Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\CUsersUSERAppDataLocalTemp3582-490fc804dbf9820addf1a942036564aefb1.virus.exe
|
MD5:
ae7ed31ba0d8c53f6ced69652c8787c3
SHA1:
a3824b1176f2fada73236e666980e8c69be63bce
SHA256:
a09a3f73190f9882f02fa4bf9bfebc5686adbd68a2c613dd2c6cdd1862fc757b
SSDeep:
1536:bNeRBl5PT/rx1mzwRMSTdLpJ0Jmsm6zxNLnXv:bQRrmzwR5JvxWb
ImpHash:
851a0ba8fbb71710075bdfe6dcef92eb
|
Access, Create
|
Sample File
|
|
\\?\C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
e3fa745ce08c846a696c826bbf292bda
SHA1:
83e65a25bb9dc1013fc5742bc1615bcd15180070
SHA256:
79d18f9eb2d6bdd76fa9180c9c1e8658d934ff16e5d36150d4272d47deee57cf
SSDeep:
6:2o8IILmQOtjL/arWaXpvZlYh8qRRCuCYohzitlE4mihUT552cbdC5:tWOn/aLCh8Ylt9ZhUT55JdC5
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\BOOTSECT.BAK.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
09b1f68086babe70c4657401bd27b374
SHA1:
b49d8f98790549cc11264f8e212408666af37cc1
SHA256:
c26aeb17ba9b2fa432daba57a29427047190b20c6587a0a5fa095040b7b071f6
SSDeep:
192:hc/wksqcjgVLGtnzZXBSCq0eoja8OaLfcJjueWWJf837UPwbAn7ielhP:cms6xdBTqjojIyGtJfq2H7ich
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\Boot\BOOTSTAT.DAT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
a2f8946c149bc5f5aeba576424799ee8
SHA1:
f2522bfaca81ae03a6feecd11ef8f7ff53962771
SHA256:
b4c44498ecd055de28d9b754c1a24823b66bc240491b12cb1edb541ba7863daa
SSDeep:
1536:ldxBDEJlG8GWgvNJV7vqu74+RJasfEB0OrUCDQmaR/rlVh8WiLWe19b:rnDalG4gvd7vX74sOeSfEdBVh8WQx
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
2fb10a322517f7cbfb3a6cfe3f7ec571
SHA1:
f50dbea0bf05e4a4f73abb265fef52fa43db4e07
SHA256:
5ef870f132dab830dd5380a5f66f2db9ead790ee6610fc191c638c2aecd616a4
SSDeep:
196608:6a8A7fKP0ReD0wXKLUEfRrDXP2ifogB2jHcSBLWiyvyWJRMLhdPWfi:6aRDKP0q0wM9JrL2ifJcjhW/6vL3Ai
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
1ad1d600e1529a6083b59ed4cfd12eab
SHA1:
8993b34a934ae3125070b20e7aee314bbfbc127b
SHA256:
3a633605408cae8a64831ff1b160341f13d9773c84e84b93e28ccac9e02d5c45
SSDeep:
49152:zDxL8QBo0Tex4S120ytJyhcKYdcM97/WLlUliC:zR89t1rqSLGn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml
|
MD5:
885ac91492755820780283e57aad6ba6
SHA1:
e187e4d5a2b7a353423ba73512d20b21039a8acf
SHA256:
eaf5c3f78a8c10fda2f95252a4a37cdb0cee2001fc273d62566cea68dcd2b3f5
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
5247c540de21664e72b08144ebd50180
SHA1:
e99d992267c10b58888ddeb57e8163118db830d2
SHA256:
a129601670d3d6644ff85a851ca503203242c8cb90b8692d8c45cf20112a4724
SSDeep:
48:ovnWCLd7YZupfHbg1I6lIbIobELhS4yfAahP:qWCLmZutHbuNMIobqS4y1hP
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
22c72832a3ead3a3013127ba3c48a92f
SHA1:
bb8d03977213cf1829f4e728a630674e5d0696f0
SHA256:
7ae35561c68922012f9e45dd6e1dacec2f450ea3e20c0f43b14d7ee56e5320c1
SSDeep:
48:DQFlz/1Wlo+aPGg4IzVnuRi1RetvpEqRkF3phD6hP:kzNTP59oiUS3fWhP
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
acb2d27e6ee8406768088134f93ba428
SHA1:
82593ce2527330a6b3f1a33732c91f3417335e9d
SHA256:
e879777935765e75bbd4474a6ff738764bc1a9b7e3dec755155785bc2c26347b
SSDeep:
49152:zDxL8QBo6Tex4S120ytJyA9rpovZR5ZPSp2cZ:zR89j1Wrp2ZP0pf
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
6b078cbccbab0d5edeaa1d85f11ba58a
SHA1:
66820f091ea72f244d2d2019748cbda0b7b9702d
SHA256:
7597007b7fd82fa6fc079ad255cc80561c20be4bc515df7968b4b0e377292774
SSDeep:
196608:H4KKCX5FvaeoDcBdxmOJR7nxOKOmE7dzaNQwr:H4KKCX5FvaVczxmUJnYSE7dzAT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
7a135b705144747a6c9c6ca7aba805a8
SHA1:
26ea9722ecd5752725a0d93349a33efda2564bed
SHA256:
23874cdde40db8ba8aa11b9375b2304f8830fe47abe748a6b7a3e9fa2fb95b4a
SSDeep:
48:TJ+W7CEqLPCi4F1wCHCfbS4QtWnEMa77oBPtsJskhP:D7sTCi40CHCfbcWlz6hP
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
66f9b3548f10cad76a7824d11d9c326d
SHA1:
f1f73460759c243c7610162c9cf20c6fd95c2af5
SHA256:
85b1624d897013e1652f604488d16374b476272ca8ac37d429a1a3f38a74745a
SSDeep:
49152:zDxL8QBonTex4S120ytJyegIP8g/D+gEYyxzkygI7H23:zR89K1mgq8SzygIC3
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
d133b3457e95fa2da4f5ac4000e1e61f
SHA1:
31d29f8b38cfe1523f9fa9fada33fbe88531bd9c
SHA256:
a9e01e52871efed55b2bb7586fdd5893bb1ed01dff383abea297976bd6779c64
SSDeep:
48:Z9ylnJ5zCcapE0uGa96YEwgzLJhEVzdnVhM5:HoLzfapEfvEwuMptVhM5
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
72ba591defbc4bbd152ea6a01ebb9aa7
SHA1:
3417dc35c1253e93f5d28d82b19e1495a4974945
SHA256:
7feb6327ea9df2299541f48c539184fa7dc3f4478a8c4a729e6315dace01a4ce
SSDeep:
48:JhM1F2oY5+nABJ8rkAm0uUzshmBNGTBUIkWlefXF7hP:doY0nRkAmlJaIkWlefphP
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
2f8091e0eed05ba993841c584341d143
SHA1:
d3760ad6e93425918a30da0ae72b193f022483c1
SHA256:
8567ed57b4eb0327b8780962c375e228733fc5a7e51605c67571d9946e3dde7a
SSDeep:
49152:fHYLL/WoWLljb1R6rOSN20yRJ6XZdIDSXkEQHRaSWbecr:fqLVW6vDZdIDSXkbaXqu
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
dd0d7f1daea41b8b64df52125bd93273
SHA1:
d51771050fda6a4f3fa6d36646925db031bf15f3
SHA256:
f7af7ace7d3e4961133d2743a209803385dd5fee9c1c97e3e60b95837af20cbd
SSDeep:
96:9pgr1iE0RvLMn2PD10Q5uoa3lGoSGzcXJu0DR8ae:9pIiDvwngD10Qsoa3lGo5cZu0d8ae
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
b8af9bcea7649652fe0c6614744cb20f
SHA1:
5cb45e5f0868512cb46da8c04e5f1667b1c30e4c
SHA256:
3a5fb7469eb4ae57eb4f67d7e3110a1cf510d0ca0a1664fd1327ba5eac940898
SSDeep:
96:A9Hi3BfmxCgJuYxjo3zqGTXsFRKlGisnEez7yVN4CWae:KgkxdHW7TQKgWViPae
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
94e5f298c755ec47c40c80ba6762c4df
SHA1:
a8a0c52499c1e2d8873f09cf4e4469b4bd32d83c
SHA256:
938d7481785dcaa41eb6975c68c389ff83d8e459dc6152491295dee705e108ca
SSDeep:
48:A8ItkzlHJN9Ipf7KtKjva6lUVMmk75mdg8R9NmI/iUbeRfnQQj7AYgdPCwCyENPz:xHJMpf7IAva6lLmkYdgy946iDtT/oZ1M
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
4fb6c079967f604d4b8cdf477caf6de0
SHA1:
a8777ca0e49e5d98d01a6b007c7b62b5dffb5b63
SHA256:
9fac05c1ffc4b8060b0a5b942d35cc90c0bff012af1a00a6712c6d03018b083f
SSDeep:
196608:MaurJM4k8IMj3kMxfGbWaxJMKMA4JxuiNQG3A2r7rfiSFhysD8uxDxKj:EOn8IQkM2BFEx96G3AUf7FnzKj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
3f952169dfe5a4c68e9d4e4237957762
SHA1:
e4d175a559de56f7d7d17b3870505c7fc30456cd
SHA256:
27853c55513d68c15c1c1bb66b442cf7844dec50277963a89b877906a9196970
SSDeep:
49152:zDxL8QBoSTex4S120ytJyzGOkwjaDKOlIwf+neDyp1:zR89r1KOk4aju
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
b1871862dc5a0d1d0858decab13326fb
SHA1:
51e1170cef2b4f0b93e1de7866ebf093bb5173cc
SHA256:
aae19b64cac0850cc7c1b5f33e26266ac76bbde7adc4b8408e8827cccfe6c637
SSDeep:
48:n5rv7p0yltNDjNkCLU0A7x7hDgfZMJRX/iNGwFzGDsZO63fae:n5LHNDjK6A7wfqX/iNGKGWae
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
052b4a3aaf24e1879297e0f1408c7662
SHA1:
ccf2d2087988828f8117c27f1ec3ccaf4b5b926d
SHA256:
6c23fd16b44e1eefdf52ac7ad99a1fc46a9b4b3e77c6643dd26d1ad79a2d1021
SSDeep:
196608:Vf1gRyjQR9g8YYIcjfXontQdQGzFZaGkGdN7p06H1JX/WanfW/OIV0h:V1WbR9YY5AJGBZWGRz1kaza0h
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
eb4709f7f5ecd03855c18accb9343c4d
SHA1:
742581827a40bb6bfc4a91297c05aead82a50d4a
SHA256:
f953ade77b9ccf0c5d71726b26b233bfef18100a7622f7fc68800873409139f2
SSDeep:
12288:t7csmGHBB2LZjYyqEHtb0GPKBi8sBUs3bZp2eth3oEZeUr7IJ2M6mnl6qUyQCu4x:2dRLZjkENWBiF3NpftVNjrdqrBx
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
6ec3841422ec406e1dd3b1870c42973c
SHA1:
b96406901ad4e39d6ee38149337514604f701171
SHA256:
f285910109078b4b11875c239128c9837d9757bd8c725f33dd72b18710c77b9b
SSDeep:
48:L4V+e8U2xqD8omnudAPGJ+sVJTDx7wDtNfae:L1eRIopdAeJ+KJfx7gJae
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
42ac6eff5aa1dad153cb32ec3d616e43
SHA1:
8d8693b1d4aa27f2f48345e6f2e760c5f205d163
SHA256:
b8984acb419b90aab0f7fd9addaa90b10847e75aeaabfde74fc133085adf3455
SSDeep:
196608:Yu6eDsIwHBL4B9lCzT2bOgcDuihGYrLpVUBJ/7HAFGtNy6aMhnRTU+:WqsIwHNB26gVE7e/7JNMM5RTU+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi
|
MD5:
95006e2f89a67b3c879bd5d4f50805fc
SHA1:
962aa8b7b35128e4968e22c40cf333ee2d6b32af
SHA256:
1f0388ac35391f0f5afe8e24f487f6d3f2863665161b10c7749c30d71ba27279
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
a06f93002d3d3094e95cb8407bf74645
SHA1:
771e3cf2329e19aa1d428246373a62664ec9e3c1
SHA256:
a54c2b782c2cc356c30e9f5e163d4c195de1275e79728cd60da1ceaee8f1bc00
SSDeep:
24576:Mw0/ZWIzSdXei669OjW+KuSqcYl0jnzajY2fF:Mw0gkSdXeiGhUYl0jzaM2fF
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml
|
MD5:
253250ecef24e59cbe308e437e2fef34
SHA1:
cecf6a97c73c87eb8153ded4da6365f2f576a902
SHA256:
4459de34f31d879717f63fcf0b48c4b322ee763c7e60d4b0e2a2a61a7805cf43
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
1ccfa630c8141ba89eadc857692035bd
SHA1:
ef6da702b406a6b275bc1a08496ad081f2be1801
SHA256:
fd3d888d44717d253e5d5704fc76afcd5ffce203d9948d3e8c9fef2eb0c8aa88
SSDeep:
48:rI43dw/GGkzGT8BKZSSazXLTUWbckfghfae:EOdaJkz68gZBavTskyae
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi
|
MD5:
c8da5caacd4f28358accb67d232058fb
SHA1:
4cae94c4c6229bccd07a118e950e071df5e7317d
SHA256:
2fa71fb4e91b82d6c0b08dd909496d7a6397c0bb2f7ae1dcc6af7bbfdc25a47c
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
71b4c9e97afc969e0e19c8e27023ab46
SHA1:
e3f4ecd26c32e5e6bb2d89fac6acbc6f317aeb74
SHA256:
02c9285465ab1c76de079662fd8e9bd26d4f31213bce84523ee7c36fea12fce3
SSDeep:
12288:56K0f61djjAYaY9hoo/3P/4iPjCNWA7GYoUVPp9XJgZFh0+Pn3pHgiRN4DLj:vy61djD9ht3P/4iPnctX2HC6uY4Hj
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
e8ba96ee98f6f2a60e2499e70be73949
SHA1:
ae49a5a1b97eeddab5f2deeb86f85b915821f7ef
SHA256:
b426de4091baa8ca975563b2b0399a83512780d56e5d5bc23b920ac19eb227e8
SSDeep:
48:MfPIefogm0OagTdd/01nmBoADpbCzBPONfae:MXI6ogm0OagRd81nyPpbC8Jae
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\DBSAMPLE.MDB
|
MD5:
17833cd72a9b90e9b136537543371086
SHA1:
f1b5a8060b0453f88befa94e4235bbb81f6868f4
SHA256:
adf07c721bf8503b77233ff8e3321e01da20d5e5186e07f84c5d9f9e137c1f5e
SSDeep:
3072:z53cIytzy8R5s53cIyhpqJ+VbqArx7e53cIyxt4dpP:Qy2sJ+pqV
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\DBSAMPLE.MDB.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
90fd7a1c75a0d96ec4d252505d8c34ed
SHA1:
9913ceb86d4cde4a90a1d72ef4270b5634cd23b2
SHA256:
0ba671bc67a4e6be26e49be7530a862a7e05fe6e845d13d008404d865a987fd2
SSDeep:
12288:7fwBM/oFXo0Ok3mNWRTeO7vlW2vxg8AHwn:rw8oXmo/Dr1QQ
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZLIB.ACCDE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
11421254ed3d0d5d8ddc68a70f4ec41f
SHA1:
2aaa1f5ef47ff6ef9324b2148bf31d649b79526e
SHA256:
655c4bf73643c7b866ea468aca909a83a0311e088d22f08b2a89b80ec46ccff8
SSDeep:
49152:4TtaGNhy1sgW1X4PbD+LQar8c/lA62c6BMzrbKTmMRObEgU:2taG+sB4+xV/lAjrqvOV
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZMAIN.ACCDE
|
MD5:
552e8977f5df5083af2f5b76ee212be6
SHA1:
c394b28490f5aa0cc1b9b329cc75eae0c55e9b46
SHA256:
70c4b10caa014eab7710a62232b1a6ecfe0318e6947ff067c032518051b20577
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZMAIN.ACCDE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
b0a6bc525899a0c169c502a47a7c7bfd
SHA1:
b56ba5ab111a764cc74db44e8a7ccdf58fb1e64a
SHA256:
e00b934e0ae8567b7ea2bcf45538b9b5e3322ac294e2b57cc36d50710ddd1a3f
SSDeep:
196608:kOzYTZ01Z71ULCC6qmYSieI8UiETPQR9woquIOXHIkvV+b/V+R:komZ01d1SXsrS8Uv0WkHHIV+R
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
37302bb5141f3828ad5c4fb30d3ff23b
SHA1:
b53ffe03f1eef72ab0933d6a69cb9297e2c24c09
SHA256:
8a1753c137f7615f60310b80ec59e3c2d91ccbd057602447a6872c717af28b15
SSDeep:
48:XJ+WPvbwGJu5GEPp2PuU9KqCCEgW5x7Jvi9thM5:XRHbrU1P4PxoqCp9i9thM5
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
MD5:
3d0e1f18676626331ffefafe53b18248
SHA1:
80d370bf723a4b00b769c1a7266d63de82280ab0
SHA256:
9ceac29cec7a9772266c3c6ed68bc7f25dcb38c12c388fe9f21e58890e9cf26f
SSDeep:
196608:PFNUxdiOm1j3/abCsYwFOSQo2pWDOQs4hW6s63HS:qPmN3/abtYIQoROQ93RS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml
|
MD5:
efd430f88405299f7558a5296c023232
SHA1:
175e61fa16d4d01ecc55dc8630fad31fbf42d749
SHA256:
2a9cd7b29cc73d8f10a677c92a21c3abad696218d1233010f5c4bf7039b96495
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
|
MD5:
5f54d1240735d46980b776af554f44d3
SHA1:
acf7707c08973ddfdb27cd361442ccfba355c888
SHA256:
2c80619d7e7c58257293cda3a878c13e5856f4e06f6f90601276f7b9179c9e07
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\BOOTSECT.BAK
|
MD5:
0829f71740aab1ab98b33eae21dee122
SHA1:
0631457264ff7f8d5fb1edc2c0211992a67c73e6
SHA256:
9f1dcbc35c350d6027f98be0f5c8b43b42ca52b7604459c0c42be3aa88913d47
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\Boot\BOOTSTAT.DAT
|
MD5:
fcd6bcb56c1689fcef28b57c22475bad
SHA1:
1adc95bebe9eea8c112d40cd04ab7a8d75c4f961
SHA256:
de2f256064a0af797747c2b97505dc0b9f3df0de4f489eac731c23ae9ca9cc31
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
d2e90bd930bee98c715ec1d802ab935a
SHA1:
3204c569d64308bc5b1ac5b825563f3610ad14e8
SHA256:
12b81f0e9e06baf8b74c51497aedd8eeaa89709595942ec8c63beb483fc6e0d4
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml
|
MD5:
950ebe96859f7ad2194cce45ba32bede
SHA1:
ec77126b84fba5f858a84cde4373e1724c86d481
SHA256:
1db92b26f408ddb6f3ac47574cd49cf4dc131efa8090477bf6d0a5feea4bdf1c
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
9c1262e9de9e1e1227b1f36c77d666ab
SHA1:
8ac7f5cdecc8bd37e427207bb80549695990c29f
SHA256:
fad633fb2e3d2071d7dfbf53a198d00746f5cd4312320729229b745c4f3d025c
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
240c101021f4fb1f6040c0c16a555451
SHA1:
81ec16df628dd51070e4b761706aa7e58e605a78
SHA256:
5560728cd337269adfd6161f2c48cdffaaeff9eca07f5fd09956967cf4c87e2f
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml
|
MD5:
95900e8f13e4da177a018c5b3b6dcf2a
SHA1:
3f7662cf0d34663748215177755886ca1766dcaf
SHA256:
203f971eca23549aebe7fb6ca3f79264883a4f525c7db03a6a437b49721ecce2
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
79ac622f56587ebed45dc833a72530aa
SHA1:
0cac3ba3f2e48a4b8d8becbc71157e6761fda067
SHA256:
d006a17d09b65c88530cc5c02724748b74f7a91f61e730a09c1da0d58acd0082
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
eda49a0ed86eb8e61f1da10c08f970a8
SHA1:
d688605b94523f334263b5ddb99f3c2e9a66972b
SHA256:
6888f28f568d155c7bf9e7d38265c5283552d4b61ade61e6b79c1a6c48cf7b01
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml
|
MD5:
bf6cff3efd1885d0c10c46f176e85c7a
SHA1:
256ac5a1c9ff8cbb15506d43ad4b7b02d75cbf77
SHA256:
09cec5a5bd8afffbb758753810a20c55ccb06a46d7bf54eda69ecd2ad645ef11
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi
|
MD5:
c20c17d296568bf094605020fc95a086
SHA1:
09f001b3668863255d60efac965823581bd5f271
SHA256:
14a0eadf1e581026db83707bc20aee65db5f4b7f239c3ba791d04cd78d8f5dae
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml
|
MD5:
d644635e2def821fda81a9bf6b7dd748
SHA1:
3ef9761c7f5e9b9e0ff7d7363d67c8b729d20f36
SHA256:
c5f174edf377e226270cbd7c2f61eda547a66c91efda4b03b7cf2a67241ec483
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
\\?\C:\Program Files\Microsoft Office\Office14\1033\DBSAMPLE.MDB
|
MD5:
6e70af9e1686820a7dca1c4bff45a82c
SHA1:
385722cc3c68a93dba3718ba6348f2d43e2467d2
SHA256:
792fb941cb6397d87eb963354ef7af17dc8bad5642ccd6c4a8f283c868c36fd5
SSDeep:
3::
ImpHash:
-
|
|
Modified File
|
|
\\?\C:\Program Files\Microsoft Office\Office14\ACCWIZ\ACWZLIB.ACCDE
|
MD5:
36c0570538c92efcb5f66deeed9c2fa3
SHA1:
0c9c2f5e0a16c39ba8170ca712a198aee676d27a
SHA256:
60840ebe89c25a45643458246c34e43315d67bca75118a904c9bdc80a018c199
SSDeep:
3::
ImpHash:
-
|
Access, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\spfs.txt
|
-
|
Access, Create
|
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop
|
-
|
Access
|
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\spfs.txt
|
-
|
Access
|
|
|
C:\Windows\system32
|
-
|
Access
|
|
|
C:\Windows\system32\MFC42u.dll
|
-
|
Access
|
|
|
C:\Windows\system32\cmd.exe
|
-
|
Access
|
|
|
\\?\C:\BOOTSECT.BAK
|
-
|
Access
|
|
|
\\?\C:\BOOTSECT.BAK.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\BCD
|
-
|
Access
|
|
|
\\?\C:\Boot\BCD.LOG
|
-
|
Access
|
|
|
\\?\C:\Boot\BCD.LOG1
|
-
|
Access
|
|
|
\\?\C:\Boot\BCD.LOG2
|
-
|
Access
|
|
|
\\?\C:\Boot\Fonts\chs_boot.ttf
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\chs_boot.ttf.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\cht_boot.ttf
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\cht_boot.ttf.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\jpn_boot.ttf
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\jpn_boot.ttf.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\kor_boot.ttf
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\kor_boot.ttf.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Boot\Fonts\wgl4_boot.ttf
|
-
|
Access
|
|
|
\\?\C:\Boot\Fonts\wgl4_boot.ttf.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\cs-CZ\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\cs-CZ\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\da-DK\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\da-DK\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\de-DE\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\de-DE\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\el-GR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\el-GR\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\en-US\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\en-US\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\en-US\memtest.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\en-US\memtest.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\es-ES\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\es-ES\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\fi-FI\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\fi-FI\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\fr-FR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\fr-FR\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\hu-HU\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\hu-HU\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\it-IT\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\it-IT\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\ja-JP\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\ja-JP\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\ko-KR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\ko-KR\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\memtest.exe
|
-
|
Access
|
|
|
\\?\C:\Boot\memtest.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\nb-NO\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\nb-NO\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\nl-NL\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\nl-NL\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\pl-PL\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\pl-PL\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\pt-BR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\pt-BR\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\pt-PT\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\pt-PT\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\ru-RU\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\ru-RU\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\sv-SE\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\sv-SE\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\tr-TR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\tr-TR\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-CN\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-CN\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-HK\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-HK\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-TW\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-TW\bootmgr.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access, Delete
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL
|
-
|
Access, Create, Delete
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.id[9C354B42-3003].[DavidsHelper@protonmail.com].eking
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL
|
-
|
Access
|
|
|
For performance reasons, the remaining 2309 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|