 148218 True 3
Fn
Get Time type = Ticks, time = 148890 True 3
Fn
Get Time type = Ticks, time = 149171 True 2
Fn
Get Time type = Ticks, time = 149890 True 3
Fn
Get Time type = Ticks, time = 150609 True 3
Fn
Get Time type = Ticks, time = 151046 True 3
Fn
Get Time type = Ticks, time = 151578 True 2
Fn
Get Time type = Ticks, time = 152046 True 3
Fn
Get Time type = Ticks, time = 152375 True 3
Fn
Get Time type = Ticks, time = 153000 True 2
Fn
Get Time type = Ticks, time = 153484 True 4
Fn
Get Time type = Ticks, time = 153890 True 2
Fn
Get Time type = Ticks, time = 154578 True 4
Fn
Get Time type = Ticks, time = 154843 True 2
Fn
Get Time type = Ticks, time = 155375 True 2
Fn
Get Time type = Ticks, time = 155875 True 4
Fn
Get Time type = Ticks, time = 156140 True 2
Fn
Get Time type = Ticks, time = 157234 True 4
Fn
Get Time type = Ticks, time = 157640 True 2
Fn
Get Time type = Ticks, time = 157765 True 2
Fn
Get Time type = Ticks, time = 157875 True 2
Fn
Get Time type = Ticks, time = 157984 True 2
Fn
Get Time type = Ticks, time = 158093 True 2
Fn
Get Time type = Ticks, time = 158218 True 2
Fn
Get Time type = Ticks, time = 158328 True 4
Fn
Get Time type = Ticks, time = 158437 True 2
Fn
Get Time type = Ticks, time = 158546 True 2
Fn
Get Time type = Ticks, time = 158687 True 2
Fn
Get Time type = Ticks, time = 158796 True 2
Fn
Get Time type = Ticks, time = 158906 True 2
Fn
Get Time type = Ticks, time = 159015 True 2
Fn
Get Time type = Ticks, time = 159140 True 2
Fn
Get Time type = Ticks, time = 159312 True 2
Fn
Get Time type = Ticks, time = 159421 True 4
Fn
Get Time type = Ticks, time = 159531 True 2
Fn
Get Time type = Ticks, time = 159640 True 2
Fn
Get Time type = Ticks, time = 159750 True 2
Fn
Get Time type = Ticks, time = 159968 True 2
Fn
Get Time type = Ticks, time = 160796 True 4
Fn
Get Time type = Ticks, time = 161031 True 2
Fn
Get Time type = Ticks, time = 161296 True 2
Fn
Get Time type = Ticks, time = 161562 True 2
Fn
Get Info type = Operating System True 2
Fn
Mutex (2)
»
Operation Additional Information Success Count Logfile
Open mutex_name = Global\syncronize_6129M1A, desired_access = SYNCHRONIZE True 1
Fn
Open mutex_name = Global\syncronize_6129M1U, desired_access = SYNCHRONIZE True 1
Fn
Process #15: cmd.exe
284 0
»
Information Value
ID #15
File Name c:\windows\system32\cmd.exe
Command Line "C:\WINDOWS\system32\cmd.exe"
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:29, Reason: Child Process
Unmonitor End Time: 00:04:51, Reason: Self Terminated
Monitor Duration 00:00:22
OS Process Information
»
Information Value
PID 0xf98
Parent PID 0xf74 (c:\windows\system32\chrome64.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x F9C
0x C64
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
cmd.exe 0x7FF7B95A0000 0x7FF7B9602FFF Process Termination - 64-bit - False
Host Behavior
File (218)
»
Operation Filename Additional Information Success Count Logfile
Get Info C:\WINDOWS\system32 type = file_attributes True 1
Fn
Get Info C:\Windows\System32 type = file_attributes True 1
Fn
Get Info STD_OUTPUT_HANDLE type = file_type True 14
Fn
Get Info STD_INPUT_HANDLE type = file_type True 7
Fn
Open STD_OUTPUT_HANDLE - True 36
Fn
Open STD_INPUT_HANDLE - True 81
Fn
Read STD_INPUT_HANDLE size = 1, size_out = 1 True 65
Fn
Data
Write STD_OUTPUT_HANDLE size = 38 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 2 True 5
Fn
Data
Write STD_OUTPUT_HANDLE size = 52 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 20 True 3
Fn
Data
Write STD_OUTPUT_HANDLE size = 24 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 36 True 1
Fn
Data
Write STD_OUTPUT_HANDLE size = 5 True 1
Fn
Data
Registry (17)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System - False 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Command Processor - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 4, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Process (4)
»
Operation Process Additional Information Success Count Logfile
Create C:\WINDOWS\system32\mode.com os_pid = 0xb40, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Create C:\WINDOWS\system32\vssadmin.exe os_pid = 0xb30, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL True 1
Fn
Get Info C:\WINDOWS\system32\mode.com type = PROCESS_BASIC_INFORMATION True 1
Fn
Get Info C:\WINDOWS\system32\vssadmin.exe type = PROCESS_BASIC_INFORMATION True 1
Fn
Memory (2)
»
Operation Process Additional Information Success Count Logfile
Read C:\WINDOWS\system32\mode.com address = 122154151936, size = 1952 True 1
Fn
Data
Read C:\WINDOWS\system32\vssadmin.exe address = 97741066240, size = 1952 True 1
Fn
Data
Module (10)
»
Operation Module Additional Information Success Count Logfile
Load NTDLL.DLL base_address = 0x7ff97dfb0000 True 1
Fn
Get Handle c:\windows\system32\cmd.exe base_address = 0x7ff7b95a0000 True 1
Fn
Get Handle c:\windows\system32\kernel32.dll base_address = 0x7ff97bba0000 True 2
Fn
Get Filename - process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\WINDOWS\system32\cmd.exe, size = 32743 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetThreadUILanguage, address_out = 0x7ff97bbba990 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = CopyFileExW, address_out = 0x7ff97bbbe830 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = IsDebuggerPresent, address_out = 0x7ff97bbbe300 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetConsoleInputExeNameW, address_out = 0x7ff97a530a40 True 1
Fn
Get Address c:\windows\system32\ntdll.dll function = NtQueryInformationProcess, address_out = 0x7ff97e0556b0 True 1
Fn
System (1)
»
Operation Additional Information Success Count Logfile
Get Info type = Operating System True 1
Fn
Environment (30)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 10
Fn
Data
Get Environment String name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps True 3
Fn
Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 3
Fn
Get Environment String name = PROMPT False 1
Fn
Get Environment String name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe True 1
Fn
Get Environment String name = KEYS False 1
Fn
Get Environment String name = PROMPT, result_out = $P$G True 3
Fn
Set Environment String name = PROMPT, value = $P$G True 1
Fn
Set Environment String name = =C:, value = C:\Windows\System32 True 1
Fn
Set Environment String name = COPYCMD True 2
Fn
Set Environment String name = =ExitCode, value = 00000000 True 1
Fn
Set Environment String name = =ExitCodeAscii True 2
Fn
Set Environment String name = =ExitCode, value = 00000002 True 1
Fn
Process #17: cmd.exe
60 0
»
Information Value
ID #17
File Name c:\windows\system32\cmd.exe
Command Line "C:\WINDOWS\system32\cmd.exe"
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:30, Reason: Child Process
Unmonitor End Time: 00:04:42, Reason: Self Terminated
Monitor Duration 00:00:12
OS Process Information
»
Information Value
PID 0xfec
Parent PID 0xd10 (c:\windows\system32\chrome64.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level Medium
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeCreateGlobalPrivilege
Thread IDs
0x FF0
0x B34
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
cmd.exe 0x7FF7B95A0000 0x7FF7B9602FFF Process Termination - 64-bit - False
Host Behavior
File (25)
»
Operation Filename Additional Information Success Count Logfile
Get Info C:\WINDOWS\system32 type = file_attributes True 1
Fn
Get Info C:\Windows\System32 type = file_attributes True 1
Fn
Get Info STD_OUTPUT_HANDLE type = file_type True 5
Fn
Get Info STD_ERROR_HANDLE type = file_type True 1
Fn
Open STD_OUTPUT_HANDLE - True 10
Fn
Open STD_INPUT_HANDLE - True 2
Fn
Open STD_ERROR_HANDLE - True 2
Fn
Write STD_OUTPUT_HANDLE size = 38 False 1
Fn
Write STD_OUTPUT_HANDLE size = 2 False 1
Fn
Write STD_ERROR_HANDLE size = 51 False 1
Fn
Registry (17)
»
Operation Key Additional Information Success Count Logfile
Open Key HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System - False 1
Fn
Open Key HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor - True 1
Fn
Open Key HKEY_CURRENT_USER\Software\Microsoft\Command Processor - True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 4, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor value_name = AutoRun, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DisableUNCCheck, data = 64, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DelayedExpansion, data = 1, type = REG_NONE False 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN True 1
Fn
Read Value HKEY_CURRENT_USER\Software\Microsoft\Command Processor value_name = AutoRun, data = 9, type = REG_NONE False 1
Fn
Module (4)
»
Operation Module Additional Information Success Count Logfile
Get Handle c:\windows\system32\cmd.exe base_address = 0x7ff7b95a0000 True 1
Fn
Get Handle c:\windows\system32\kernel32.dll base_address = 0x7ff97bba0000 True 1
Fn
Get Filename - process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\WINDOWS\system32\cmd.exe, size = 32743 True 1
Fn
Get Address c:\windows\system32\kernel32.dll function = SetThreadUILanguage, address_out = 0x7ff97bbba990 True 1
Fn
System (1)
»
Operation Additional Information Success Count Logfile
Get Info type = Operating System True 1
Fn
Environment (11)
»
Operation Additional Information Success Count Logfile
Get Environment String - True 4
Fn
Data
Get Environment String name = PATH, result_out = C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Users\FD1HVy\AppData\Local\Microsoft\WindowsApps; True 1
Fn
Get Environment String name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC True 1
Fn
Get Environment String name = PROMPT False 1
Fn
Get Environment String name = COMSPEC, result_out = C:\WINDOWS\system32\cmd.exe True 1
Fn
Get Environment String name = KEYS False 1
Fn
Set Environment String name = PROMPT, value = $P$G True 1
Fn
Set Environment String name = =C:, value = C:\Windows\System32 True 1
Fn
Process #19: mode.com
0 0
»
Information Value
ID #19
File Name c:\windows\system32\mode.com
Command Line mode con cp select=1251
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:43, Reason: Child Process
Unmonitor End Time: 00:04:51, Reason: Self Terminated
Monitor Duration 00:00:07
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0xb40
Parent PID 0xf98 (c:\windows\system32\cmd.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x B38
0x B5C
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
mode.com 0x7FF7ABE90000 0x7FF7ABE9BFFF Process Termination - 64-bit - False
Process #20: vssadmin.exe
0 0
»
Information Value
ID #20
File Name c:\windows\system32\vssadmin.exe
Command Line vssadmin delete shadows /all /quiet
Initial Working Directory C:\WINDOWS\system32\
Monitor Start Time: 00:04:50, Reason: Child Process
Unmonitor End Time: 00:04:51, Reason: Self Terminated
Monitor Duration 00:00:01
Remark No high level activity detected in monitored regions
OS Process Information
»
Information Value
PID 0xb30
Parent PID 0xf98 (c:\windows\system32\cmd.exe)
Bitness 64-bit
Is Created or Modified Executable False
Integrity Level High (Elevated)
Username NQDPDE\FD1HVy
Enabled Privileges SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege
Thread IDs
0x B28
0x C7C
0x C80
0x 884
0x 894
Memory Dumps
»
Name Start VA End VA Dump Reason PE Rebuilds Bitness Entry Points YARA Actions
vssadmin.exe 0x7FF667F00000 0x7FF667F26FFF Process Termination - 64-bit - False
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image