VMRay Analyzer Report for Sample #168189
VMRay Analyzer
3.1.1
Process
1
1128
payload2.exe
2144
payload2.exe
"C:\Users\FD1HVy\Desktop\payload2.exe"
C:\Users\FD1HVy\Desktop\
c:\users\fd1hvy\desktop\payload2.exe
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Created
Created
Opened
Opened
Opened
Opened
Process
2
1528
cmd.exe
1128
cmd.exe
"C:\WINDOWS\system32\cmd.exe"
C:\Users\FD1HVy\Desktop\
c:\windows\system32\cmd.exe
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Process
4
3736
mode.com
1528
mode.com
mode con cp select=1251
C:\Users\FD1HVy\Desktop\
c:\windows\system32\mode.com
Process
5
3440
payload2.exe
2456
payload2.exe
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\payload2.exe"
C:\WINDOWS\system32\
c:\programdata\microsoft\windows\start menu\programs\startup\payload2.exe
Opened
Opened
Process
6
3452
payload2.exe
2456
payload2.exe
"C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\payload2.exe"
C:\WINDOWS\system32\
c:\users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
Child_Of
Child_Of
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Created
Created
Opened
Opened
Opened
Opened
Modified_Properties_Of
Opened
Process
7
3468
cmd.exe
3452
cmd.exe
"C:\WINDOWS\system32\cmd.exe"
C:\WINDOWS\system32\
c:\windows\system32\cmd.exe
Child_Of
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Process
10
3624
mode.com
3468
mode.com
mode con cp select=1251
C:\WINDOWS\system32\
c:\windows\system32\mode.com
Process
11
3780
vssadmin.exe
3468
vssadmin.exe
vssadmin delete shadows /all /quiet
C:\WINDOWS\system32\
c:\windows\system32\vssadmin.exe
Process
12
3924
payload2.exe
3452
payload2.exe
"C:\Users\FD1HVy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\payload2.exe" -a
C:\WINDOWS\system32\
c:\users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Opened
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Opened
Opened
Opened
Opened
Opened
Opened
Process
13
3936
cmd.exe
3924
cmd.exe
"C:\WINDOWS\system32\cmd.exe"
C:\WINDOWS\system32\
c:\windows\system32\cmd.exe
Process
15
4016
cmd.exe
3452
cmd.exe
"C:\WINDOWS\system32\cmd.exe"
C:\WINDOWS\system32\
c:\windows\system32\cmd.exe
File
users\fd1hvy\desktop\payload2.exe
users\fd1hvy\desktop\payload2.exe
c:\
c:\users\fd1hvy\desktop\payload2.exe
exe
File
$getcurrent\safeos\getcurrentoobe.dll
$getcurrent\safeos\getcurrentoobe.dll
c:\
c:\$getcurrent\safeos\getcurrentoobe.dll
dll
File
$getcurrent\logs\downlevel_2017_09_07_02_02_39_766.log
$getcurrent\logs\downlevel_2017_09_07_02_02_39_766.log
c:\
c:\$getcurrent\logs\downlevel_2017_09_07_02_02_39_766.log
log
File
$getcurrent\logs\oobe_2017_09_07_03_08_57_737.log
$getcurrent\logs\oobe_2017_09_07_03_08_57_737.log
c:\
c:\$getcurrent\logs\oobe_2017_09_07_03_08_57_737.log
log
File
$getcurrent\logs\partnersetupcompleteresult.log
$getcurrent\logs\partnersetupcompleteresult.log
c:\
c:\$getcurrent\logs\partnersetupcompleteresult.log
log
File
$getcurrent\safeos\getcurrentrollback.ini
$getcurrent\safeos\getcurrentrollback.ini
c:\
c:\$getcurrent\safeos\getcurrentrollback.ini
ini
File
$recycle.bin\s-1-5-18\desktop.ini
$recycle.bin\s-1-5-18\desktop.ini
c:\
c:\$recycle.bin\s-1-5-18\desktop.ini
ini
File
$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
c:\
c:\$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
ini
File
$getcurrent\safeos\partnersetupcomplete.cmd
$getcurrent\safeos\partnersetupcomplete.cmd
c:\
c:\$getcurrent\safeos\partnersetupcomplete.cmd
cmd
File
$getcurrent\safeos\preoobe.cmd
$getcurrent\safeos\preoobe.cmd
c:\
c:\$getcurrent\safeos\preoobe.cmd
cmd
File
$getcurrent\safeos\setupcomplete.cmd
$getcurrent\safeos\setupcomplete.cmd
c:\
c:\$getcurrent\safeos\setupcomplete.cmd
cmd
File
$winre_backup_partition.marker
$winre_backup_partition.marker
c:\
c:\$winre_backup_partition.marker
marker
File
588bce7c90097ed212\1025\eula.rtf
588bce7c90097ed212\1025\eula.rtf
c:\
c:\588bce7c90097ed212\1025\eula.rtf
rtf
File
588bce7c90097ed212\1028\eula.rtf
588bce7c90097ed212\1028\eula.rtf
c:\
c:\588bce7c90097ed212\1028\eula.rtf
rtf
File
588bce7c90097ed212\1025\localizeddata.xml
588bce7c90097ed212\1025\localizeddata.xml
c:\
c:\588bce7c90097ed212\1025\localizeddata.xml
xml
File
588bce7c90097ed212\1028\localizeddata.xml
588bce7c90097ed212\1028\localizeddata.xml
c:\
c:\588bce7c90097ed212\1028\localizeddata.xml
xml
File
588bce7c90097ed212\1025\setupresources.dll
588bce7c90097ed212\1025\setupresources.dll
c:\
c:\588bce7c90097ed212\1025\setupresources.dll
dll
File
588bce7c90097ed212\1029\eula.rtf
588bce7c90097ed212\1029\eula.rtf
c:\
c:\588bce7c90097ed212\1029\eula.rtf
rtf
File
588bce7c90097ed212\1029\localizeddata.xml
588bce7c90097ed212\1029\localizeddata.xml
c:\
c:\588bce7c90097ed212\1029\localizeddata.xml
xml
File
588bce7c90097ed212\1030\eula.rtf
588bce7c90097ed212\1030\eula.rtf
c:\
c:\588bce7c90097ed212\1030\eula.rtf
rtf
File
588bce7c90097ed212\1030\localizeddata.xml
588bce7c90097ed212\1030\localizeddata.xml
c:\
c:\588bce7c90097ed212\1030\localizeddata.xml
xml
File
588bce7c90097ed212\1031\eula.rtf
588bce7c90097ed212\1031\eula.rtf
c:\
c:\588bce7c90097ed212\1031\eula.rtf
rtf
File
588bce7c90097ed212\1031\localizeddata.xml
588bce7c90097ed212\1031\localizeddata.xml
c:\
c:\588bce7c90097ed212\1031\localizeddata.xml
xml
File
588bce7c90097ed212\1032\eula.rtf
588bce7c90097ed212\1032\eula.rtf
c:\
c:\588bce7c90097ed212\1032\eula.rtf
rtf
File
588bce7c90097ed212\1032\localizeddata.xml
588bce7c90097ed212\1032\localizeddata.xml
c:\
c:\588bce7c90097ed212\1032\localizeddata.xml
xml
File
588bce7c90097ed212\1028\setupresources.dll
588bce7c90097ed212\1028\setupresources.dll
c:\
c:\588bce7c90097ed212\1028\setupresources.dll
dll
File
588bce7c90097ed212\1029\setupresources.dll
588bce7c90097ed212\1029\setupresources.dll
c:\
c:\588bce7c90097ed212\1029\setupresources.dll
dll
File
588bce7c90097ed212\1033\eula.rtf
588bce7c90097ed212\1033\eula.rtf
c:\
c:\588bce7c90097ed212\1033\eula.rtf
rtf
File
588bce7c90097ed212\1030\setupresources.dll
588bce7c90097ed212\1030\setupresources.dll
c:\
c:\588bce7c90097ed212\1030\setupresources.dll
dll
File
588bce7c90097ed212\1031\setupresources.dll
588bce7c90097ed212\1031\setupresources.dll
c:\
c:\588bce7c90097ed212\1031\setupresources.dll
dll
File
588bce7c90097ed212\1032\setupresources.dll
588bce7c90097ed212\1032\setupresources.dll
c:\
c:\588bce7c90097ed212\1032\setupresources.dll
dll
File
588bce7c90097ed212\1033\localizeddata.xml
588bce7c90097ed212\1033\localizeddata.xml
c:\
c:\588bce7c90097ed212\1033\localizeddata.xml
xml
File
588bce7c90097ed212\1035\eula.rtf
588bce7c90097ed212\1035\eula.rtf
c:\
c:\588bce7c90097ed212\1035\eula.rtf
rtf
File
588bce7c90097ed212\1033\setupresources.dll
588bce7c90097ed212\1033\setupresources.dll
c:\
c:\588bce7c90097ed212\1033\setupresources.dll
dll
File
588bce7c90097ed212\1035\setupresources.dll
588bce7c90097ed212\1035\setupresources.dll
c:\
c:\588bce7c90097ed212\1035\setupresources.dll
dll
File
588bce7c90097ed212\1036\setupresources.dll
588bce7c90097ed212\1036\setupresources.dll
c:\
c:\588bce7c90097ed212\1036\setupresources.dll
dll
File
588bce7c90097ed212\1037\setupresources.dll
588bce7c90097ed212\1037\setupresources.dll
c:\
c:\588bce7c90097ed212\1037\setupresources.dll
dll
File
588bce7c90097ed212\1038\setupresources.dll
588bce7c90097ed212\1038\setupresources.dll
c:\
c:\588bce7c90097ed212\1038\setupresources.dll
dll
File
588bce7c90097ed212\1035\localizeddata.xml
588bce7c90097ed212\1035\localizeddata.xml
c:\
c:\588bce7c90097ed212\1035\localizeddata.xml
xml
File
588bce7c90097ed212\1036\eula.rtf
588bce7c90097ed212\1036\eula.rtf
c:\
c:\588bce7c90097ed212\1036\eula.rtf
rtf
File
588bce7c90097ed212\1036\localizeddata.xml
588bce7c90097ed212\1036\localizeddata.xml
c:\
c:\588bce7c90097ed212\1036\localizeddata.xml
xml
File
588bce7c90097ed212\1037\localizeddata.xml
588bce7c90097ed212\1037\localizeddata.xml
c:\
c:\588bce7c90097ed212\1037\localizeddata.xml
xml
File
588bce7c90097ed212\1038\eula.rtf
588bce7c90097ed212\1038\eula.rtf
c:\
c:\588bce7c90097ed212\1038\eula.rtf
rtf
File
588bce7c90097ed212\1038\localizeddata.xml
588bce7c90097ed212\1038\localizeddata.xml
c:\
c:\588bce7c90097ed212\1038\localizeddata.xml
xml
File
588bce7c90097ed212\1040\setupresources.dll
588bce7c90097ed212\1040\setupresources.dll
c:\
c:\588bce7c90097ed212\1040\setupresources.dll
dll
File
588bce7c90097ed212\1041\setupresources.dll
588bce7c90097ed212\1041\setupresources.dll
c:\
c:\588bce7c90097ed212\1041\setupresources.dll
dll
File
588bce7c90097ed212\1042\setupresources.dll
588bce7c90097ed212\1042\setupresources.dll
c:\
c:\588bce7c90097ed212\1042\setupresources.dll
dll
File
588bce7c90097ed212\1040\eula.rtf
588bce7c90097ed212\1040\eula.rtf
c:\
c:\588bce7c90097ed212\1040\eula.rtf
rtf
File
588bce7c90097ed212\1040\localizeddata.xml
588bce7c90097ed212\1040\localizeddata.xml
c:\
c:\588bce7c90097ed212\1040\localizeddata.xml
xml
File
588bce7c90097ed212\1041\eula.rtf
588bce7c90097ed212\1041\eula.rtf
c:\
c:\588bce7c90097ed212\1041\eula.rtf
rtf
File
588bce7c90097ed212\1043\setupresources.dll
588bce7c90097ed212\1043\setupresources.dll
c:\
c:\588bce7c90097ed212\1043\setupresources.dll
dll
File
588bce7c90097ed212\1044\setupresources.dll
588bce7c90097ed212\1044\setupresources.dll
c:\
c:\588bce7c90097ed212\1044\setupresources.dll
dll
File
588bce7c90097ed212\1045\setupresources.dll
588bce7c90097ed212\1045\setupresources.dll
c:\
c:\588bce7c90097ed212\1045\setupresources.dll
dll
File
588bce7c90097ed212\1046\setupresources.dll
588bce7c90097ed212\1046\setupresources.dll
c:\
c:\588bce7c90097ed212\1046\setupresources.dll
dll
File
588bce7c90097ed212\1037\eula.rtf
588bce7c90097ed212\1037\eula.rtf
c:\
c:\588bce7c90097ed212\1037\eula.rtf
rtf
File
588bce7c90097ed212\1041\localizeddata.xml
588bce7c90097ed212\1041\localizeddata.xml
c:\
c:\588bce7c90097ed212\1041\localizeddata.xml
xml
File
588bce7c90097ed212\1042\eula.rtf
588bce7c90097ed212\1042\eula.rtf
c:\
c:\588bce7c90097ed212\1042\eula.rtf
rtf
File
588bce7c90097ed212\1042\localizeddata.xml
588bce7c90097ed212\1042\localizeddata.xml
c:\
c:\588bce7c90097ed212\1042\localizeddata.xml
xml
File
588bce7c90097ed212\1043\eula.rtf
588bce7c90097ed212\1043\eula.rtf
c:\
c:\588bce7c90097ed212\1043\eula.rtf
rtf
File
588bce7c90097ed212\1049\setupresources.dll
588bce7c90097ed212\1049\setupresources.dll
c:\
c:\588bce7c90097ed212\1049\setupresources.dll
dll
File
588bce7c90097ed212\1053\setupresources.dll
588bce7c90097ed212\1053\setupresources.dll
c:\
c:\588bce7c90097ed212\1053\setupresources.dll
dll
File
588bce7c90097ed212\1055\setupresources.dll
588bce7c90097ed212\1055\setupresources.dll
c:\
c:\588bce7c90097ed212\1055\setupresources.dll
dll
File
588bce7c90097ed212\1043\localizeddata.xml
588bce7c90097ed212\1043\localizeddata.xml
c:\
c:\588bce7c90097ed212\1043\localizeddata.xml
xml
File
588bce7c90097ed212\1044\eula.rtf
588bce7c90097ed212\1044\eula.rtf
c:\
c:\588bce7c90097ed212\1044\eula.rtf
rtf
File
588bce7c90097ed212\1044\localizeddata.xml
588bce7c90097ed212\1044\localizeddata.xml
c:\
c:\588bce7c90097ed212\1044\localizeddata.xml
xml
File
588bce7c90097ed212\1045\eula.rtf
588bce7c90097ed212\1045\eula.rtf
c:\
c:\588bce7c90097ed212\1045\eula.rtf
rtf
File
588bce7c90097ed212\1045\localizeddata.xml
588bce7c90097ed212\1045\localizeddata.xml
c:\
c:\588bce7c90097ed212\1045\localizeddata.xml
xml
File
588bce7c90097ed212\1046\eula.rtf
588bce7c90097ed212\1046\eula.rtf
c:\
c:\588bce7c90097ed212\1046\eula.rtf
rtf
File
588bce7c90097ed212\2052\setupresources.dll
588bce7c90097ed212\2052\setupresources.dll
c:\
c:\588bce7c90097ed212\2052\setupresources.dll
dll
File
588bce7c90097ed212\2070\setupresources.dll
588bce7c90097ed212\2070\setupresources.dll
c:\
c:\588bce7c90097ed212\2070\setupresources.dll
dll
File
588bce7c90097ed212\3076\setupresources.dll
588bce7c90097ed212\3076\setupresources.dll
c:\
c:\588bce7c90097ed212\3076\setupresources.dll
dll
File
588bce7c90097ed212\3082\setupresources.dll
588bce7c90097ed212\3082\setupresources.dll
c:\
c:\588bce7c90097ed212\3082\setupresources.dll
dll
File
588bce7c90097ed212\displayicon.ico
588bce7c90097ed212\displayicon.ico
c:\
c:\588bce7c90097ed212\displayicon.ico
ico
File
588bce7c90097ed212\graphics\print.ico
588bce7c90097ed212\graphics\print.ico
c:\
c:\588bce7c90097ed212\graphics\print.ico
ico
File
588bce7c90097ed212\graphics\rotate1.ico
588bce7c90097ed212\graphics\rotate1.ico
c:\
c:\588bce7c90097ed212\graphics\rotate1.ico
ico
File
588bce7c90097ed212\graphics\rotate2.ico
588bce7c90097ed212\graphics\rotate2.ico
c:\
c:\588bce7c90097ed212\graphics\rotate2.ico
ico
File
588bce7c90097ed212\graphics\rotate3.ico
588bce7c90097ed212\graphics\rotate3.ico
c:\
c:\588bce7c90097ed212\graphics\rotate3.ico
ico
File
588bce7c90097ed212\graphics\rotate4.ico
588bce7c90097ed212\graphics\rotate4.ico
c:\
c:\588bce7c90097ed212\graphics\rotate4.ico
ico
File
588bce7c90097ed212\1046\localizeddata.xml
588bce7c90097ed212\1046\localizeddata.xml
c:\
c:\588bce7c90097ed212\1046\localizeddata.xml
xml
File
588bce7c90097ed212\1049\eula.rtf
588bce7c90097ed212\1049\eula.rtf
c:\
c:\588bce7c90097ed212\1049\eula.rtf
rtf
File
588bce7c90097ed212\1049\localizeddata.xml
588bce7c90097ed212\1049\localizeddata.xml
c:\
c:\588bce7c90097ed212\1049\localizeddata.xml
xml
File
588bce7c90097ed212\1053\eula.rtf
588bce7c90097ed212\1053\eula.rtf
c:\
c:\588bce7c90097ed212\1053\eula.rtf
rtf
File
588bce7c90097ed212\1053\localizeddata.xml
588bce7c90097ed212\1053\localizeddata.xml
c:\
c:\588bce7c90097ed212\1053\localizeddata.xml
xml
File
588bce7c90097ed212\graphics\rotate5.ico
588bce7c90097ed212\graphics\rotate5.ico
c:\
c:\588bce7c90097ed212\graphics\rotate5.ico
ico
File
588bce7c90097ed212\graphics\rotate6.ico
588bce7c90097ed212\graphics\rotate6.ico
c:\
c:\588bce7c90097ed212\graphics\rotate6.ico
ico
File
588bce7c90097ed212\graphics\rotate7.ico
588bce7c90097ed212\graphics\rotate7.ico
c:\
c:\588bce7c90097ed212\graphics\rotate7.ico
ico
File
588bce7c90097ed212\1055\eula.rtf
588bce7c90097ed212\1055\eula.rtf
c:\
c:\588bce7c90097ed212\1055\eula.rtf
rtf
File
588bce7c90097ed212\1055\localizeddata.xml
588bce7c90097ed212\1055\localizeddata.xml
c:\
c:\588bce7c90097ed212\1055\localizeddata.xml
xml
File
588bce7c90097ed212\2052\eula.rtf
588bce7c90097ed212\2052\eula.rtf
c:\
c:\588bce7c90097ed212\2052\eula.rtf
rtf
File
588bce7c90097ed212\2052\localizeddata.xml
588bce7c90097ed212\2052\localizeddata.xml
c:\
c:\588bce7c90097ed212\2052\localizeddata.xml
xml
File
588bce7c90097ed212\2070\eula.rtf
588bce7c90097ed212\2070\eula.rtf
c:\
c:\588bce7c90097ed212\2070\eula.rtf
rtf
File
588bce7c90097ed212\2070\localizeddata.xml
588bce7c90097ed212\2070\localizeddata.xml
c:\
c:\588bce7c90097ed212\2070\localizeddata.xml
xml
File
588bce7c90097ed212\graphics\rotate8.ico
588bce7c90097ed212\graphics\rotate8.ico
c:\
c:\588bce7c90097ed212\graphics\rotate8.ico
ico
File
588bce7c90097ed212\graphics\save.ico
588bce7c90097ed212\graphics\save.ico
c:\
c:\588bce7c90097ed212\graphics\save.ico
ico
File
588bce7c90097ed212\graphics\setup.ico
588bce7c90097ed212\graphics\setup.ico
c:\
c:\588bce7c90097ed212\graphics\setup.ico
ico
File
588bce7c90097ed212\graphics\stop.ico
588bce7c90097ed212\graphics\stop.ico
c:\
c:\588bce7c90097ed212\graphics\stop.ico
ico
File
588bce7c90097ed212\graphics\sysreqmet.ico
588bce7c90097ed212\graphics\sysreqmet.ico
c:\
c:\588bce7c90097ed212\graphics\sysreqmet.ico
ico
File
588bce7c90097ed212\graphics\sysreqnotmet.ico
588bce7c90097ed212\graphics\sysreqnotmet.ico
c:\
c:\588bce7c90097ed212\graphics\sysreqnotmet.ico
ico
File
588bce7c90097ed212\graphics\warn.ico
588bce7c90097ed212\graphics\warn.ico
c:\
c:\588bce7c90097ed212\graphics\warn.ico
ico
File
588bce7c90097ed212\netfx_core.mzz
588bce7c90097ed212\netfx_core.mzz
c:\
c:\588bce7c90097ed212\netfx_core.mzz
mzz
File
588bce7c90097ed212\netfx_core_x64.msi
588bce7c90097ed212\netfx_core_x64.msi
c:\
c:\588bce7c90097ed212\netfx_core_x64.msi
msi
File
588bce7c90097ed212\3076\eula.rtf
588bce7c90097ed212\3076\eula.rtf
c:\
c:\588bce7c90097ed212\3076\eula.rtf
rtf
File
588bce7c90097ed212\3076\localizeddata.xml
588bce7c90097ed212\3076\localizeddata.xml
c:\
c:\588bce7c90097ed212\3076\localizeddata.xml
xml
File
588bce7c90097ed212\3082\eula.rtf
588bce7c90097ed212\3082\eula.rtf
c:\
c:\588bce7c90097ed212\3082\eula.rtf
rtf
File
588bce7c90097ed212\3082\localizeddata.xml
588bce7c90097ed212\3082\localizeddata.xml
c:\
c:\588bce7c90097ed212\3082\localizeddata.xml
xml
File
588bce7c90097ed212\client\parameterinfo.xml
588bce7c90097ed212\client\parameterinfo.xml
c:\
c:\588bce7c90097ed212\client\parameterinfo.xml
xml
File
588bce7c90097ed212\netfx_core_x86.msi
588bce7c90097ed212\netfx_core_x86.msi
c:\
c:\588bce7c90097ed212\netfx_core_x86.msi
msi
File
588bce7c90097ed212\client\uiinfo.xml
588bce7c90097ed212\client\uiinfo.xml
c:\
c:\588bce7c90097ed212\client\uiinfo.xml
xml
File
588bce7c90097ed212\extended\parameterinfo.xml
588bce7c90097ed212\extended\parameterinfo.xml
c:\
c:\588bce7c90097ed212\extended\parameterinfo.xml
xml
File
588bce7c90097ed212\extended\uiinfo.xml
588bce7c90097ed212\extended\uiinfo.xml
c:\
c:\588bce7c90097ed212\extended\uiinfo.xml
xml
File
588bce7c90097ed212\header.bmp
588bce7c90097ed212\header.bmp
c:\
c:\588bce7c90097ed212\header.bmp
bmp
File
588bce7c90097ed212\parameterinfo.xml
588bce7c90097ed212\parameterinfo.xml
c:\
c:\588bce7c90097ed212\parameterinfo.xml
xml
File
588bce7c90097ed212\netfx_extended.mzz
588bce7c90097ed212\netfx_extended.mzz
c:\
c:\588bce7c90097ed212\netfx_extended.mzz
mzz
File
588bce7c90097ed212\setupui.xsd
588bce7c90097ed212\setupui.xsd
c:\
c:\588bce7c90097ed212\setupui.xsd
xsd
File
588bce7c90097ed212\splashscreen.bmp
588bce7c90097ed212\splashscreen.bmp
c:\
c:\588bce7c90097ed212\splashscreen.bmp
bmp
File
588bce7c90097ed212\strings.xml
588bce7c90097ed212\strings.xml
c:\
c:\588bce7c90097ed212\strings.xml
xml
File
588bce7c90097ed212\uiinfo.xml
588bce7c90097ed212\uiinfo.xml
c:\
c:\588bce7c90097ed212\uiinfo.xml
xml
File
588bce7c90097ed212\watermark.bmp
588bce7c90097ed212\watermark.bmp
c:\
c:\588bce7c90097ed212\watermark.bmp
bmp
File
boot\bcd.log
boot\bcd.log
c:\
c:\boot\bcd.log
log
File
boot\bootstat.dat
boot\bootstat.dat
c:\
c:\boot\bootstat.dat
dat
File
boot\updaterevokesipolicy.p7b
boot\updaterevokesipolicy.p7b
c:\
c:\boot\updaterevokesipolicy.p7b
p7b
File
bootsect.bak
bootsect.bak
c:\
c:\bootsect.bak
bak
File
program files\common files\microsoft shared\clicktorun\c2rheartbeatconfig.xml
program files\common files\microsoft shared\clicktorun\c2rheartbeatconfig.xml
c:\
c:\program files\common files\microsoft shared\clicktorun\c2rheartbeatconfig.xml
xml
File
program files\common files\microsoft shared\clicktorun\officeupdateschedule.xml
program files\common files\microsoft shared\clicktorun\officeupdateschedule.xml
c:\
c:\program files\common files\microsoft shared\clicktorun\officeupdateschedule.xml
xml
File
program files\common files\microsoft shared\clicktorun\servicewatcherschedule.xml
program files\common files\microsoft shared\clicktorun\servicewatcherschedule.xml
c:\
c:\program files\common files\microsoft shared\clicktorun\servicewatcherschedule.xml
xml
File
program files\common files\microsoft shared\ink\alphabet.xml
program files\common files\microsoft shared\ink\alphabet.xml
c:\
c:\program files\common files\microsoft shared\ink\alphabet.xml
xml
File
program files\common files\microsoft shared\ink\content.xml
program files\common files\microsoft shared\ink\content.xml
c:\
c:\program files\common files\microsoft shared\ink\content.xml
xml
File
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
avi
File
588bce7c90097ed212\netfx_extended_x64.msi
588bce7c90097ed212\netfx_extended_x64.msi
c:\
c:\588bce7c90097ed212\netfx_extended_x64.msi
msi
File
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-join.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-split.avi
avi
File
program files\common files\microsoft shared\ink\en-us\correct.avi
program files\common files\microsoft shared\ink\en-us\correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\delete.avi
program files\common files\microsoft shared\ink\en-us\delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\delete.avi
avi
File
program files\common files\microsoft shared\ink\en-us\join.avi
program files\common files\microsoft shared\ink\en-us\join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\join.avi
avi
File
program files\common files\microsoft shared\ink\hwrenclm.dat
program files\common files\microsoft shared\ink\hwrenclm.dat
c:\
c:\program files\common files\microsoft shared\ink\hwrenclm.dat
dat
File
program files\common files\microsoft shared\ink\hwrusash.dat
program files\common files\microsoft shared\ink\hwrusash.dat
c:\
c:\program files\common files\microsoft shared\ink\hwrusash.dat
dat
File
program files\common files\microsoft shared\ink\ipsar.xml
program files\common files\microsoft shared\ink\ipsar.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsar.xml
xml
File
program files\common files\microsoft shared\ink\ipschs.xml
program files\common files\microsoft shared\ink\ipschs.xml
c:\
c:\program files\common files\microsoft shared\ink\ipschs.xml
xml
File
program files\common files\microsoft shared\ink\ipsdan.xml
program files\common files\microsoft shared\ink\ipsdan.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsdan.xml
xml
File
program files\common files\microsoft shared\ink\ipsdeu.xml
program files\common files\microsoft shared\ink\ipsdeu.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsdeu.xml
xml
File
program files\common files\microsoft shared\ink\ipsel.xml
program files\common files\microsoft shared\ink\ipsel.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsel.xml
xml
File
program files\common files\microsoft shared\ink\ipsen.xml
program files\common files\microsoft shared\ink\ipsen.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsen.xml
xml
File
program files\common files\microsoft shared\ink\ipsesp.xml
program files\common files\microsoft shared\ink\ipsesp.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsesp.xml
xml
File
program files\common files\microsoft shared\stationery\handprints.jpg
program files\common files\microsoft shared\stationery\handprints.jpg
c:\
c:\program files\common files\microsoft shared\stationery\handprints.jpg
jpg
File
program files\common files\microsoft shared\stationery\peacock.htm
program files\common files\microsoft shared\stationery\peacock.htm
c:\
c:\program files\common files\microsoft shared\stationery\peacock.htm
htm
File
program files\common files\microsoft shared\stationery\roses.jpg
program files\common files\microsoft shared\stationery\roses.jpg
c:\
c:\program files\common files\microsoft shared\stationery\roses.jpg
jpg
File
program files\common files\microsoft shared\stationery\shades of blue.htm
program files\common files\microsoft shared\stationery\shades of blue.htm
c:\
c:\program files\common files\microsoft shared\stationery\shades of blue.htm
htm
File
program files\common files\microsoft shared\stationery\stars.jpg
program files\common files\microsoft shared\stationery\stars.jpg
c:\
c:\program files\common files\microsoft shared\stationery\stars.jpg
jpg
File
program files\common files\services\verisign.bmp
program files\common files\services\verisign.bmp
c:\
c:\program files\common files\services\verisign.bmp
bmp
File
program files\common files\system\ado\adojavas.inc
program files\common files\system\ado\adojavas.inc
c:\
c:\program files\common files\system\ado\adojavas.inc
inc
File
program files\common files\system\ado\adovbs.inc
program files\common files\system\ado\adovbs.inc
c:\
c:\program files\common files\system\ado\adovbs.inc
inc
File
program files\common files\system\msadc\adcjavas.inc
program files\common files\system\msadc\adcjavas.inc
c:\
c:\program files\common files\system\msadc\adcjavas.inc
inc
File
program files\common files\system\msadc\adcvbs.inc
program files\common files\system\msadc\adcvbs.inc
c:\
c:\program files\common files\system\msadc\adcvbs.inc
inc
File
program files\java\jre1.8.0_144\bin\server\xusage.txt
program files\java\jre1.8.0_144\bin\server\xusage.txt
c:\
c:\program files\java\jre1.8.0_144\bin\server\xusage.txt
txt
File
program files\java\jre1.8.0_144\lib\deploy\ffjcext.zip
program files\java\jre1.8.0_144\lib\deploy\ffjcext.zip
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\ffjcext.zip
zip
File
program files\java\jre1.8.0_144\lib\deploy\splash.gif
program files\java\jre1.8.0_144\lib\deploy\splash.gif
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\splash.gif
gif
File
program files\java\jre1.8.0_144\lib\deploy\splash@2x.gif
program files\java\jre1.8.0_144\lib\deploy\splash@2x.gif
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\splash@2x.gif
gif
File
program files\java\jre1.8.0_144\lib\deploy\splash_11-lic.gif
program files\java\jre1.8.0_144\lib\deploy\splash_11-lic.gif
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\splash_11-lic.gif
gif
File
588bce7c90097ed212\netfx_extended_x86.msi
588bce7c90097ed212\netfx_extended_x86.msi
c:\
c:\588bce7c90097ed212\netfx_extended_x86.msi
msi
File
program files\java\jre1.8.0_144\lib\images\cursors\win32_copydrop32x32.gif
program files\java\jre1.8.0_144\lib\images\cursors\win32_copydrop32x32.gif
c:\
c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_copydrop32x32.gif
gif
File
program files\java\jre1.8.0_144\lib\images\cursors\win32_copynodrop32x32.gif
program files\java\jre1.8.0_144\lib\images\cursors\win32_copynodrop32x32.gif
c:\
c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_copynodrop32x32.gif
gif
File
program files\java\jre1.8.0_144\lib\images\cursors\win32_linkdrop32x32.gif
program files\java\jre1.8.0_144\lib\images\cursors\win32_linkdrop32x32.gif
c:\
c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_linkdrop32x32.gif
gif
File
program files\java\jre1.8.0_144\lib\images\cursors\win32_linknodrop32x32.gif
program files\java\jre1.8.0_144\lib\images\cursors\win32_linknodrop32x32.gif
c:\
c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_linknodrop32x32.gif
gif
File
program files\java\jre1.8.0_144\lib\images\cursors\win32_movedrop32x32.gif
program files\java\jre1.8.0_144\lib\images\cursors\win32_movedrop32x32.gif
c:\
c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_movedrop32x32.gif
gif
File
program files\java\jre1.8.0_144\lib\images\cursors\win32_movenodrop32x32.gif
program files\java\jre1.8.0_144\lib\images\cursors\win32_movenodrop32x32.gif
c:\
c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_movenodrop32x32.gif
gif
File
program files\java\jre1.8.0_144\lib\jvm.hprof.txt
program files\java\jre1.8.0_144\lib\jvm.hprof.txt
c:\
c:\program files\java\jre1.8.0_144\lib\jvm.hprof.txt
txt
File
program files\java\jre1.8.0_144\lib\tzdb.dat
program files\java\jre1.8.0_144\lib\tzdb.dat
c:\
c:\program files\java\jre1.8.0_144\lib\tzdb.dat
dat
File
program files\java\jre1.8.0_144\readme.txt
program files\java\jre1.8.0_144\readme.txt
c:\
c:\program files\java\jre1.8.0_144\readme.txt
txt
File
program files\java\jre1.8.0_144\thirdpartylicensereadme-javafx.txt
program files\java\jre1.8.0_144\thirdpartylicensereadme-javafx.txt
c:\
c:\program files\java\jre1.8.0_144\thirdpartylicensereadme-javafx.txt
txt
File
program files\java\jre1.8.0_144\thirdpartylicensereadme.txt
program files\java\jre1.8.0_144\thirdpartylicensereadme.txt
c:\
c:\program files\java\jre1.8.0_144\thirdpartylicensereadme.txt
txt
File
program files\microsoft office\appxmanifest.xml
program files\microsoft office\appxmanifest.xml
c:\
c:\program files\microsoft office\appxmanifest.xml
xml
File
588bce7c90097ed212\rgb9rast_x64.msi
588bce7c90097ed212\rgb9rast_x64.msi
c:\
c:\588bce7c90097ed212\rgb9rast_x64.msi
msi
File
588bce7c90097ed212\rgb9rast_x86.msi
588bce7c90097ed212\rgb9rast_x86.msi
c:\
c:\588bce7c90097ed212\rgb9rast_x86.msi
msi
File
588bce7c90097ed212\setup.exe
588bce7c90097ed212\setup.exe
c:\
c:\588bce7c90097ed212\setup.exe
exe
File
588bce7c90097ed212\setupengine.dll
588bce7c90097ed212\setupengine.dll
c:\
c:\588bce7c90097ed212\setupengine.dll
dll
File
program files\microsoft office\filesystemmetadata.xml
program files\microsoft office\filesystemmetadata.xml
c:\
c:\program files\microsoft office\filesystemmetadata.xml
xml
File
program files\microsoft office\office16\ospp.htm
program files\microsoft office\office16\ospp.htm
c:\
c:\program files\microsoft office\office16\ospp.htm
htm
File
588bce7c90097ed212\setupui.dll
588bce7c90097ed212\setupui.dll
c:\
c:\588bce7c90097ed212\setupui.dll
dll
File
588bce7c90097ed212\setuputility.exe
588bce7c90097ed212\setuputility.exe
c:\
c:\588bce7c90097ed212\setuputility.exe
exe
File
program files\microsoft office\office16\ospp.vbs
program files\microsoft office\office16\ospp.vbs
c:\
c:\program files\microsoft office\office16\ospp.vbs
vbs
File
program files\microsoft office\office16\slerror.xml
program files\microsoft office\office16\slerror.xml
c:\
c:\program files\microsoft office\office16\slerror.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml
xml
File
588bce7c90097ed212\sqmapi.dll
588bce7c90097ed212\sqmapi.dll
c:\
c:\588bce7c90097ed212\sqmapi.dll
dll
File
588bce7c90097ed212\windows6.0-kb956250-v6001-x64.msu
588bce7c90097ed212\windows6.0-kb956250-v6001-x64.msu
c:\
c:\588bce7c90097ed212\windows6.0-kb956250-v6001-x64.msu
msu
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml
xml
File
588bce7c90097ed212\windows6.0-kb956250-v6001-x86.msu
588bce7c90097ed212\windows6.0-kb956250-v6001-x86.msu
c:\
c:\588bce7c90097ed212\windows6.0-kb956250-v6001-x86.msu
msu
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml
xml
File
588bce7c90097ed212\windows6.1-kb958488-v6001-x64.msu
588bce7c90097ed212\windows6.1-kb958488-v6001-x64.msu
c:\
c:\588bce7c90097ed212\windows6.1-kb958488-v6001-x64.msu
msu
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.common.xml
program files\microsoft office\packagemanifests\appxmanifest.common.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.common.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml
program files\microsoft office\packagemanifests\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml
xml
File
program files\microsoft office\packagemanifests\appxmanifestloc.en-us.xml
program files\microsoft office\packagemanifests\appxmanifestloc.en-us.xml
c:\
c:\program files\microsoft office\packagemanifests\appxmanifestloc.en-us.xml
xml
File
program files\microsoft office\packagemanifests\authoredextensions.xml
program files\microsoft office\packagemanifests\authoredextensions.xml
c:\
c:\program files\microsoft office\packagemanifests\authoredextensions.xml
xml
File
program files\microsoft office\root\clipart\pub60cor\ag00004_.gif
program files\microsoft office\root\clipart\pub60cor\ag00004_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00004_.gif
gif
File
588bce7c90097ed212\windows6.1-kb958488-v6001-x86.msu
588bce7c90097ed212\windows6.1-kb958488-v6001-x86.msu
c:\
c:\588bce7c90097ed212\windows6.1-kb958488-v6001-x86.msu
msu
File
program files\microsoft office\root\clipart\pub60cor\ag00011_.gif
program files\microsoft office\root\clipart\pub60cor\ag00011_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00011_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00021_.gif
program files\microsoft office\root\clipart\pub60cor\ag00021_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00021_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00037_.gif
program files\microsoft office\root\clipart\pub60cor\ag00037_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00037_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00038_.gif
program files\microsoft office\root\clipart\pub60cor\ag00038_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00038_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00040_.gif
program files\microsoft office\root\clipart\pub60cor\ag00040_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00040_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00052_.gif
program files\microsoft office\root\clipart\pub60cor\ag00052_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00052_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00057_.gif
program files\microsoft office\root\clipart\pub60cor\ag00057_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00057_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00090_.gif
program files\microsoft office\root\clipart\pub60cor\ag00090_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00090_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00092_.gif
program files\microsoft office\root\clipart\pub60cor\ag00092_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00092_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00103_.gif
program files\microsoft office\root\clipart\pub60cor\ag00103_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00103_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00120_.gif
program files\microsoft office\root\clipart\pub60cor\ag00120_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00120_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00126_.gif
program files\microsoft office\root\clipart\pub60cor\ag00126_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00126_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00129_.gif
program files\microsoft office\root\clipart\pub60cor\ag00129_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00129_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00130_.gif
program files\microsoft office\root\clipart\pub60cor\ag00130_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00130_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00135_.gif
program files\microsoft office\root\clipart\pub60cor\ag00135_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00135_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00139_.gif
program files\microsoft office\root\clipart\pub60cor\ag00139_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00139_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00142_.gif
program files\microsoft office\root\clipart\pub60cor\ag00142_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00142_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00154_.gif
program files\microsoft office\root\clipart\pub60cor\ag00154_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00154_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00157_.gif
program files\microsoft office\root\clipart\pub60cor\ag00157_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00157_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00158_.gif
program files\microsoft office\root\clipart\pub60cor\ag00158_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00158_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00160_.gif
program files\microsoft office\root\clipart\pub60cor\ag00160_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00160_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00161_.gif
program files\microsoft office\root\clipart\pub60cor\ag00161_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00161_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00163_.gif
program files\microsoft office\root\clipart\pub60cor\ag00163_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00163_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00164_.gif
program files\microsoft office\root\clipart\pub60cor\ag00164_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00164_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00165_.gif
program files\microsoft office\root\clipart\pub60cor\ag00165_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00165_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00167_.gif
program files\microsoft office\root\clipart\pub60cor\ag00167_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00167_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00169_.gif
program files\microsoft office\root\clipart\pub60cor\ag00169_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00169_.gif
gif
File
boot\bcd
boot\bcd
c:\
c:\boot\bcd
File
boot\bcd.log1
boot\bcd.log1
c:\
c:\boot\bcd.log1
log1
File
boot\bcd.log2
boot\bcd.log2
c:\
c:\boot\bcd.log2
log2
File
boot\bg-bg\bootmgr.exe.mui
boot\bg-bg\bootmgr.exe.mui
c:\
c:\boot\bg-bg\bootmgr.exe.mui
mui
File
boot\bootspaces.dll
boot\bootspaces.dll
c:\
c:\boot\bootspaces.dll
dll
File
boot\bootvhd.dll
boot\bootvhd.dll
c:\
c:\boot\bootvhd.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\ag00170_.gif
program files\microsoft office\root\clipart\pub60cor\ag00170_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00170_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00171_.gif
program files\microsoft office\root\clipart\pub60cor\ag00171_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00171_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00172_.gif
program files\microsoft office\root\clipart\pub60cor\ag00172_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00172_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00174_.gif
program files\microsoft office\root\clipart\pub60cor\ag00174_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00174_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00175_.gif
program files\microsoft office\root\clipart\pub60cor\ag00175_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00175_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\ag00176_.gif
program files\microsoft office\root\clipart\pub60cor\ag00176_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ag00176_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\an00010_.wmf
program files\microsoft office\root\clipart\pub60cor\an00010_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an00010_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an00015_.wmf
program files\microsoft office\root\clipart\pub60cor\an00015_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an00015_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an00790_.wmf
program files\microsoft office\root\clipart\pub60cor\an00790_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an00790_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an00853_.wmf
program files\microsoft office\root\clipart\pub60cor\an00853_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an00853_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an00914_.wmf
program files\microsoft office\root\clipart\pub60cor\an00914_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an00914_.wmf
wmf
File
boot\fonts\malgunn_boot.ttf
boot\fonts\malgunn_boot.ttf
c:\
c:\boot\fonts\malgunn_boot.ttf
ttf
File
boot\fonts\malgun_boot.ttf
boot\fonts\malgun_boot.ttf
c:\
c:\boot\fonts\malgun_boot.ttf
ttf
File
boot\fonts\meiryon_boot.ttf
boot\fonts\meiryon_boot.ttf
c:\
c:\boot\fonts\meiryon_boot.ttf
ttf
File
program files\microsoft office\root\clipart\pub60cor\an00932_.wmf
program files\microsoft office\root\clipart\pub60cor\an00932_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an00932_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an00965_.wmf
program files\microsoft office\root\clipart\pub60cor\an00965_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an00965_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01039_.wmf
program files\microsoft office\root\clipart\pub60cor\an01039_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01039_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01044_.wmf
program files\microsoft office\root\clipart\pub60cor\an01044_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01044_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01060_.wmf
program files\microsoft office\root\clipart\pub60cor\an01060_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01060_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01084_.wmf
program files\microsoft office\root\clipart\pub60cor\an01084_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01084_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01173_.wmf
program files\microsoft office\root\clipart\pub60cor\an01173_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01173_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01174_.wmf
program files\microsoft office\root\clipart\pub60cor\an01174_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01174_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01184_.wmf
program files\microsoft office\root\clipart\pub60cor\an01184_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01184_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01216_.wmf
program files\microsoft office\root\clipart\pub60cor\an01216_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01216_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01218_.wmf
program files\microsoft office\root\clipart\pub60cor\an01218_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01218_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01251_.wmf
program files\microsoft office\root\clipart\pub60cor\an01251_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01251_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an01545_.wmf
program files\microsoft office\root\clipart\pub60cor\an01545_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an01545_.wmf
wmf
File
boot\fonts\meiryo_boot.ttf
boot\fonts\meiryo_boot.ttf
c:\
c:\boot\fonts\meiryo_boot.ttf
ttf
File
boot\fonts\msjhn_boot.ttf
boot\fonts\msjhn_boot.ttf
c:\
c:\boot\fonts\msjhn_boot.ttf
ttf
File
boot\fonts\msyhn_boot.ttf
boot\fonts\msyhn_boot.ttf
c:\
c:\boot\fonts\msyhn_boot.ttf
ttf
File
boot\fonts\segoen_slboot.ttf
boot\fonts\segoen_slboot.ttf
c:\
c:\boot\fonts\segoen_slboot.ttf
ttf
File
boot\fonts\segoe_slboot.ttf
boot\fonts\segoe_slboot.ttf
c:\
c:\boot\fonts\segoe_slboot.ttf
ttf
File
bootmgr
bootmgr
c:\
c:\bootmgr
File
logs\hardwareevents.evtx
logs\hardwareevents.evtx
c:\
c:\logs\hardwareevents.evtx
evtx
File
logs\internet explorer.evtx
logs\internet explorer.evtx
c:\
c:\logs\internet explorer.evtx
evtx
File
logs\key management service.evtx
logs\key management service.evtx
c:\
c:\logs\key management service.evtx
evtx
File
logs\microsoft-client-licensing-platform%4admin.evtx
logs\microsoft-client-licensing-platform%4admin.evtx
c:\
c:\logs\microsoft-client-licensing-platform%4admin.evtx
evtx
File
logs\microsoft-windows-application-experience%4program-compatibility-assistant.evtx
logs\microsoft-windows-application-experience%4program-compatibility-assistant.evtx
c:\
c:\logs\microsoft-windows-application-experience%4program-compatibility-assistant.evtx
evtx
File
logs\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx
logs\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx
c:\
c:\logs\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx
evtx
File
logs\microsoft-windows-applocker%4exe and dll.evtx
logs\microsoft-windows-applocker%4exe and dll.evtx
c:\
c:\logs\microsoft-windows-applocker%4exe and dll.evtx
evtx
File
logs\microsoft-windows-applocker%4msi and script.evtx
logs\microsoft-windows-applocker%4msi and script.evtx
c:\
c:\logs\microsoft-windows-applocker%4msi and script.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\an02122_.wmf
program files\microsoft office\root\clipart\pub60cor\an02122_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an02122_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an02559_.wmf
program files\microsoft office\root\clipart\pub60cor\an02559_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an02559_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an02724_.wmf
program files\microsoft office\root\clipart\pub60cor\an02724_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an02724_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an03500_.wmf
program files\microsoft office\root\clipart\pub60cor\an03500_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an03500_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04108_.wmf
program files\microsoft office\root\clipart\pub60cor\an04108_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04108_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04117_.wmf
program files\microsoft office\root\clipart\pub60cor\an04117_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04117_.wmf
wmf
File
logs\microsoft-windows-applocker%4packaged app-deployment.evtx
logs\microsoft-windows-applocker%4packaged app-deployment.evtx
c:\
c:\logs\microsoft-windows-applocker%4packaged app-deployment.evtx
evtx
File
logs\microsoft-windows-applocker%4packaged app-execution.evtx
logs\microsoft-windows-applocker%4packaged app-execution.evtx
c:\
c:\logs\microsoft-windows-applocker%4packaged app-execution.evtx
evtx
File
logs\microsoft-windows-appmodel-runtime%4admin.evtx
logs\microsoft-windows-appmodel-runtime%4admin.evtx
c:\
c:\logs\microsoft-windows-appmodel-runtime%4admin.evtx
evtx
File
logs\microsoft-windows-appreadiness%4admin.evtx
logs\microsoft-windows-appreadiness%4admin.evtx
c:\
c:\logs\microsoft-windows-appreadiness%4admin.evtx
evtx
File
logs\microsoft-windows-appreadiness%4operational.evtx
logs\microsoft-windows-appreadiness%4operational.evtx
c:\
c:\logs\microsoft-windows-appreadiness%4operational.evtx
evtx
File
logs\microsoft-windows-appxdeployment%4operational.evtx
logs\microsoft-windows-appxdeployment%4operational.evtx
c:\
c:\logs\microsoft-windows-appxdeployment%4operational.evtx
evtx
File
logs\microsoft-windows-appxdeploymentserver%4operational.evtx
logs\microsoft-windows-appxdeploymentserver%4operational.evtx
c:\
c:\logs\microsoft-windows-appxdeploymentserver%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\an04134_.wmf
program files\microsoft office\root\clipart\pub60cor\an04134_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04134_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04174_.wmf
program files\microsoft office\root\clipart\pub60cor\an04174_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04174_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04191_.wmf
program files\microsoft office\root\clipart\pub60cor\an04191_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04191_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04195_.wmf
program files\microsoft office\root\clipart\pub60cor\an04195_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04195_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04196_.wmf
program files\microsoft office\root\clipart\pub60cor\an04196_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04196_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04206_.wmf
program files\microsoft office\root\clipart\pub60cor\an04206_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04206_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04225_.wmf
program files\microsoft office\root\clipart\pub60cor\an04225_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04225_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04235_.wmf
program files\microsoft office\root\clipart\pub60cor\an04235_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04235_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04267_.wmf
program files\microsoft office\root\clipart\pub60cor\an04267_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04267_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04269_.wmf
program files\microsoft office\root\clipart\pub60cor\an04269_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04269_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04323_.wmf
program files\microsoft office\root\clipart\pub60cor\an04323_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04323_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04326_.wmf
program files\microsoft office\root\clipart\pub60cor\an04326_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04326_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04332_.wmf
program files\microsoft office\root\clipart\pub60cor\an04332_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04332_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04355_.wmf
program files\microsoft office\root\clipart\pub60cor\an04355_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04355_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04369_.wmf
program files\microsoft office\root\clipart\pub60cor\an04369_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04369_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\an04384_.wmf
program files\microsoft office\root\clipart\pub60cor\an04384_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04384_.wmf
wmf
File
logs\microsoft-windows-appxdeploymentserver%4restricted.evtx
logs\microsoft-windows-appxdeploymentserver%4restricted.evtx
c:\
c:\logs\microsoft-windows-appxdeploymentserver%4restricted.evtx
evtx
File
logs\microsoft-windows-appxpackaging%4operational.evtx
logs\microsoft-windows-appxpackaging%4operational.evtx
c:\
c:\logs\microsoft-windows-appxpackaging%4operational.evtx
evtx
File
logs\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx
logs\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx
c:\
c:\logs\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\an04385_.wmf
program files\microsoft office\root\clipart\pub60cor\an04385_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\an04385_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd00116_.wmf
program files\microsoft office\root\clipart\pub60cor\bd00116_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd00116_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd00141_.wmf
program files\microsoft office\root\clipart\pub60cor\bd00141_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd00141_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd00146_.wmf
program files\microsoft office\root\clipart\pub60cor\bd00146_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd00146_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd00155_.wmf
program files\microsoft office\root\clipart\pub60cor\bd00155_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd00155_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd00160_.wmf
program files\microsoft office\root\clipart\pub60cor\bd00160_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd00160_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd00173_.wmf
program files\microsoft office\root\clipart\pub60cor\bd00173_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd00173_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd05119_.wmf
program files\microsoft office\root\clipart\pub60cor\bd05119_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd05119_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd06102_.wmf
program files\microsoft office\root\clipart\pub60cor\bd06102_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd06102_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd06200_.wmf
program files\microsoft office\root\clipart\pub60cor\bd06200_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd06200_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd07761_.wmf
program files\microsoft office\root\clipart\pub60cor\bd07761_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd07761_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd07804_.wmf
program files\microsoft office\root\clipart\pub60cor\bd07804_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd07804_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd07831_.wmf
program files\microsoft office\root\clipart\pub60cor\bd07831_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd07831_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd08758_.wmf
program files\microsoft office\root\clipart\pub60cor\bd08758_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd08758_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd08773_.wmf
program files\microsoft office\root\clipart\pub60cor\bd08773_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd08773_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd08808_.wmf
program files\microsoft office\root\clipart\pub60cor\bd08808_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd08808_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd08868_.wmf
program files\microsoft office\root\clipart\pub60cor\bd08868_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd08868_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd09031_.wmf
program files\microsoft office\root\clipart\pub60cor\bd09031_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd09031_.wmf
wmf
File
logs\microsoft-windows-bits-client%4operational.evtx
logs\microsoft-windows-bits-client%4operational.evtx
c:\
c:\logs\microsoft-windows-bits-client%4operational.evtx
evtx
File
logs\microsoft-windows-codeintegrity%4operational.evtx
logs\microsoft-windows-codeintegrity%4operational.evtx
c:\
c:\logs\microsoft-windows-codeintegrity%4operational.evtx
evtx
File
logs\microsoft-windows-coresystem-smsrouter-events%4operational.evtx
logs\microsoft-windows-coresystem-smsrouter-events%4operational.evtx
c:\
c:\logs\microsoft-windows-coresystem-smsrouter-events%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bd09194_.wmf
program files\microsoft office\root\clipart\pub60cor\bd09194_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd09194_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd09662_.wmf
program files\microsoft office\root\clipart\pub60cor\bd09662_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd09662_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd09664_.wmf
program files\microsoft office\root\clipart\pub60cor\bd09664_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd09664_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd10890_.gif
program files\microsoft office\root\clipart\pub60cor\bd10890_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd10890_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\bd10972_.gif
program files\microsoft office\root\clipart\pub60cor\bd10972_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd10972_.gif
gif
File
logs\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx
logs\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx
c:\
c:\logs\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx
evtx
File
logs\microsoft-windows-crypto-dpapi%4operational.evtx
logs\microsoft-windows-crypto-dpapi%4operational.evtx
c:\
c:\logs\microsoft-windows-crypto-dpapi%4operational.evtx
evtx
File
logs\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx
logs\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx
c:\
c:\logs\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx
evtx
File
logs\microsoft-windows-devicesetupmanager%4admin.evtx
logs\microsoft-windows-devicesetupmanager%4admin.evtx
c:\
c:\logs\microsoft-windows-devicesetupmanager%4admin.evtx
evtx
File
logs\microsoft-windows-devicesetupmanager%4operational.evtx
logs\microsoft-windows-devicesetupmanager%4operational.evtx
c:\
c:\logs\microsoft-windows-devicesetupmanager%4operational.evtx
evtx
File
logs\microsoft-windows-dhcp-client%4admin.evtx
logs\microsoft-windows-dhcp-client%4admin.evtx
c:\
c:\logs\microsoft-windows-dhcp-client%4admin.evtx
evtx
File
logs\microsoft-windows-dhcpv6-client%4admin.evtx
logs\microsoft-windows-dhcpv6-client%4admin.evtx
c:\
c:\logs\microsoft-windows-dhcpv6-client%4admin.evtx
evtx
File
logs\microsoft-windows-diagnosis-dps%4operational.evtx
logs\microsoft-windows-diagnosis-dps%4operational.evtx
c:\
c:\logs\microsoft-windows-diagnosis-dps%4operational.evtx
evtx
File
logs\microsoft-windows-diagnostics-performance%4operational.evtx
logs\microsoft-windows-diagnostics-performance%4operational.evtx
c:\
c:\logs\microsoft-windows-diagnostics-performance%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bd19563_.gif
program files\microsoft office\root\clipart\pub60cor\bd19563_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd19563_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\bd19582_.gif
program files\microsoft office\root\clipart\pub60cor\bd19582_.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd19582_.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\bd19695_.wmf
program files\microsoft office\root\clipart\pub60cor\bd19695_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd19695_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd19827_.wmf
program files\microsoft office\root\clipart\pub60cor\bd19827_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd19827_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd19828_.wmf
program files\microsoft office\root\clipart\pub60cor\bd19828_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd19828_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd19986_.wmf
program files\microsoft office\root\clipart\pub60cor\bd19986_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd19986_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd19988_.wmf
program files\microsoft office\root\clipart\pub60cor\bd19988_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd19988_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bd20013_.wmf
program files\microsoft office\root\clipart\pub60cor\bd20013_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bd20013_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00008_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00008_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00008_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00012_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00012_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00012_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00045_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00045_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00045_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00098_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00098_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00098_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00105_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00105_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00105_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00122_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00122_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00122_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00130_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00130_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00130_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00148_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00148_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00148_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00152_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00152_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00152_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00194_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00194_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00194_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00195_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00195_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00195_.wmf
wmf
File
logs\microsoft-windows-grouppolicy%4operational.evtx
logs\microsoft-windows-grouppolicy%4operational.evtx
c:\
c:\logs\microsoft-windows-grouppolicy%4operational.evtx
evtx
File
logs\microsoft-windows-hotspotauth%4operational.evtx
logs\microsoft-windows-hotspotauth%4operational.evtx
c:\
c:\logs\microsoft-windows-hotspotauth%4operational.evtx
evtx
File
logs\microsoft-windows-hyper-v-guest-drivers%4admin.evtx
logs\microsoft-windows-hyper-v-guest-drivers%4admin.evtx
c:\
c:\logs\microsoft-windows-hyper-v-guest-drivers%4admin.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bl00234_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00234_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00234_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00242_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00242_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00242_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00247_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00247_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00247_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00248_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00248_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00248_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00252_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00252_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00252_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00254_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00254_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00254_.wmf
wmf
File
logs\microsoft-windows-international%4operational.evtx
logs\microsoft-windows-international%4operational.evtx
c:\
c:\logs\microsoft-windows-international%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bl00261_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00261_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00261_.wmf
wmf
File
logs\microsoft-windows-kernel-boot%4operational.evtx
logs\microsoft-windows-kernel-boot%4operational.evtx
c:\
c:\logs\microsoft-windows-kernel-boot%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bl00262_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00262_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00262_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00265_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00265_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00265_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00267_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00267_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00267_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00269_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00269_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00269_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00270_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00270_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00270_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00273_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00273_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00273_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00274_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00274_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00274_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00296_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00296_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00296_.wmf
wmf
File
logs\microsoft-windows-kernel-eventtracing%4admin.evtx
logs\microsoft-windows-kernel-eventtracing%4admin.evtx
c:\
c:\logs\microsoft-windows-kernel-eventtracing%4admin.evtx
evtx
File
logs\microsoft-windows-kernel-pnp%4configuration.evtx
logs\microsoft-windows-kernel-pnp%4configuration.evtx
c:\
c:\logs\microsoft-windows-kernel-pnp%4configuration.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bl00390_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00390_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00390_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00392_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00392_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00392_.wmf
wmf
File
logs\microsoft-windows-kernel-power%4thermal-operational.evtx
logs\microsoft-windows-kernel-power%4thermal-operational.evtx
c:\
c:\logs\microsoft-windows-kernel-power%4thermal-operational.evtx
evtx
File
logs\microsoft-windows-kernel-shimengine%4operational.evtx
logs\microsoft-windows-kernel-shimengine%4operational.evtx
c:\
c:\logs\microsoft-windows-kernel-shimengine%4operational.evtx
evtx
File
logs\microsoft-windows-kernel-storemgr%4operational.evtx
logs\microsoft-windows-kernel-storemgr%4operational.evtx
c:\
c:\logs\microsoft-windows-kernel-storemgr%4operational.evtx
evtx
File
logs\microsoft-windows-kernel-whea%4errors.evtx
logs\microsoft-windows-kernel-whea%4errors.evtx
c:\
c:\logs\microsoft-windows-kernel-whea%4errors.evtx
evtx
File
logs\microsoft-windows-kernel-whea%4operational.evtx
logs\microsoft-windows-kernel-whea%4operational.evtx
c:\
c:\logs\microsoft-windows-kernel-whea%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bl00524_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00524_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00524_.wmf
wmf
File
logs\microsoft-windows-known folders api service.evtx
logs\microsoft-windows-known folders api service.evtx
c:\
c:\logs\microsoft-windows-known folders api service.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bl00525_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00525_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00525_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00526_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00526_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00526_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00648_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00648_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00648_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00921_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00921_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00921_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00923_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00923_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00923_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00932_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00932_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00932_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bl00985_.wmf
program files\microsoft office\root\clipart\pub60cor\bl00985_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bl00985_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\boat.wmf
program files\microsoft office\root\clipart\pub60cor\boat.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\boat.wmf
wmf
File
logs\microsoft-windows-liveid%4operational.evtx
logs\microsoft-windows-liveid%4operational.evtx
c:\
c:\logs\microsoft-windows-liveid%4operational.evtx
evtx
File
logs\microsoft-windows-mui%4admin.evtx
logs\microsoft-windows-mui%4admin.evtx
c:\
c:\logs\microsoft-windows-mui%4admin.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\boatinst.wmf
program files\microsoft office\root\clipart\pub60cor\boatinst.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\boatinst.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00076_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00076_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00076_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00078_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00078_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00078_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00092_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00092_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00092_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00100_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00100_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00100_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00135_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00135_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00135_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00136_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00136_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00136_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00145_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00145_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00145_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00174_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00174_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00174_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00184_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00184_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00184_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00186_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00186_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00186_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00200_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00200_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00200_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00224_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00224_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00224_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00438_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00438_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00438_.wmf
wmf
File
logs\microsoft-windows-mui%4operational.evtx
logs\microsoft-windows-mui%4operational.evtx
c:\
c:\logs\microsoft-windows-mui%4operational.evtx
evtx
File
logs\microsoft-windows-ncsi%4operational.evtx
logs\microsoft-windows-ncsi%4operational.evtx
c:\
c:\logs\microsoft-windows-ncsi%4operational.evtx
evtx
File
logs\microsoft-windows-networkprofile%4operational.evtx
logs\microsoft-windows-networkprofile%4operational.evtx
c:\
c:\logs\microsoft-windows-networkprofile%4operational.evtx
evtx
File
logs\microsoft-windows-ntfs%4operational.evtx
logs\microsoft-windows-ntfs%4operational.evtx
c:\
c:\logs\microsoft-windows-ntfs%4operational.evtx
evtx
File
logs\microsoft-windows-ntfs%4whc.evtx
logs\microsoft-windows-ntfs%4whc.evtx
c:\
c:\logs\microsoft-windows-ntfs%4whc.evtx
evtx
File
logs\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx
logs\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx
c:\
c:\logs\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx
evtx
File
logs\microsoft-windows-readyboost%4operational.evtx
logs\microsoft-windows-readyboost%4operational.evtx
c:\
c:\logs\microsoft-windows-readyboost%4operational.evtx
evtx
File
logs\microsoft-windows-resource-exhaustion-detector%4operational.evtx
logs\microsoft-windows-resource-exhaustion-detector%4operational.evtx
c:\
c:\logs\microsoft-windows-resource-exhaustion-detector%4operational.evtx
evtx
File
logs\microsoft-windows-settingsync%4debug.evtx
logs\microsoft-windows-settingsync%4debug.evtx
c:\
c:\logs\microsoft-windows-settingsync%4debug.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bs00439_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00439_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00439_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00440_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00440_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00440_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00441_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00441_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00441_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00442_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00442_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00442_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00443_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00443_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00443_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00444_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00444_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00444_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00445_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00445_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00445_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs00453_.wmf
program files\microsoft office\root\clipart\pub60cor\bs00453_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs00453_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs01080_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01080_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01080_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs01603_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01603_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01603_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs01634_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01634_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01634_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs01635_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01635_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01635_.wmf
wmf
File
logs\microsoft-windows-settingsync%4operational.evtx
logs\microsoft-windows-settingsync%4operational.evtx
c:\
c:\logs\microsoft-windows-settingsync%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bs01636_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01636_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01636_.wmf
wmf
File
logs\microsoft-windows-shell-core%4actioncenter.evtx
logs\microsoft-windows-shell-core%4actioncenter.evtx
c:\
c:\logs\microsoft-windows-shell-core%4actioncenter.evtx
evtx
File
logs\microsoft-windows-shell-core%4operational.evtx
logs\microsoft-windows-shell-core%4operational.evtx
c:\
c:\logs\microsoft-windows-shell-core%4operational.evtx
evtx
File
logs\microsoft-windows-smbclient%4connectivity.evtx
logs\microsoft-windows-smbclient%4connectivity.evtx
c:\
c:\logs\microsoft-windows-smbclient%4connectivity.evtx
evtx
File
logs\microsoft-windows-smbclient%4operational.evtx
logs\microsoft-windows-smbclient%4operational.evtx
c:\
c:\logs\microsoft-windows-smbclient%4operational.evtx
evtx
File
logs\microsoft-windows-smbclient%4security.evtx
logs\microsoft-windows-smbclient%4security.evtx
c:\
c:\logs\microsoft-windows-smbclient%4security.evtx
evtx
File
logs\microsoft-windows-smbserver%4audit.evtx
logs\microsoft-windows-smbserver%4audit.evtx
c:\
c:\logs\microsoft-windows-smbserver%4audit.evtx
evtx
File
logs\microsoft-windows-smbserver%4connectivity.evtx
logs\microsoft-windows-smbserver%4connectivity.evtx
c:\
c:\logs\microsoft-windows-smbserver%4connectivity.evtx
evtx
File
logs\microsoft-windows-smbserver%4operational.evtx
logs\microsoft-windows-smbserver%4operational.evtx
c:\
c:\logs\microsoft-windows-smbserver%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\bs01637_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01637_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01637_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs01638_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01638_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01638_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\bs01639_.wmf
program files\microsoft office\root\clipart\pub60cor\bs01639_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\bs01639_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\cg1606.wmf
program files\microsoft office\root\clipart\pub60cor\cg1606.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\cg1606.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\classic1.wmf
program files\microsoft office\root\clipart\pub60cor\classic1.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\classic1.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\classic2.wmf
program files\microsoft office\root\clipart\pub60cor\classic2.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\classic2.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\clip.wmf
program files\microsoft office\root\clipart\pub60cor\clip.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\clip.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\crane.wmf
program files\microsoft office\root\clipart\pub60cor\crane.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\crane.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\craninst.wmf
program files\microsoft office\root\clipart\pub60cor\craninst.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\craninst.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\cup.wmf
program files\microsoft office\root\clipart\pub60cor\cup.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\cup.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\cupinst.wmf
program files\microsoft office\root\clipart\pub60cor\cupinst.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\cupinst.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\dd00117_.wmf
program files\microsoft office\root\clipart\pub60cor\dd00117_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\dd00117_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\dd00121_.wmf
program files\microsoft office\root\clipart\pub60cor\dd00121_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\dd00121_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\dd00234_.wmf
program files\microsoft office\root\clipart\pub60cor\dd00234_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\dd00234_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\dd00255_.wmf
program files\microsoft office\root\clipart\pub60cor\dd00255_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\dd00255_.wmf
wmf
File
logs\microsoft-windows-smbserver%4security.evtx
logs\microsoft-windows-smbserver%4security.evtx
c:\
c:\logs\microsoft-windows-smbserver%4security.evtx
evtx
File
logs\microsoft-windows-store%4operational.evtx
logs\microsoft-windows-store%4operational.evtx
c:\
c:\logs\microsoft-windows-store%4operational.evtx
evtx
File
logs\microsoft-windows-taskscheduler%4maintenance.evtx
logs\microsoft-windows-taskscheduler%4maintenance.evtx
c:\
c:\logs\microsoft-windows-taskscheduler%4maintenance.evtx
evtx
File
logs\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx
logs\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx
c:\
c:\logs\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx
evtx
File
logs\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx
logs\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx
c:\
c:\logs\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx
evtx
File
logs\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx
logs\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx
c:\
c:\logs\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx
evtx
File
logs\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx
logs\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx
c:\
c:\logs\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx
evtx
File
program files\microsoft office\root\clipart\pub60cor\dd00256_.wmf
program files\microsoft office\root\clipart\pub60cor\dd00256_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\dd00256_.wmf
wmf
File
logs\microsoft-windows-twinui%4operational.evtx
logs\microsoft-windows-twinui%4operational.evtx
c:\
c:\logs\microsoft-windows-twinui%4operational.evtx
evtx
File
logs\microsoft-windows-user profile service%4operational.evtx
logs\microsoft-windows-user profile service%4operational.evtx
c:\
c:\logs\microsoft-windows-user profile service%4operational.evtx
evtx
File
logs\microsoft-windows-userpnp%4actioncenter.evtx
logs\microsoft-windows-userpnp%4actioncenter.evtx
c:\
c:\logs\microsoft-windows-userpnp%4actioncenter.evtx
evtx
File
logs\microsoft-windows-userpnp%4deviceinstall.evtx
logs\microsoft-windows-userpnp%4deviceinstall.evtx
c:\
c:\logs\microsoft-windows-userpnp%4deviceinstall.evtx
evtx
File
logs\microsoft-windows-volumesnapshot-driver%4operational.evtx
logs\microsoft-windows-volumesnapshot-driver%4operational.evtx
c:\
c:\logs\microsoft-windows-volumesnapshot-driver%4operational.evtx
evtx
File
logs\microsoft-windows-wcmsvc%4operational.evtx
logs\microsoft-windows-wcmsvc%4operational.evtx
c:\
c:\logs\microsoft-windows-wcmsvc%4operational.evtx
evtx
File
logs\microsoft-windows-windows defender%4operational.evtx
logs\microsoft-windows-windows defender%4operational.evtx
c:\
c:\logs\microsoft-windows-windows defender%4operational.evtx
evtx
Mutex
Global\syncronize_M77T2YA
Mutex
Global\syncronize_M77T2YU
Mutex
Global\syncronize_M77T2YA
Mutex
Global\syncronize_M77T2YU
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE
payload2.exe
C:\WINDOWS\System32\payload2.exe
REG_SZ
payload2.exe
C:\WINDOWS\System32\payload2.exe
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Startup
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER
Startup
Startup
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Common Startup
Common Startup
Common Startup
File
STD_OUTPUT_HANDLE
File
STD_INPUT_HANDLE
WinRegistryKey
Software\Policies\Microsoft\Windows\System
HKEY_CURRENT_USER
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_CURRENT_USER
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
Mutex
Global\syncronize_M77T2YA
Mutex
Global\syncronize_M77T2YU
File
users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
c:\
c:\users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
exe
File
$winre_backup_partition.marker
$winre_backup_partition.marker
c:\
c:\$winre_backup_partition.marker
marker
File
$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
c:\
c:\$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
ini
File
boot\bcd
boot\bcd
c:\
c:\boot\bcd
File
boot\bcd.log1
boot\bcd.log1
c:\
c:\boot\bcd.log1
log1
File
boot\bcd.log2
boot\bcd.log2
c:\
c:\boot\bcd.log2
log2
File
boot\bg-bg\bootmgr.exe.mui
boot\bg-bg\bootmgr.exe.mui
c:\
c:\boot\bg-bg\bootmgr.exe.mui
mui
File
boot\bcd.log
boot\bcd.log
c:\
c:\boot\bcd.log
log
File
boot\bootspaces.dll
boot\bootspaces.dll
c:\
c:\boot\bootspaces.dll
dll
File
boot\bootvhd.dll
boot\bootvhd.dll
c:\
c:\boot\bootvhd.dll
dll
File
boot\cs-cz\bootmgr.exe.mui
boot\cs-cz\bootmgr.exe.mui
c:\
c:\boot\cs-cz\bootmgr.exe.mui
mui
File
boot\cs-cz\memtest.exe.mui
boot\cs-cz\memtest.exe.mui
c:\
c:\boot\cs-cz\memtest.exe.mui
mui
File
boot\da-dk\bootmgr.exe.mui
boot\da-dk\bootmgr.exe.mui
c:\
c:\boot\da-dk\bootmgr.exe.mui
mui
File
boot\da-dk\memtest.exe.mui
boot\da-dk\memtest.exe.mui
c:\
c:\boot\da-dk\memtest.exe.mui
mui
File
boot\de-de\bootmgr.exe.mui
boot\de-de\bootmgr.exe.mui
c:\
c:\boot\de-de\bootmgr.exe.mui
mui
File
boot\de-de\memtest.exe.mui
boot\de-de\memtest.exe.mui
c:\
c:\boot\de-de\memtest.exe.mui
mui
File
boot\el-gr\bootmgr.exe.mui
boot\el-gr\bootmgr.exe.mui
c:\
c:\boot\el-gr\bootmgr.exe.mui
mui
File
boot\el-gr\memtest.exe.mui
boot\el-gr\memtest.exe.mui
c:\
c:\boot\el-gr\memtest.exe.mui
mui
File
boot\en-gb\bootmgr.exe.mui
boot\en-gb\bootmgr.exe.mui
c:\
c:\boot\en-gb\bootmgr.exe.mui
mui
File
boot\en-us\bootmgr.exe.mui
boot\en-us\bootmgr.exe.mui
c:\
c:\boot\en-us\bootmgr.exe.mui
mui
File
boot\updaterevokesipolicy.p7b
boot\updaterevokesipolicy.p7b
c:\
c:\boot\updaterevokesipolicy.p7b
p7b
File
boot\en-us\memtest.exe.mui
boot\en-us\memtest.exe.mui
c:\
c:\boot\en-us\memtest.exe.mui
mui
File
boot\es-es\bootmgr.exe.mui
boot\es-es\bootmgr.exe.mui
c:\
c:\boot\es-es\bootmgr.exe.mui
mui
File
boot\es-es\memtest.exe.mui
boot\es-es\memtest.exe.mui
c:\
c:\boot\es-es\memtest.exe.mui
mui
File
boot\es-mx\bootmgr.exe.mui
boot\es-mx\bootmgr.exe.mui
c:\
c:\boot\es-mx\bootmgr.exe.mui
mui
File
boot\et-ee\bootmgr.exe.mui
boot\et-ee\bootmgr.exe.mui
c:\
c:\boot\et-ee\bootmgr.exe.mui
mui
File
boot\fi-fi\bootmgr.exe.mui
boot\fi-fi\bootmgr.exe.mui
c:\
c:\boot\fi-fi\bootmgr.exe.mui
mui
File
boot\fi-fi\memtest.exe.mui
boot\fi-fi\memtest.exe.mui
c:\
c:\boot\fi-fi\memtest.exe.mui
mui
File
boot\fonts\chs_boot.ttf
boot\fonts\chs_boot.ttf
c:\
c:\boot\fonts\chs_boot.ttf
ttf
File
boot\fonts\cht_boot.ttf
boot\fonts\cht_boot.ttf
c:\
c:\boot\fonts\cht_boot.ttf
ttf
File
boot\fonts\jpn_boot.ttf
boot\fonts\jpn_boot.ttf
c:\
c:\boot\fonts\jpn_boot.ttf
ttf
File
boot\fonts\kor_boot.ttf
boot\fonts\kor_boot.ttf
c:\
c:\boot\fonts\kor_boot.ttf
ttf
File
boot\fonts\malgunn_boot.ttf
boot\fonts\malgunn_boot.ttf
c:\
c:\boot\fonts\malgunn_boot.ttf
ttf
File
boot\fonts\malgun_boot.ttf
boot\fonts\malgun_boot.ttf
c:\
c:\boot\fonts\malgun_boot.ttf
ttf
File
boot\fonts\meiryon_boot.ttf
boot\fonts\meiryon_boot.ttf
c:\
c:\boot\fonts\meiryon_boot.ttf
ttf
File
boot\fonts\meiryo_boot.ttf
boot\fonts\meiryo_boot.ttf
c:\
c:\boot\fonts\meiryo_boot.ttf
ttf
File
boot\fonts\msjhn_boot.ttf
boot\fonts\msjhn_boot.ttf
c:\
c:\boot\fonts\msjhn_boot.ttf
ttf
File
boot\fonts\msjh_boot.ttf
boot\fonts\msjh_boot.ttf
c:\
c:\boot\fonts\msjh_boot.ttf
ttf
File
boot\fonts\msyhn_boot.ttf
boot\fonts\msyhn_boot.ttf
c:\
c:\boot\fonts\msyhn_boot.ttf
ttf
File
boot\fonts\msyh_boot.ttf
boot\fonts\msyh_boot.ttf
c:\
c:\boot\fonts\msyh_boot.ttf
ttf
File
boot\fonts\segmono_boot.ttf
boot\fonts\segmono_boot.ttf
c:\
c:\boot\fonts\segmono_boot.ttf
ttf
File
boot\fonts\segoen_slboot.ttf
boot\fonts\segoen_slboot.ttf
c:\
c:\boot\fonts\segoen_slboot.ttf
ttf
File
boot\fonts\segoe_slboot.ttf
boot\fonts\segoe_slboot.ttf
c:\
c:\boot\fonts\segoe_slboot.ttf
ttf
File
boot\fonts\wgl4_boot.ttf
boot\fonts\wgl4_boot.ttf
c:\
c:\boot\fonts\wgl4_boot.ttf
ttf
File
boot\fr-ca\bootmgr.exe.mui
boot\fr-ca\bootmgr.exe.mui
c:\
c:\boot\fr-ca\bootmgr.exe.mui
mui
File
boot\fr-fr\bootmgr.exe.mui
boot\fr-fr\bootmgr.exe.mui
c:\
c:\boot\fr-fr\bootmgr.exe.mui
mui
File
boot\fr-fr\memtest.exe.mui
boot\fr-fr\memtest.exe.mui
c:\
c:\boot\fr-fr\memtest.exe.mui
mui
File
boot\hr-hr\bootmgr.exe.mui
boot\hr-hr\bootmgr.exe.mui
c:\
c:\boot\hr-hr\bootmgr.exe.mui
mui
File
program files\common files\microsoft shared\ink\alphabet.xml
program files\common files\microsoft shared\ink\alphabet.xml
c:\
c:\program files\common files\microsoft shared\ink\alphabet.xml
xml
File
program files\common files\microsoft shared\ink\content.xml
program files\common files\microsoft shared\ink\content.xml
c:\
c:\program files\common files\microsoft shared\ink\content.xml
xml
File
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-join.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-split.avi
avi
File
program files\common files\microsoft shared\ink\en-us\correct.avi
program files\common files\microsoft shared\ink\en-us\correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\delete.avi
program files\common files\microsoft shared\ink\en-us\delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\delete.avi
avi
File
program files\common files\microsoft shared\ink\en-us\join.avi
program files\common files\microsoft shared\ink\en-us\join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\join.avi
avi
File
boot\hu-hu\bootmgr.exe.mui
boot\hu-hu\bootmgr.exe.mui
c:\
c:\boot\hu-hu\bootmgr.exe.mui
mui
File
boot\hu-hu\memtest.exe.mui
boot\hu-hu\memtest.exe.mui
c:\
c:\boot\hu-hu\memtest.exe.mui
mui
File
boot\it-it\bootmgr.exe.mui
boot\it-it\bootmgr.exe.mui
c:\
c:\boot\it-it\bootmgr.exe.mui
mui
File
boot\it-it\memtest.exe.mui
boot\it-it\memtest.exe.mui
c:\
c:\boot\it-it\memtest.exe.mui
mui
File
boot\ja-jp\bootmgr.exe.mui
boot\ja-jp\bootmgr.exe.mui
c:\
c:\boot\ja-jp\bootmgr.exe.mui
mui
File
boot\ja-jp\memtest.exe.mui
boot\ja-jp\memtest.exe.mui
c:\
c:\boot\ja-jp\memtest.exe.mui
mui
File
boot\ko-kr\bootmgr.exe.mui
boot\ko-kr\bootmgr.exe.mui
c:\
c:\boot\ko-kr\bootmgr.exe.mui
mui
File
hiberfil.sys
hiberfil.sys
c:\
c:\hiberfil.sys
sys
File
program files\common files\microsoft shared\ink\flickanimation.avi
program files\common files\microsoft shared\ink\flickanimation.avi
c:\
c:\program files\common files\microsoft shared\ink\flickanimation.avi
avi
File
program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml
program files\common files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\insert.xml
program files\common files\microsoft shared\ink\fsdefinitions\insert.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\insert.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\keypad\ea.xml
program files\common files\microsoft shared\ink\fsdefinitions\keypad\ea.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\keypad\ea.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml
program files\common files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml
program files\common files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml
xml
File
program files\common files\microsoft shared\ink\ipsdan.xml
program files\common files\microsoft shared\ink\ipsdan.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsdan.xml
xml
File
program files\common files\microsoft shared\ink\ipsdeu.xml
program files\common files\microsoft shared\ink\ipsdeu.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsdeu.xml
xml
File
program files\common files\microsoft shared\ink\ipsel.xml
program files\common files\microsoft shared\ink\ipsel.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsel.xml
xml
File
program files\common files\microsoft shared\ink\ipsen.xml
program files\common files\microsoft shared\ink\ipsen.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsen.xml
xml
File
program files\common files\microsoft shared\ink\ipsesp.xml
program files\common files\microsoft shared\ink\ipsesp.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsesp.xml
xml
File
program files\common files\microsoft shared\ink\ipsfin.xml
program files\common files\microsoft shared\ink\ipsfin.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsfin.xml
xml
File
bootmgr
bootmgr
c:\
c:\bootmgr
File
program files\common files\microsoft shared\clicktorun\appvcatalog.dll
program files\common files\microsoft shared\clicktorun\appvcatalog.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvcatalog.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvfilesystemmetadata.dll
program files\common files\microsoft shared\clicktorun\appvfilesystemmetadata.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvfilesystemmetadata.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvintegration.dll
program files\common files\microsoft shared\clicktorun\appvintegration.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvintegration.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvisvapi.dll
program files\common files\microsoft shared\clicktorun\appvisvapi.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvisvapi.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvisvstream64.dll
program files\common files\microsoft shared\clicktorun\appvisvstream64.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvisvstream64.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvisvstreamingmanager.dll
program files\common files\microsoft shared\clicktorun\appvisvstreamingmanager.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvisvstreamingmanager.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvisvsubsystemcontroller.dll
program files\common files\microsoft shared\clicktorun\appvisvsubsystemcontroller.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystemcontroller.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll
program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvisvvirtualization.dll
program files\common files\microsoft shared\clicktorun\appvisvvirtualization.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvisvvirtualization.dll
dll
File
program files\common files\microsoft shared\ink\en-us\inkobj.dll.mui
program files\common files\microsoft shared\ink\en-us\inkobj.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\en-us\inkobj.dll.mui
mui
File
program files\common files\microsoft shared\ink\en-us\inputpersonalization.exe.mui
program files\common files\microsoft shared\ink\en-us\inputpersonalization.exe.mui
c:\
c:\program files\common files\microsoft shared\ink\en-us\inputpersonalization.exe.mui
mui
File
program files\common files\microsoft shared\ink\en-us\ipseventlogmsg.dll.mui
program files\common files\microsoft shared\ink\en-us\ipseventlogmsg.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\en-us\ipseventlogmsg.dll.mui
mui
File
program files\common files\microsoft shared\ink\en-us\mip.exe.mui
program files\common files\microsoft shared\ink\en-us\mip.exe.mui
c:\
c:\program files\common files\microsoft shared\ink\en-us\mip.exe.mui
mui
File
program files\common files\microsoft shared\ink\en-us\mshwlatin.dll.mui
program files\common files\microsoft shared\ink\en-us\mshwlatin.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\en-us\mshwlatin.dll.mui
mui
File
program files\common files\microsoft shared\ink\en-us\tabskb.dll.mui
program files\common files\microsoft shared\ink\en-us\tabskb.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\en-us\tabskb.dll.mui
mui
File
program files\common files\microsoft shared\ink\ipsplugin.dll
program files\common files\microsoft shared\ink\ipsplugin.dll
c:\
c:\program files\common files\microsoft shared\ink\ipsplugin.dll
dll
File
program files\common files\microsoft shared\ink\it-it\tipresx.dll.mui
program files\common files\microsoft shared\ink\it-it\tipresx.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\it-it\tipresx.dll.mui
mui
File
program files\common files\microsoft shared\ink\ja-jp\tipresx.dll.mui
program files\common files\microsoft shared\ink\ja-jp\tipresx.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\ja-jp\tipresx.dll.mui
mui
File
program files\common files\microsoft shared\ink\ko-kr\tipresx.dll.mui
program files\common files\microsoft shared\ink\ko-kr\tipresx.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\ko-kr\tipresx.dll.mui
mui
File
program files\common files\microsoft shared\ink\languagemodel\chstic.dgml
program files\common files\microsoft shared\ink\languagemodel\chstic.dgml
c:\
c:\program files\common files\microsoft shared\ink\languagemodel\chstic.dgml
dgml
File
program files\common files\microsoft shared\ink\lt-lt\tipresx.dll.mui
program files\common files\microsoft shared\ink\lt-lt\tipresx.dll.mui
c:\
c:\program files\common files\microsoft shared\ink\lt-lt\tipresx.dll.mui
mui
File
program files\common files\system\ado\adovbs.inc
program files\common files\system\ado\adovbs.inc
c:\
c:\program files\common files\system\ado\adovbs.inc
inc
File
program files\java\jre1.8.0_144\lib\amd64\jvm.cfg
program files\java\jre1.8.0_144\lib\amd64\jvm.cfg
c:\
c:\program files\java\jre1.8.0_144\lib\amd64\jvm.cfg
cfg
File
program files\java\jre1.8.0_144\lib\charsets.jar
program files\java\jre1.8.0_144\lib\charsets.jar
c:\
c:\program files\java\jre1.8.0_144\lib\charsets.jar
jar
File
program files\java\jre1.8.0_144\lib\classlist
program files\java\jre1.8.0_144\lib\classlist
c:\
c:\program files\java\jre1.8.0_144\lib\classlist
0_144\lib\classlist
File
program files\java\jre1.8.0_144\lib\cmm\ciexyz.pf
program files\java\jre1.8.0_144\lib\cmm\ciexyz.pf
c:\
c:\program files\java\jre1.8.0_144\lib\cmm\ciexyz.pf
pf
File
program files\java\jre1.8.0_144\lib\cmm\gray.pf
program files\java\jre1.8.0_144\lib\cmm\gray.pf
c:\
c:\program files\java\jre1.8.0_144\lib\cmm\gray.pf
pf
File
program files\java\jre1.8.0_144\lib\cmm\linear_rgb.pf
program files\java\jre1.8.0_144\lib\cmm\linear_rgb.pf
c:\
c:\program files\java\jre1.8.0_144\lib\cmm\linear_rgb.pf
pf
File
program files\java\jre1.8.0_144\lib\cmm\pycc.pf
program files\java\jre1.8.0_144\lib\cmm\pycc.pf
c:\
c:\program files\java\jre1.8.0_144\lib\cmm\pycc.pf
pf
File
program files\microsoft office\root\clipart\pub60cor\fd00306_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00306_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00306_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\cmm\srgb.pf
program files\java\jre1.8.0_144\lib\cmm\srgb.pf
c:\
c:\program files\java\jre1.8.0_144\lib\cmm\srgb.pf
pf
File
program files\java\jre1.8.0_144\lib\content-types.properties
program files\java\jre1.8.0_144\lib\content-types.properties
c:\
c:\program files\java\jre1.8.0_144\lib\content-types.properties
properties
File
program files\java\jre1.8.0_144\lib\currency.data
program files\java\jre1.8.0_144\lib\currency.data
c:\
c:\program files\java\jre1.8.0_144\lib\currency.data
data
File
program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\deploy\messages.properties
program files\java\jre1.8.0_144\lib\deploy\messages.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\deploy\messages_de.properties
program files\java\jre1.8.0_144\lib\deploy\messages_de.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_de.properties
properties
File
program files\java\jre1.8.0_144\lib\deploy\messages_es.properties
program files\java\jre1.8.0_144\lib\deploy\messages_es.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_es.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\deploy\messages_fr.properties
program files\java\jre1.8.0_144\lib\deploy\messages_fr.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_fr.properties
properties
File
program files\java\jre1.8.0_144\lib\deploy\messages_it.properties
program files\java\jre1.8.0_144\lib\deploy\messages_it.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_it.properties
properties
File
program files\java\jre1.8.0_144\lib\deploy\messages_ja.properties
program files\java\jre1.8.0_144\lib\deploy\messages_ja.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_ja.properties
properties
File
program files\java\jre1.8.0_144\lib\deploy\messages_ko.properties
program files\java\jre1.8.0_144\lib\deploy\messages_ko.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_ko.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\deploy\messages_pt_br.properties
program files\java\jre1.8.0_144\lib\deploy\messages_pt_br.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_pt_br.properties
properties
File
program files\java\jre1.8.0_144\lib\deploy\messages_sv.properties
program files\java\jre1.8.0_144\lib\deploy\messages_sv.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_sv.properties
properties
File
program files\java\jre1.8.0_144\lib\deploy\messages_zh_cn.properties
program files\java\jre1.8.0_144\lib\deploy\messages_zh_cn.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_zh_cn.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\deploy\messages_zh_hk.properties
program files\java\jre1.8.0_144\lib\deploy\messages_zh_hk.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_zh_hk.properties
properties
File
program files\java\jre1.8.0_144\lib\deploy\messages_zh_tw.properties
program files\java\jre1.8.0_144\lib\deploy\messages_zh_tw.properties
c:\
c:\program files\java\jre1.8.0_144\lib\deploy\messages_zh_tw.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\deploy.jar
program files\java\jre1.8.0_144\lib\deploy.jar
c:\
c:\program files\java\jre1.8.0_144\lib\deploy.jar
jar
File
program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\ext\access-bridge-64.jar
program files\java\jre1.8.0_144\lib\ext\access-bridge-64.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\access-bridge-64.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\cldrdata.jar
program files\java\jre1.8.0_144\lib\ext\cldrdata.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\cldrdata.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\dnsns.jar
program files\java\jre1.8.0_144\lib\ext\dnsns.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\dnsns.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\jaccess.jar
program files\java\jre1.8.0_144\lib\ext\jaccess.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\jaccess.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\jfxrt.jar
program files\java\jre1.8.0_144\lib\ext\jfxrt.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\jfxrt.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\localedata.jar
program files\java\jre1.8.0_144\lib\ext\localedata.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\localedata.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\meta-index
program files\java\jre1.8.0_144\lib\ext\meta-index
c:\
c:\program files\java\jre1.8.0_144\lib\ext\meta-index
0_144\lib\ext\meta-index
File
program files\java\jre1.8.0_144\lib\ext\nashorn.jar
program files\java\jre1.8.0_144\lib\ext\nashorn.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\nashorn.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\sunec.jar
program files\java\jre1.8.0_144\lib\ext\sunec.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\sunec.jar
jar
File
program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\ext\sunjce_provider.jar
program files\java\jre1.8.0_144\lib\ext\sunjce_provider.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\sunjce_provider.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\sunmscapi.jar
program files\java\jre1.8.0_144\lib\ext\sunmscapi.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\sunmscapi.jar
jar
File
program files\java\jre1.8.0_144\lib\ext\sunpkcs11.jar
program files\java\jre1.8.0_144\lib\ext\sunpkcs11.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\sunpkcs11.jar
jar
File
program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\flap.wmf
program files\microsoft office\root\clipart\pub60cor\flap.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\flap.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\ext\zipfs.jar
program files\java\jre1.8.0_144\lib\ext\zipfs.jar
c:\
c:\program files\java\jre1.8.0_144\lib\ext\zipfs.jar
jar
File
program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\flavormap.properties
program files\java\jre1.8.0_144\lib\flavormap.properties
c:\
c:\program files\java\jre1.8.0_144\lib\flavormap.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\fontconfig.bfc
program files\java\jre1.8.0_144\lib\fontconfig.bfc
c:\
c:\program files\java\jre1.8.0_144\lib\fontconfig.bfc
bfc
File
program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\fontconfig.properties.src
program files\java\jre1.8.0_144\lib\fontconfig.properties.src
c:\
c:\program files\java\jre1.8.0_144\lib\fontconfig.properties.src
src
File
program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemibold.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemibold.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemibold.ttf
ttf
File
program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemiitalic.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemiitalic.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemiitalic.ttf
ttf
File
program files\java\jre1.8.0_144\lib\fonts\lucidabrightitalic.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidabrightitalic.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightitalic.ttf
ttf
File
program files\java\jre1.8.0_144\lib\fonts\lucidabrightregular.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidabrightregular.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightregular.ttf
ttf
File
program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\fonts\lucidasansdemibold.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidasansdemibold.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidasansdemibold.ttf
ttf
File
program files\java\jre1.8.0_144\lib\fonts\lucidasansregular.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidasansregular.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidasansregular.ttf
ttf
File
program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterbold.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterbold.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterbold.ttf
ttf
File
program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterregular.ttf
program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterregular.ttf
c:\
c:\program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterregular.ttf
ttf
File
program files\java\jre1.8.0_144\lib\hijrah-config-umalqura.properties
program files\java\jre1.8.0_144\lib\hijrah-config-umalqura.properties
c:\
c:\program files\java\jre1.8.0_144\lib\hijrah-config-umalqura.properties
properties
File
program files\java\jre1.8.0_144\lib\images\cursors\cursors.properties
program files\java\jre1.8.0_144\lib\images\cursors\cursors.properties
c:\
c:\program files\java\jre1.8.0_144\lib\images\cursors\cursors.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\javafx.properties
program files\java\jre1.8.0_144\lib\javafx.properties
c:\
c:\program files\java\jre1.8.0_144\lib\javafx.properties
properties
File
program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\javaws.jar
program files\java\jre1.8.0_144\lib\javaws.jar
c:\
c:\program files\java\jre1.8.0_144\lib\javaws.jar
jar
File
program files\java\jre1.8.0_144\lib\jce.jar
program files\java\jre1.8.0_144\lib\jce.jar
c:\
c:\program files\java\jre1.8.0_144\lib\jce.jar
jar
File
program files\java\jre1.8.0_144\lib\jfr\default.jfc
program files\java\jre1.8.0_144\lib\jfr\default.jfc
c:\
c:\program files\java\jre1.8.0_144\lib\jfr\default.jfc
jfc
File
program files\java\jre1.8.0_144\lib\jfr\profile.jfc
program files\java\jre1.8.0_144\lib\jfr\profile.jfc
c:\
c:\program files\java\jre1.8.0_144\lib\jfr\profile.jfc
jfc
File
program files\java\jre1.8.0_144\lib\jfr.jar
program files\java\jre1.8.0_144\lib\jfr.jar
c:\
c:\program files\java\jre1.8.0_144\lib\jfr.jar
jar
File
program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\jfxswt.jar
program files\java\jre1.8.0_144\lib\jfxswt.jar
c:\
c:\program files\java\jre1.8.0_144\lib\jfxswt.jar
jar
File
program files\java\jre1.8.0_144\lib\jsse.jar
program files\java\jre1.8.0_144\lib\jsse.jar
c:\
c:\program files\java\jre1.8.0_144\lib\jsse.jar
jar
File
program files\java\jre1.8.0_144\lib\logging.properties
program files\java\jre1.8.0_144\lib\logging.properties
c:\
c:\program files\java\jre1.8.0_144\lib\logging.properties
properties
File
program files\java\jre1.8.0_144\lib\management\jmxremote.access
program files\java\jre1.8.0_144\lib\management\jmxremote.access
c:\
c:\program files\java\jre1.8.0_144\lib\management\jmxremote.access
access
File
program files\java\jre1.8.0_144\lib\management\jmxremote.password.template
program files\java\jre1.8.0_144\lib\management\jmxremote.password.template
c:\
c:\program files\java\jre1.8.0_144\lib\management\jmxremote.password.template
template
File
program files\java\jre1.8.0_144\lib\management\management.properties
program files\java\jre1.8.0_144\lib\management\management.properties
c:\
c:\program files\java\jre1.8.0_144\lib\management\management.properties
properties
File
program files\java\jre1.8.0_144\lib\management\snmp.acl.template
program files\java\jre1.8.0_144\lib\management\snmp.acl.template
c:\
c:\program files\java\jre1.8.0_144\lib\management\snmp.acl.template
template
File
program files\java\jre1.8.0_144\lib\management-agent.jar
program files\java\jre1.8.0_144\lib\management-agent.jar
c:\
c:\program files\java\jre1.8.0_144\lib\management-agent.jar
jar
File
program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh02282_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02282_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02282_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\meta-index
program files\java\jre1.8.0_144\lib\meta-index
c:\
c:\program files\java\jre1.8.0_144\lib\meta-index
0_144\lib\meta-index
File
program files\java\jre1.8.0_144\lib\net.properties
program files\java\jre1.8.0_144\lib\net.properties
c:\
c:\program files\java\jre1.8.0_144\lib\net.properties
properties
File
program files\java\jre1.8.0_144\lib\plugin.jar
program files\java\jre1.8.0_144\lib\plugin.jar
c:\
c:\program files\java\jre1.8.0_144\lib\plugin.jar
jar
File
program files\microsoft office\root\clipart\pub60cor\hh02298_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02298_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02298_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh02312_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02312_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02312_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\psfont.properties.ja
program files\java\jre1.8.0_144\lib\psfont.properties.ja
c:\
c:\program files\java\jre1.8.0_144\lib\psfont.properties.ja
ja
File
program files\java\jre1.8.0_144\lib\psfontj2d.properties
program files\java\jre1.8.0_144\lib\psfontj2d.properties
c:\
c:\program files\java\jre1.8.0_144\lib\psfontj2d.properties
properties
File
program files\java\jre1.8.0_144\lib\resources.jar
program files\java\jre1.8.0_144\lib\resources.jar
c:\
c:\program files\java\jre1.8.0_144\lib\resources.jar
jar
File
program files\java\jre1.8.0_144\lib\rt.jar
program files\java\jre1.8.0_144\lib\rt.jar
c:\
c:\program files\java\jre1.8.0_144\lib\rt.jar
jar
File
program files\java\jre1.8.0_144\lib\security\blacklist
program files\java\jre1.8.0_144\lib\security\blacklist
c:\
c:\program files\java\jre1.8.0_144\lib\security\blacklist
0_144\lib\security\blacklist
File
program files\java\jre1.8.0_144\lib\security\blacklisted.certs
program files\java\jre1.8.0_144\lib\security\blacklisted.certs
c:\
c:\program files\java\jre1.8.0_144\lib\security\blacklisted.certs
certs
File
program files\java\jre1.8.0_144\lib\security\cacerts
program files\java\jre1.8.0_144\lib\security\cacerts
c:\
c:\program files\java\jre1.8.0_144\lib\security\cacerts
0_144\lib\security\cacerts
File
program files\microsoft office\root\clipart\pub60cor\hh02313_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02313_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02313_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hm00005_.wmf
program files\microsoft office\root\clipart\pub60cor\hm00005_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hm00005_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hm00114_.wmf
program files\microsoft office\root\clipart\pub60cor\hm00114_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hm00114_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\security\java.policy
program files\java\jre1.8.0_144\lib\security\java.policy
c:\
c:\program files\java\jre1.8.0_144\lib\security\java.policy
policy
File
program files\java\jre1.8.0_144\lib\security\java.security
program files\java\jre1.8.0_144\lib\security\java.security
c:\
c:\program files\java\jre1.8.0_144\lib\security\java.security
security
File
program files\java\jre1.8.0_144\lib\security\javaws.policy
program files\java\jre1.8.0_144\lib\security\javaws.policy
c:\
c:\program files\java\jre1.8.0_144\lib\security\javaws.policy
policy
File
program files\java\jre1.8.0_144\lib\security\local_policy.jar
program files\java\jre1.8.0_144\lib\security\local_policy.jar
c:\
c:\program files\java\jre1.8.0_144\lib\security\local_policy.jar
jar
File
program files\microsoft office\root\clipart\pub60cor\hm00116_.wmf
program files\microsoft office\root\clipart\pub60cor\hm00116_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hm00116_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hm00172_.wmf
program files\microsoft office\root\clipart\pub60cor\hm00172_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hm00172_.wmf
wmf
File
program files\java\jre1.8.0_144\lib\security\trusted.libraries
program files\java\jre1.8.0_144\lib\security\trusted.libraries
c:\
c:\program files\java\jre1.8.0_144\lib\security\trusted.libraries
libraries
File
program files\java\jre1.8.0_144\lib\security\us_export_policy.jar
program files\java\jre1.8.0_144\lib\security\us_export_policy.jar
c:\
c:\program files\java\jre1.8.0_144\lib\security\us_export_policy.jar
jar
File
program files\java\jre1.8.0_144\lib\sound.properties
program files\java\jre1.8.0_144\lib\sound.properties
c:\
c:\program files\java\jre1.8.0_144\lib\sound.properties
properties
File
program files\java\jre1.8.0_144\lib\tzmappings
program files\java\jre1.8.0_144\lib\tzmappings
c:\
c:\program files\java\jre1.8.0_144\lib\tzmappings
0_144\lib\tzmappings
File
program files\java\jre1.8.0_144\license
program files\java\jre1.8.0_144\license
c:\
c:\program files\java\jre1.8.0_144\license
0_144\license
File
program files\java\jre1.8.0_144\release
program files\java\jre1.8.0_144\release
c:\
c:\program files\java\jre1.8.0_144\release
0_144\release
File
program files\java\writes-heroes-spies.exe
program files\java\writes-heroes-spies.exe
c:\
c:\program files\java\writes-heroes-spies.exe
exe
File
program files\microsoft office\office16\ospprearm.exe
program files\microsoft office\office16\ospprearm.exe
c:\
c:\program files\microsoft office\office16\ospprearm.exe
exe
File
program files\microsoft office\root\clipart\pub60cor\hm00426_.wmf
program files\microsoft office\root\clipart\pub60cor\hm00426_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hm00426_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00046_.wmf
program files\microsoft office\root\clipart\pub60cor\in00046_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00046_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00118_.wmf
program files\microsoft office\root\clipart\pub60cor\in00118_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00118_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00177_.wmf
program files\microsoft office\root\clipart\pub60cor\in00177_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00177_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00204_.wmf
program files\microsoft office\root\clipart\pub60cor\in00204_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00204_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00233_.wmf
program files\microsoft office\root\clipart\pub60cor\in00233_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00233_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00343_.wmf
program files\microsoft office\root\clipart\pub60cor\in00343_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00343_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00346_.wmf
program files\microsoft office\root\clipart\pub60cor\in00346_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00346_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00351_.wmf
program files\microsoft office\root\clipart\pub60cor\in00351_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00351_.wmf
wmf
File
program files\microsoft office\root\client\api-ms-win-core-file-l1-2-0.dll
program files\microsoft office\root\client\api-ms-win-core-file-l1-2-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-core-file-l1-2-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-core-file-l2-1-0.dll
program files\microsoft office\root\client\api-ms-win-core-file-l2-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-core-file-l2-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-core-localization-l1-2-0.dll
program files\microsoft office\root\client\api-ms-win-core-localization-l1-2-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-core-localization-l1-2-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-core-processthreads-l1-1-1.dll
program files\microsoft office\root\client\api-ms-win-core-processthreads-l1-1-1.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-core-processthreads-l1-1-1.dll
dll
File
program files\microsoft office\root\client\api-ms-win-core-synch-l1-2-0.dll
program files\microsoft office\root\client\api-ms-win-core-synch-l1-2-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-core-synch-l1-2-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-core-timezone-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-core-timezone-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-core-timezone-l1-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-crt-environment-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-crt-environment-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-crt-environment-l1-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-crt-filesystem-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-crt-filesystem-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-crt-filesystem-l1-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-crt-heap-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-crt-heap-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-crt-heap-l1-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-crt-locale-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-crt-locale-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-crt-locale-l1-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-crt-math-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-crt-math-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-crt-math-l1-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-crt-multibyte-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-crt-multibyte-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-crt-multibyte-l1-1-0.dll
dll
File
program files\microsoft office\root\client\api-ms-win-crt-private-l1-1-0.dll
program files\microsoft office\root\client\api-ms-win-crt-private-l1-1-0.dll
c:\
c:\program files\microsoft office\root\client\api-ms-win-crt-private-l1-1-0.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\carbn_01.mid
program files\microsoft office\root\clipart\pub60cor\carbn_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\carbn_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\cmnty_01.mid
program files\microsoft office\root\clipart\pub60cor\cmnty_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\cmnty_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\baby_01.mid
program files\microsoft office\root\clipart\pub60cor\baby_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\baby_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\explr_01.mid
program files\microsoft office\root\clipart\pub60cor\explr_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\explr_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\fall_01.mid
program files\microsoft office\root\clipart\pub60cor\fall_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fall_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\fincl_01.mid
program files\microsoft office\root\clipart\pub60cor\fincl_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fincl_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\in00557_.wmf
program files\microsoft office\root\clipart\pub60cor\in00557_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00557_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00915_.wmf
program files\microsoft office\root\clipart\pub60cor\in00915_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00915_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00919_.wmf
program files\microsoft office\root\clipart\pub60cor\in00919_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00919_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00956_.wmf
program files\microsoft office\root\clipart\pub60cor\in00956_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00956_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\in00957_.wmf
program files\microsoft office\root\clipart\pub60cor\in00957_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\in00957_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0075478.gif
program files\microsoft office\root\clipart\pub60cor\j0075478.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0075478.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\fincl_02.mid
program files\microsoft office\root\clipart\pub60cor\fincl_02.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fincl_02.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\grden_01.mid
program files\microsoft office\root\clipart\pub60cor\grden_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\grden_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\grid_01.mid
program files\microsoft office\root\clipart\pub60cor\grid_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\grid_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\htech_01.mid
program files\microsoft office\root\clipart\pub60cor\htech_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\htech_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0086384.wmf
program files\microsoft office\root\clipart\pub60cor\j0086384.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0086384.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0086420.wmf
program files\microsoft office\root\clipart\pub60cor\j0086420.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0086420.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0086424.wmf
program files\microsoft office\root\clipart\pub60cor\j0086424.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0086424.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0086426.wmf
program files\microsoft office\root\clipart\pub60cor\j0086426.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0086426.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0086428.wmf
program files\microsoft office\root\clipart\pub60cor\j0086428.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0086428.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\indst_01.mid
program files\microsoft office\root\clipart\pub60cor\indst_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\indst_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\java_01.mid
program files\microsoft office\root\clipart\pub60cor\java_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\java_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0086432.wmf
program files\microsoft office\root\clipart\pub60cor\j0086432.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0086432.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0086478.wmf
program files\microsoft office\root\clipart\pub60cor\j0086478.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0086478.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\jngle_01.mid
program files\microsoft office\root\clipart\pub60cor\jngle_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\jngle_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\music_01.mid
program files\microsoft office\root\clipart\pub60cor\music_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\music_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0089945.wmf
program files\microsoft office\root\clipart\pub60cor\j0089945.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0089945.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0089992.wmf
program files\microsoft office\root\clipart\pub60cor\j0089992.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0089992.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090027.wmf
program files\microsoft office\root\clipart\pub60cor\j0090027.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090027.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090087.wmf
program files\microsoft office\root\clipart\pub60cor\j0090087.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090087.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090089.wmf
program files\microsoft office\root\clipart\pub60cor\j0090089.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090089.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090149.wmf
program files\microsoft office\root\clipart\pub60cor\j0090149.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090149.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090390.wmf
program files\microsoft office\root\clipart\pub60cor\j0090390.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090390.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090777.wmf
program files\microsoft office\root\clipart\pub60cor\j0090777.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090777.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\nbook_01.mid
program files\microsoft office\root\clipart\pub60cor\nbook_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\nbook_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\ocean_01.mid
program files\microsoft office\root\clipart\pub60cor\ocean_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\ocean_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\outdr_01.mid
program files\microsoft office\root\clipart\pub60cor\outdr_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\outdr_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0090779.wmf
program files\microsoft office\root\clipart\pub60cor\j0090779.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090779.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090781.wmf
program files\microsoft office\root\clipart\pub60cor\j0090781.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090781.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0090783.wmf
program files\microsoft office\root\clipart\pub60cor\j0090783.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0090783.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0093905.wmf
program files\microsoft office\root\clipart\pub60cor\j0093905.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0093905.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0098497.wmf
program files\microsoft office\root\clipart\pub60cor\j0098497.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0098497.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099145.jpg
program files\microsoft office\root\clipart\pub60cor\j0099145.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099145.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099146.wmf
program files\microsoft office\root\clipart\pub60cor\j0099146.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099146.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\paper_01.mid
program files\microsoft office\root\clipart\pub60cor\paper_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\paper_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_01.mid
program files\microsoft office\root\clipart\pub60cor\parnt_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_02.mid
program files\microsoft office\root\clipart\pub60cor\parnt_02.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_02.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_03.mid
program files\microsoft office\root\clipart\pub60cor\parnt_03.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_03.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_04.mid
program files\microsoft office\root\clipart\pub60cor\parnt_04.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_04.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_05.mid
program files\microsoft office\root\clipart\pub60cor\parnt_05.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_05.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_06.mid
program files\microsoft office\root\clipart\pub60cor\parnt_06.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_06.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_07.mid
program files\microsoft office\root\clipart\pub60cor\parnt_07.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_07.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_08.mid
program files\microsoft office\root\clipart\pub60cor\parnt_08.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_08.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0099147.jpg
program files\microsoft office\root\clipart\pub60cor\j0099147.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099147.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\parnt_09.mid
program files\microsoft office\root\clipart\pub60cor\parnt_09.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_09.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\parnt_10.mid
program files\microsoft office\root\clipart\pub60cor\parnt_10.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\parnt_10.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\road_01.mid
program files\microsoft office\root\clipart\pub60cor\road_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\road_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0099148.jpg
program files\microsoft office\root\clipart\pub60cor\j0099148.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099148.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099149.wmf
program files\microsoft office\root\clipart\pub60cor\j0099149.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099149.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099150.jpg
program files\microsoft office\root\clipart\pub60cor\j0099150.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099150.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099151.wmf
program files\microsoft office\root\clipart\pub60cor\j0099151.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099151.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099152.jpg
program files\microsoft office\root\clipart\pub60cor\j0099152.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099152.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099153.wmf
program files\microsoft office\root\clipart\pub60cor\j0099153.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099153.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099154.jpg
program files\microsoft office\root\clipart\pub60cor\j0099154.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099154.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099155.jpg
program files\microsoft office\root\clipart\pub60cor\j0099155.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099155.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099156.jpg
program files\microsoft office\root\clipart\pub60cor\j0099156.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099156.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099157.jpg
program files\microsoft office\root\clipart\pub60cor\j0099157.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099157.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\safri_01.mid
program files\microsoft office\root\clipart\pub60cor\safri_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\safri_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\schol_02.mid
program files\microsoft office\root\clipart\pub60cor\schol_02.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\schol_02.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0099158.wmf
program files\microsoft office\root\clipart\pub60cor\j0099158.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099158.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099159.wmf
program files\microsoft office\root\clipart\pub60cor\j0099159.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099159.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\show_01.mid
program files\microsoft office\root\clipart\pub60cor\show_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\show_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\space_01.mid
program files\microsoft office\root\clipart\pub60cor\space_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\space_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\j0099160.jpg
program files\microsoft office\root\clipart\pub60cor\j0099160.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099160.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099161.jpg
program files\microsoft office\root\clipart\pub60cor\j0099161.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099161.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\sprng_01.mid
program files\microsoft office\root\clipart\pub60cor\sprng_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\sprng_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\sumer_01.mid
program files\microsoft office\root\clipart\pub60cor\sumer_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\sumer_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\swest_01.mid
program files\microsoft office\root\clipart\pub60cor\swest_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\swest_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\urban_01.mid
program files\microsoft office\root\clipart\pub60cor\urban_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\urban_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\vctrn_01.mid
program files\microsoft office\root\clipart\pub60cor\vctrn_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\vctrn_01.mid
mid
File
program files\microsoft office\root\clipart\pub60cor\wnter_01.mid
program files\microsoft office\root\clipart\pub60cor\wnter_01.mid
c:\
c:\program files\microsoft office\root\clipart\pub60cor\wnter_01.mid
mid
File
program files\microsoft office\root\document themes 16\theme effects\banded edge.eftx
program files\microsoft office\root\document themes 16\theme effects\banded edge.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\banded edge.eftx
eftx
File
program files\microsoft office\root\clipart\pub60cor\j0099162.jpg
program files\microsoft office\root\clipart\pub60cor\j0099162.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099162.jpg
jpg
File
program files\microsoft office\root\document themes 16\theme effects\extreme shadow.eftx
program files\microsoft office\root\document themes 16\theme effects\extreme shadow.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\extreme shadow.eftx
eftx
File
program files\microsoft office\root\clipart\pub60cor\j0099163.wmf
program files\microsoft office\root\clipart\pub60cor\j0099163.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099163.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099164.wmf
program files\microsoft office\root\clipart\pub60cor\j0099164.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099164.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099165.jpg
program files\microsoft office\root\clipart\pub60cor\j0099165.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099165.jpg
jpg
File
program files\microsoft office\root\document themes 16\theme effects\frosted glass.eftx
program files\microsoft office\root\document themes 16\theme effects\frosted glass.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\frosted glass.eftx
eftx
File
program files\microsoft office\root\clipart\pub60cor\j0099166.jpg
program files\microsoft office\root\clipart\pub60cor\j0099166.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099166.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099167.jpg
program files\microsoft office\root\clipart\pub60cor\j0099167.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099167.jpg
jpg
File
program files\microsoft office\root\document themes 16\theme effects\glossy.eftx
program files\microsoft office\root\document themes 16\theme effects\glossy.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\glossy.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\glow edge.eftx
program files\microsoft office\root\document themes 16\theme effects\glow edge.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\glow edge.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\grunge texture.eftx
program files\microsoft office\root\document themes 16\theme effects\grunge texture.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\grunge texture.eftx
eftx
File
program files\microsoft office\root\clipart\pub60cor\j0099168.jpg
program files\microsoft office\root\clipart\pub60cor\j0099168.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099168.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099169.wmf
program files\microsoft office\root\clipart\pub60cor\j0099169.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099169.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099170.wmf
program files\microsoft office\root\clipart\pub60cor\j0099170.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099170.wmf
wmf
File
program files\microsoft office\root\document themes 16\theme effects\inset.eftx
program files\microsoft office\root\document themes 16\theme effects\inset.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\inset.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\milk glass.eftx
program files\microsoft office\root\document themes 16\theme effects\milk glass.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\milk glass.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\office 2007 - 2010.eftx
program files\microsoft office\root\document themes 16\theme effects\office 2007 - 2010.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\office 2007 - 2010.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\reflection.eftx
program files\microsoft office\root\document themes 16\theme effects\reflection.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\reflection.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\riblet.eftx
program files\microsoft office\root\document themes 16\theme effects\riblet.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\riblet.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\smokey glass.eftx
program files\microsoft office\root\document themes 16\theme effects\smokey glass.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\smokey glass.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\subtle solids.eftx
program files\microsoft office\root\document themes 16\theme effects\subtle solids.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\subtle solids.eftx
eftx
File
program files\microsoft office\root\document themes 16\theme effects\top shadow.eftx
program files\microsoft office\root\document themes 16\theme effects\top shadow.eftx
c:\
c:\program files\microsoft office\root\document themes 16\theme effects\top shadow.eftx
eftx
File
program files\microsoft office\root\flattener\api-ms-win-core-file-l1-2-0.dll
program files\microsoft office\root\flattener\api-ms-win-core-file-l1-2-0.dll
c:\
c:\program files\microsoft office\root\flattener\api-ms-win-core-file-l1-2-0.dll
dll
File
program files\microsoft office\root\flattener\api-ms-win-core-file-l2-1-0.dll
program files\microsoft office\root\flattener\api-ms-win-core-file-l2-1-0.dll
c:\
c:\program files\microsoft office\root\flattener\api-ms-win-core-file-l2-1-0.dll
dll
File
program files\microsoft office\root\flattener\api-ms-win-core-localization-l1-2-0.dll
program files\microsoft office\root\flattener\api-ms-win-core-localization-l1-2-0.dll
c:\
c:\program files\microsoft office\root\flattener\api-ms-win-core-localization-l1-2-0.dll
dll
File
program files\microsoft office\root\flattener\api-ms-win-core-processthreads-l1-1-1.dll
program files\microsoft office\root\flattener\api-ms-win-core-processthreads-l1-1-1.dll
c:\
c:\program files\microsoft office\root\flattener\api-ms-win-core-processthreads-l1-1-1.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\j0099171.wmf
program files\microsoft office\root\clipart\pub60cor\j0099171.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099171.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099172.wmf
program files\microsoft office\root\clipart\pub60cor\j0099172.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099172.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099173.wmf
program files\microsoft office\root\clipart\pub60cor\j0099173.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099173.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099174.wmf
program files\microsoft office\root\clipart\pub60cor\j0099174.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099174.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099175.wmf
program files\microsoft office\root\clipart\pub60cor\j0099175.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099175.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099176.wmf
program files\microsoft office\root\clipart\pub60cor\j0099176.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099176.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099177.wmf
program files\microsoft office\root\clipart\pub60cor\j0099177.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099177.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099178.wmf
program files\microsoft office\root\clipart\pub60cor\j0099178.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099178.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099179.wmf
program files\microsoft office\root\clipart\pub60cor\j0099179.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099179.wmf
wmf
File
program files\microsoft office\root\flattener\api-ms-win-core-synch-l1-2-0.dll
program files\microsoft office\root\flattener\api-ms-win-core-synch-l1-2-0.dll
c:\
c:\program files\microsoft office\root\flattener\api-ms-win-core-synch-l1-2-0.dll
dll
File
program files\microsoft office\root\flattener\api-ms-win-core-timezone-l1-1-0.dll
program files\microsoft office\root\flattener\api-ms-win-core-timezone-l1-1-0.dll
c:\
c:\program files\microsoft office\root\flattener\api-ms-win-core-timezone-l1-1-0.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\j0099180.wmf
program files\microsoft office\root\clipart\pub60cor\j0099180.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099180.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099181.wmf
program files\microsoft office\root\clipart\pub60cor\j0099181.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099181.wmf
wmf
File
program files\microsoft office\root\flattener\appvpackaging.dll
program files\microsoft office\root\flattener\appvpackaging.dll
c:\
c:\program files\microsoft office\root\flattener\appvpackaging.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\j0099182.wmf
program files\microsoft office\root\clipart\pub60cor\j0099182.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099182.wmf
wmf
File
program files\microsoft office\root\flattener\appvpackaging.dll.manifest
program files\microsoft office\root\flattener\appvpackaging.dll.manifest
c:\
c:\program files\microsoft office\root\flattener\appvpackaging.dll.manifest
manifest
File
program files\microsoft office\root\flattener\appvstreammap.dll
program files\microsoft office\root\flattener\appvstreammap.dll
c:\
c:\program files\microsoft office\root\flattener\appvstreammap.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\j0099183.wmf
program files\microsoft office\root\clipart\pub60cor\j0099183.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099183.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099184.wmf
program files\microsoft office\root\clipart\pub60cor\j0099184.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099184.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099185.jpg
program files\microsoft office\root\clipart\pub60cor\j0099185.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099185.jpg
jpg
File
program files\microsoft office\root\flattener\concrt140.dll
program files\microsoft office\root\flattener\concrt140.dll
c:\
c:\program files\microsoft office\root\flattener\concrt140.dll
dll
File
program files\microsoft office\root\flattener\flattener.exe
program files\microsoft office\root\flattener\flattener.exe
c:\
c:\program files\microsoft office\root\flattener\flattener.exe
exe
File
program files\microsoft office\root\flattener\microsoft.appv.eventing.dll
program files\microsoft office\root\flattener\microsoft.appv.eventing.dll
c:\
c:\program files\microsoft office\root\flattener\microsoft.appv.eventing.dll
dll
File
program files\microsoft office\root\flattener\microsoft.appv.modernizer.common.dll
program files\microsoft office\root\flattener\microsoft.appv.modernizer.common.dll
c:\
c:\program files\microsoft office\root\flattener\microsoft.appv.modernizer.common.dll
dll
File
program files\microsoft office\root\flattener\microsoft.appv.modernizer.csharp.dll
program files\microsoft office\root\flattener\microsoft.appv.modernizer.csharp.dll
c:\
c:\program files\microsoft office\root\flattener\microsoft.appv.modernizer.csharp.dll
dll
File
program files\microsoft office\root\flattener\microsoft.appv.modernizer.managedcpp.dll
program files\microsoft office\root\flattener\microsoft.appv.modernizer.managedcpp.dll
c:\
c:\program files\microsoft office\root\flattener\microsoft.appv.modernizer.managedcpp.dll
dll
File
program files\microsoft office\root\flattener\microsoft.tools.binarystore.dll
program files\microsoft office\root\flattener\microsoft.tools.binarystore.dll
c:\
c:\program files\microsoft office\root\flattener\microsoft.tools.binarystore.dll
dll
File
program files\microsoft office\root\flattener\microsoft.tools.office.c2r.common.dll
program files\microsoft office\root\flattener\microsoft.tools.office.c2r.common.dll
c:\
c:\program files\microsoft office\root\flattener\microsoft.tools.office.c2r.common.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\j0099186.jpg
program files\microsoft office\root\clipart\pub60cor\j0099186.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099186.jpg
jpg
File
program files\microsoft office\root\flattener\microsoft.tools.office.c2r.packager.dll
program files\microsoft office\root\flattener\microsoft.tools.office.c2r.packager.dll
c:\
c:\program files\microsoft office\root\flattener\microsoft.tools.office.c2r.packager.dll
dll
File
program files\microsoft office\root\flattener\msvcp120.dll
program files\microsoft office\root\flattener\msvcp120.dll
c:\
c:\program files\microsoft office\root\flattener\msvcp120.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\j0099187.jpg
program files\microsoft office\root\clipart\pub60cor\j0099187.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099187.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099188.jpg
program files\microsoft office\root\clipart\pub60cor\j0099188.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099188.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099189.jpg
program files\microsoft office\root\clipart\pub60cor\j0099189.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099189.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099190.jpg
program files\microsoft office\root\clipart\pub60cor\j0099190.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099190.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099191.jpg
program files\microsoft office\root\clipart\pub60cor\j0099191.jpg
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099191.jpg
jpg
File
program files\microsoft office\root\clipart\pub60cor\j0099192.gif
program files\microsoft office\root\clipart\pub60cor\j0099192.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099192.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099193.gif
program files\microsoft office\root\clipart\pub60cor\j0099193.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099193.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099194.gif
program files\microsoft office\root\clipart\pub60cor\j0099194.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099194.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099195.gif
program files\microsoft office\root\clipart\pub60cor\j0099195.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099195.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099196.gif
program files\microsoft office\root\clipart\pub60cor\j0099196.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099196.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099197.gif
program files\microsoft office\root\clipart\pub60cor\j0099197.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099197.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099198.gif
program files\microsoft office\root\clipart\pub60cor\j0099198.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099198.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099199.gif
program files\microsoft office\root\clipart\pub60cor\j0099199.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099199.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099200.gif
program files\microsoft office\root\clipart\pub60cor\j0099200.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099200.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099201.gif
program files\microsoft office\root\clipart\pub60cor\j0099201.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099201.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099202.gif
program files\microsoft office\root\clipart\pub60cor\j0099202.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099202.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099203.gif
program files\microsoft office\root\clipart\pub60cor\j0099203.gif
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099203.gif
gif
File
program files\microsoft office\root\clipart\pub60cor\j0099204.wmf
program files\microsoft office\root\clipart\pub60cor\j0099204.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099204.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0099205.wmf
program files\microsoft office\root\clipart\pub60cor\j0099205.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0099205.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0101856.bmp
program files\microsoft office\root\clipart\pub60cor\j0101856.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101856.bmp
bmp
File
program files\microsoft office\root\flattener\msvcp140.dll
program files\microsoft office\root\flattener\msvcp140.dll
c:\
c:\program files\microsoft office\root\flattener\msvcp140.dll
dll
File
program files\microsoft office\root\flattener\msvcr120.dll
program files\microsoft office\root\flattener\msvcr120.dll
c:\
c:\program files\microsoft office\root\flattener\msvcr120.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\j0101857.bmp
program files\microsoft office\root\clipart\pub60cor\j0101857.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101857.bmp
bmp
File
program files\microsoft office\root\flattener\ucrtbase.dll
program files\microsoft office\root\flattener\ucrtbase.dll
c:\
c:\program files\microsoft office\root\flattener\ucrtbase.dll
dll
File
program files\microsoft office\root\flattener\vccorlib140.dll
program files\microsoft office\root\flattener\vccorlib140.dll
c:\
c:\program files\microsoft office\root\flattener\vccorlib140.dll
dll
File
program files\microsoft office\root\flattener\vcruntime140.dll
program files\microsoft office\root\flattener\vcruntime140.dll
c:\
c:\program files\microsoft office\root\flattener\vcruntime140.dll
dll
File
program files\microsoft office\root\integration\c2rint.16.msi
program files\microsoft office\root\integration\c2rint.16.msi
c:\
c:\program files\microsoft office\root\integration\c2rint.16.msi
msi
File
program files\microsoft office\root\integration\c2rintloc.en-us.16.msi
program files\microsoft office\root\integration\c2rintloc.en-us.16.msi
c:\
c:\program files\microsoft office\root\integration\c2rintloc.en-us.16.msi
msi
File
program files\microsoft office\root\integration\integrator.exe
program files\microsoft office\root\integration\integrator.exe
c:\
c:\program files\microsoft office\root\integration\integrator.exe
exe
File
program files\microsoft office\root\integration\onedrivesetup.exe
program files\microsoft office\root\integration\onedrivesetup.exe
c:\
c:\program files\microsoft office\root\integration\onedrivesetup.exe
exe
File
program files\microsoft office\root\integration\sppredist.msi
program files\microsoft office\root\integration\sppredist.msi
c:\
c:\program files\microsoft office\root\integration\sppredist.msi
msi
File
program files\microsoft office\root\integration\windows6.1-kb2999226-x64.msu
program files\microsoft office\root\integration\windows6.1-kb2999226-x64.msu
c:\
c:\program files\microsoft office\root\integration\windows6.1-kb2999226-x64.msu
msu
File
program files\microsoft office\root\clipart\pub60cor\j0101858.bmp
program files\microsoft office\root\clipart\pub60cor\j0101858.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101858.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101859.bmp
program files\microsoft office\root\clipart\pub60cor\j0101859.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101859.bmp
bmp
File
program files\microsoft office\root\integration\windows8-rt-kb2999226-x64.msu
program files\microsoft office\root\integration\windows8-rt-kb2999226-x64.msu
c:\
c:\program files\microsoft office\root\integration\windows8-rt-kb2999226-x64.msu
msu
File
program files\microsoft office\root\integration\windows8-rt-kb2999226-x86.msu
program files\microsoft office\root\integration\windows8-rt-kb2999226-x86.msu
c:\
c:\program files\microsoft office\root\integration\windows8-rt-kb2999226-x86.msu
msu
File
program files\microsoft office\root\clipart\pub60cor\j0101860.bmp
program files\microsoft office\root\clipart\pub60cor\j0101860.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101860.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101861.bmp
program files\microsoft office\root\clipart\pub60cor\j0101861.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101861.bmp
bmp
File
program files\microsoft office\root\integration\windows8.1-kb2999226-x64.msu
program files\microsoft office\root\integration\windows8.1-kb2999226-x64.msu
c:\
c:\program files\microsoft office\root\integration\windows8.1-kb2999226-x64.msu
msu
File
program files\microsoft office\root\clipart\pub60cor\j0101862.bmp
program files\microsoft office\root\clipart\pub60cor\j0101862.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101862.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101863.bmp
program files\microsoft office\root\clipart\pub60cor\j0101863.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101863.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101864.bmp
program files\microsoft office\root\clipart\pub60cor\j0101864.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101864.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101865.bmp
program files\microsoft office\root\clipart\pub60cor\j0101865.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101865.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101866.bmp
program files\microsoft office\root\clipart\pub60cor\j0101866.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101866.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101867.bmp
program files\microsoft office\root\clipart\pub60cor\j0101867.bmp
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101867.bmp
bmp
File
program files\microsoft office\root\clipart\pub60cor\j0101980.wmf
program files\microsoft office\root\clipart\pub60cor\j0101980.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0101980.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0102002.wmf
program files\microsoft office\root\clipart\pub60cor\j0102002.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0102002.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0102594.wmf
program files\microsoft office\root\clipart\pub60cor\j0102594.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0102594.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0102762.wmf
program files\microsoft office\root\clipart\pub60cor\j0102762.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0102762.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0102984.wmf
program files\microsoft office\root\clipart\pub60cor\j0102984.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0102984.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0103058.wmf
program files\microsoft office\root\clipart\pub60cor\j0103058.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0103058.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0103262.wmf
program files\microsoft office\root\clipart\pub60cor\j0103262.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0103262.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0103402.wmf
program files\microsoft office\root\clipart\pub60cor\j0103402.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0103402.wmf
wmf
File
program files\microsoft office\root\integration\windows8.1-kb2999226-x86.msu
program files\microsoft office\root\integration\windows8.1-kb2999226-x86.msu
c:\
c:\program files\microsoft office\root\integration\windows8.1-kb2999226-x86.msu
msu
File
program files\microsoft office\root\clipart\pub60cor\j0103812.wmf
program files\microsoft office\root\clipart\pub60cor\j0103812.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0103812.wmf
wmf
File
program files\microsoft office\root\licenses16\accessr_grace-ppd.xrm-ms
program files\microsoft office\root\licenses16\accessr_grace-ppd.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_grace-ppd.xrm-ms
xrm-ms
File
program files\microsoft office\root\licenses16\accessr_grace-ul-oob.xrm-ms
program files\microsoft office\root\licenses16\accessr_grace-ul-oob.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_grace-ul-oob.xrm-ms
xrm-ms
File
program files\microsoft office\root\licenses16\accessr_oem_perp-pl.xrm-ms
program files\microsoft office\root\licenses16\accessr_oem_perp-pl.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_oem_perp-pl.xrm-ms
xrm-ms
File
program files\microsoft office\root\licenses16\accessr_oem_perp-ppd.xrm-ms
program files\microsoft office\root\licenses16\accessr_oem_perp-ppd.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_oem_perp-ppd.xrm-ms
xrm-ms
File
program files\microsoft office\root\licenses16\accessr_oem_perp-ul-oob.xrm-ms
program files\microsoft office\root\licenses16\accessr_oem_perp-ul-oob.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_oem_perp-ul-oob.xrm-ms
xrm-ms
File
program files\microsoft office\root\clipart\pub60cor\j0103850.wmf
program files\microsoft office\root\clipart\pub60cor\j0103850.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0103850.wmf
wmf
File
program files\microsoft office\root\licenses16\accessr_oem_perp-ul-phn.xrm-ms
program files\microsoft office\root\licenses16\accessr_oem_perp-ul-phn.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_oem_perp-ul-phn.xrm-ms
xrm-ms
File
program files\microsoft office\root\licenses16\accessr_retail-pl.xrm-ms
program files\microsoft office\root\licenses16\accessr_retail-pl.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_retail-pl.xrm-ms
xrm-ms
File
program files\microsoft office\root\clipart\pub60cor\j0105230.wmf
program files\microsoft office\root\clipart\pub60cor\j0105230.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105230.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105232.wmf
program files\microsoft office\root\clipart\pub60cor\j0105232.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105232.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105234.wmf
program files\microsoft office\root\clipart\pub60cor\j0105234.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105234.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105238.wmf
program files\microsoft office\root\clipart\pub60cor\j0105238.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105238.wmf
wmf
File
program files\microsoft office\root\licenses16\accessr_retail-ppd.xrm-ms
program files\microsoft office\root\licenses16\accessr_retail-ppd.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_retail-ppd.xrm-ms
xrm-ms
File
program files\microsoft office\root\clipart\pub60cor\j0105240.wmf
program files\microsoft office\root\clipart\pub60cor\j0105240.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105240.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105244.wmf
program files\microsoft office\root\clipart\pub60cor\j0105244.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105244.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105246.wmf
program files\microsoft office\root\clipart\pub60cor\j0105246.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105246.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105250.wmf
program files\microsoft office\root\clipart\pub60cor\j0105250.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105250.wmf
wmf
File
program files\microsoft office\root\licenses16\accessr_retail-ul-oob.xrm-ms
program files\microsoft office\root\licenses16\accessr_retail-ul-oob.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_retail-ul-oob.xrm-ms
xrm-ms
File
program files\microsoft office\root\licenses16\accessr_retail-ul-phn.xrm-ms
program files\microsoft office\root\licenses16\accessr_retail-ul-phn.xrm-ms
c:\
c:\program files\microsoft office\root\licenses16\accessr_retail-ul-phn.xrm-ms
xrm-ms
File
program files\microsoft office\root\clipart\pub60cor\j0105266.wmf
program files\microsoft office\root\clipart\pub60cor\j0105266.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105266.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105272.wmf
program files\microsoft office\root\clipart\pub60cor\j0105272.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105272.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105276.wmf
program files\microsoft office\root\clipart\pub60cor\j0105276.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105276.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105280.wmf
program files\microsoft office\root\clipart\pub60cor\j0105280.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105280.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105282.wmf
program files\microsoft office\root\clipart\pub60cor\j0105282.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105282.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105286.wmf
program files\microsoft office\root\clipart\pub60cor\j0105286.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105286.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105288.wmf
program files\microsoft office\root\clipart\pub60cor\j0105288.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105288.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\j0105292.wmf
program files\microsoft office\root\clipart\pub60cor\j0105292.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\j0105292.wmf
wmf
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER
payload2.exe
C:\Users\FD1HVy\AppData\Roaming\payload2.exe
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE
payload2.exe
6647296
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Startup
File
STD_OUTPUT_HANDLE
File
STD_INPUT_HANDLE
File
users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
c:\
c:\users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe
exe
File
$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
c:\
c:\$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000\desktop.ini
ini
File
$winre_backup_partition.marker
$winre_backup_partition.marker
c:\
c:\$winre_backup_partition.marker
marker
File
boot\bcd.log
boot\bcd.log
c:\
c:\boot\bcd.log
log
File
boot\updaterevokesipolicy.p7b
boot\updaterevokesipolicy.p7b
c:\
c:\boot\updaterevokesipolicy.p7b
p7b
File
boot\bcd
boot\bcd
c:\
c:\boot\bcd
File
boot\bcd.log1
boot\bcd.log1
c:\
c:\boot\bcd.log1
log1
File
boot\bcd.log2
boot\bcd.log2
c:\
c:\boot\bcd.log2
log2
File
boot\bg-bg\bootmgr.exe.mui
boot\bg-bg\bootmgr.exe.mui
c:\
c:\boot\bg-bg\bootmgr.exe.mui
mui
File
boot\bootspaces.dll
boot\bootspaces.dll
c:\
c:\boot\bootspaces.dll
dll
File
boot\bootvhd.dll
boot\bootvhd.dll
c:\
c:\boot\bootvhd.dll
dll
File
boot\cs-cz\bootmgr.exe.mui
boot\cs-cz\bootmgr.exe.mui
c:\
c:\boot\cs-cz\bootmgr.exe.mui
mui
File
bootmgr
bootmgr
c:\
c:\bootmgr
File
hiberfil.sys
hiberfil.sys
c:\
c:\hiberfil.sys
sys
File
pagefile.sys
pagefile.sys
c:\
c:\pagefile.sys
sys
File
program files\common files\microsoft shared\clicktorun\apiclient.dll
program files\common files\microsoft shared\clicktorun\apiclient.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\apiclient.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvcatalog.dll
program files\common files\microsoft shared\clicktorun\appvcatalog.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvcatalog.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvfilesystemmetadata.dll
program files\common files\microsoft shared\clicktorun\appvfilesystemmetadata.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvfilesystemmetadata.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvintegration.dll
program files\common files\microsoft shared\clicktorun\appvintegration.dll
c:\
c:\program files\common files\microsoft shared\clicktorun\appvintegration.dll
dll
File
program files\common files\microsoft shared\clicktorun\appvintegration.dll.id-b4197730.[vip76@protonmail.com].html
program files\common files\microsoft shared\clicktorun\appvintegration.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\common files\microsoft shared\clicktorun\appvintegration.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll.id-b4197730.[vip76@protonmail.com].html
program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\common files\microsoft shared\clicktorun\mso20win32client.dll.id-b4197730.[vip76@protonmail.com].html
program files\common files\microsoft shared\clicktorun\mso20win32client.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\common files\microsoft shared\clicktorun\mso20win32client.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\common files\microsoft shared\clicktorun\mso30win32client.dll.id-b4197730.[vip76@protonmail.com].html
program files\common files\microsoft shared\clicktorun\mso30win32client.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\common files\microsoft shared\clicktorun\mso30win32client.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\common files\microsoft shared\clicktorun\mso40uires.dll.id-b4197730.[vip76@protonmail.com].html
program files\common files\microsoft shared\clicktorun\mso40uires.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\common files\microsoft shared\clicktorun\mso40uires.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\common files\microsoft shared\clicktorun\mso40uiwin32client.dll.id-b4197730.[vip76@protonmail.com].html
program files\common files\microsoft shared\clicktorun\mso40uiwin32client.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\common files\microsoft shared\clicktorun\mso40uiwin32client.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\common files\microsoft shared\clicktorun\officeclicktorun.exe.id-b4197730.[vip76@protonmail.com].html
program files\common files\microsoft shared\clicktorun\officeclicktorun.exe.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\common files\microsoft shared\clicktorun\officeclicktorun.exe.id-b4197730.[vip76@protonmail.com].html
html
File
program files\common files\microsoft shared\ink\alphabet.xml
program files\common files\microsoft shared\ink\alphabet.xml
c:\
c:\program files\common files\microsoft shared\ink\alphabet.xml
xml
File
program files\common files\microsoft shared\ink\content.xml
program files\common files\microsoft shared\ink\content.xml
c:\
c:\program files\common files\microsoft shared\ink\content.xml
xml
File
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-join.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-split.avi
avi
File
program files\common files\microsoft shared\ink\en-us\correct.avi
program files\common files\microsoft shared\ink\en-us\correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\correct.avi
avi
File
program files\java\jre1.8.0_144\bin\msvcp120.dll
program files\java\jre1.8.0_144\bin\msvcp120.dll
c:\
c:\program files\java\jre1.8.0_144\bin\msvcp120.dll
dll
File
program files\java\jre1.8.0_144\bin\msvcr100.dll
program files\java\jre1.8.0_144\bin\msvcr100.dll
c:\
c:\program files\java\jre1.8.0_144\bin\msvcr100.dll
dll
File
program files\java\jre1.8.0_144\bin\msvcr120.dll
program files\java\jre1.8.0_144\bin\msvcr120.dll
c:\
c:\program files\java\jre1.8.0_144\bin\msvcr120.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\fd00297_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00297_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00297_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00306_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00306_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00306_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00382_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00382_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00382_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00455_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00455_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00455_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf
wmf
File
program files\java\jre1.8.0_144\bin\net.dll
program files\java\jre1.8.0_144\bin\net.dll
c:\
c:\program files\java\jre1.8.0_144\bin\net.dll
dll
File
program files\java\jre1.8.0_144\bin\nio.dll
program files\java\jre1.8.0_144\bin\nio.dll
c:\
c:\program files\java\jre1.8.0_144\bin\nio.dll
dll
File
program files\java\jre1.8.0_144\bin\npt.dll
program files\java\jre1.8.0_144\bin\npt.dll
c:\
c:\program files\java\jre1.8.0_144\bin\npt.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf
program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf
program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf
wmf
File
program files\java\jre1.8.0_144\bin\orbd.exe
program files\java\jre1.8.0_144\bin\orbd.exe
c:\
c:\program files\java\jre1.8.0_144\bin\orbd.exe
exe
File
program files\java\jre1.8.0_144\bin\pack200.exe
program files\java\jre1.8.0_144\bin\pack200.exe
c:\
c:\program files\java\jre1.8.0_144\bin\pack200.exe
exe
File
program files\java\jre1.8.0_144\bin\plugin2\msvcr100.dll
program files\java\jre1.8.0_144\bin\plugin2\msvcr100.dll
c:\
c:\program files\java\jre1.8.0_144\bin\plugin2\msvcr100.dll
dll
File
program files\java\jre1.8.0_144\bin\plugin2\npjp2.dll
program files\java\jre1.8.0_144\bin\plugin2\npjp2.dll
c:\
c:\program files\java\jre1.8.0_144\bin\plugin2\npjp2.dll
dll
File
program files\java\jre1.8.0_144\bin\policytool.exe
program files\java\jre1.8.0_144\bin\policytool.exe
c:\
c:\program files\java\jre1.8.0_144\bin\policytool.exe
exe
File
program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf
program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\flap.wmf
program files\microsoft office\root\clipart\pub60cor\flap.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\flap.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf
wmf
File
program files\java\jre1.8.0_144\bin\prism_common.dll
program files\java\jre1.8.0_144\bin\prism_common.dll
c:\
c:\program files\java\jre1.8.0_144\bin\prism_common.dll
dll
File
program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf
wmf
File
program files\java\jre1.8.0_144\bin\prism_d3d.dll
program files\java\jre1.8.0_144\bin\prism_d3d.dll
c:\
c:\program files\java\jre1.8.0_144\bin\prism_d3d.dll
dll
File
program files\java\jre1.8.0_144\bin\prism_sw.dll
program files\java\jre1.8.0_144\bin\prism_sw.dll
c:\
c:\program files\java\jre1.8.0_144\bin\prism_sw.dll
dll
File
program files\java\jre1.8.0_144\bin\resource.dll
program files\java\jre1.8.0_144\bin\resource.dll
c:\
c:\program files\java\jre1.8.0_144\bin\resource.dll
dll
File
program files\java\jre1.8.0_144\bin\rmid.exe
program files\java\jre1.8.0_144\bin\rmid.exe
c:\
c:\program files\java\jre1.8.0_144\bin\rmid.exe
exe
File
program files\java\jre1.8.0_144\bin\rmiregistry.exe
program files\java\jre1.8.0_144\bin\rmiregistry.exe
c:\
c:\program files\java\jre1.8.0_144\bin\rmiregistry.exe
exe
File
program files\java\jre1.8.0_144\bin\server\classes.jsa
program files\java\jre1.8.0_144\bin\server\classes.jsa
c:\
c:\program files\java\jre1.8.0_144\bin\server\classes.jsa
jsa
File
program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\server\jvm.dll
program files\java\jre1.8.0_144\bin\server\jvm.dll
c:\
c:\program files\java\jre1.8.0_144\bin\server\jvm.dll
dll
File
program files\java\jre1.8.0_144\bin\server\jvm.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\server\jvm.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\server\jvm.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf
program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf
program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf
wmf
File
program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf
program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf
wmf
File
windows\system32\payload2.exe
windows\system32\payload2.exe
c:\
c:\windows\system32\payload2.exe
exe
File
programdata\microsoft\windows\start menu\programs\startup\payload2.exe
programdata\microsoft\windows\start menu\programs\startup\payload2.exe
c:\
c:\programdata\microsoft\windows\start menu\programs\startup\payload2.exe
exe
File
program files\java\jre1.8.0_144\bin\management.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\management.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\management.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\mlib_image.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\mlib_image.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\mlib_image.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\msvcp120.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\msvcp120.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\msvcp120.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\msvcr120.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\msvcr120.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\msvcr120.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00455_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00455_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00455_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\net.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\net.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\net.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\nio.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\nio.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\nio.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\npt.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\npt.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\npt.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\orbd.exe.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\orbd.exe.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\orbd.exe.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\pack200.exe.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\pack200.exe.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\pack200.exe.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\plugin2\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\plugin2\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\plugin2\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\plugin2\npjp2.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\plugin2\npjp2.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\plugin2\npjp2.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\policytool.exe.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\policytool.exe.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\policytool.exe.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\flap.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\flap.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\flap.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\prism_d3d.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\prism_d3d.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\prism_d3d.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\prism_sw.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\prism_sw.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\prism_sw.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\resource.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\resource.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\resource.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\prism_common.dll.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\prism_common.dll.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\prism_common.dll.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\rmid.exe.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\rmid.exe.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\rmid.exe.id-b4197730.[vip76@protonmail.com].html
html
File
program files\java\jre1.8.0_144\bin\rmiregistry.exe.id-b4197730.[vip76@protonmail.com].html
program files\java\jre1.8.0_144\bin\rmiregistry.exe.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\java\jre1.8.0_144\bin\rmiregistry.exe.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf.id-b4197730.[vip76@protonmail.com].html
html
File
program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf.id-b4197730.[vip76@protonmail.com].html
program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf.id-b4197730.[vip76@protonmail.com].html
c:\
c:\program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf.id-b4197730.[vip76@protonmail.com].html
html
Analyzed Sample #168189
Malware Artifacts
168189
Sample-ID: #168189
Job-ID: #411614
This sample was analyzed by VMRay Analyzer 3.1.1 on a Windows 10 Redstone 2 system
100
VTI Score based on VTI Database Version 3.4
Metadata of Sample File #168189
Submission-ID: #298213
a728e9ca992a1c43171e892e2f12678750bdcb81f52dfca32acf671623d17828exe
MD5
ce1773b3f3f70002f2b5e211f1a8da6d
SHA1
a98c39309dd5e5516fe4cb5152ace0e255cc4c2b
SHA256
a728e9ca992a1c43171e892e2f12678750bdcb81f52dfca32acf671623d17828
Opened_By
Metadata of Analysis for Job-ID #411614
True
Maximum binlog size reached
True
173.319
NQDPDE
win10_64_rs2
x86 64-bit
Windows 10 Redstone 2
10.0.15063.540 (f6f48955-5489-4b24-b4df-942361f0730d)
FD1HVy
NQDPDE
This is a property collection for additional information of VMRay analysis
VMRay Analyzer
Anti Analysis
VTI rule match with VTI rule score 2/5
vmray_dynamic_api_usage_by_api
Resolves an unusually high number of APIs.
Resolves APIs dynamically to possibly evade static detection
Process
VTI rule match with VTI rule score 1/5
vmray_install_ipc_endpoint
Creates mutex with name "Global\syncronize_M77T2YA".
Creates system object
Process
VTI rule match with VTI rule score 1/5
vmray_install_ipc_endpoint
Creates mutex with name "Global\syncronize_M77T2YU".
Creates system object
Process
VTI rule match with VTI rule score 0/5
vmray_enumerate_processes
Enumerates running processes.
Enumerates running processes
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "C:\WINDOWS\System32\payload2.exe" to Windows startup via registry.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\users\fd1hvy\appdata\roaming\microsoft\windows\start menu\programs\startup\payload2.exe" to Windows startup folder.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\programdata\microsoft\windows\start menu\programs\startup\payload2.exe" to Windows startup folder.
Installs system startup script or application
Process
VTI rule match with VTI rule score 1/5
vmray_create_process_with_hidden_window
The process "C:\WINDOWS\system32\cmd.exe" starts with hidden window.
Creates process with hidden window
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\$recycle.bin\s-1-5-18" has a changed appearance.
Changes folder appearance
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\$recycle.bin\s-1-5-21-1051304884-625712362-2192934891-1000" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\c2rheartbeatconfig.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\officeupdateschedule.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\servicewatcherschedule.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\en-us\boxed-correct.avi".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\flickanimation.avi.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\hwrusalm.dat.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\hwrusash.dat.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\desktop.ini.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files\common files\microsoft shared\stationery" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\desktop.ini.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\server\xusage.txt.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\ffjcext.zip.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\splash.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\splash@2x.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_copydrop32x32.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_copynodrop32x32.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_linkdrop32x32.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_linknodrop32x32.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_movenodrop32x32.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\win32_movedrop32x32.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\jvm.hprof.txt.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\tzdb.dat.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\thirdpartylicensereadme-javafx.txt.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\readme.txt.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\thirdpartylicensereadme.txt.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\appxmanifest.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\filesystemmetadata.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office16\ospp.htm.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office16\slerror.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office16\ospp.vbs.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.common.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\appxmanifestloc.en-us.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\packagemanifests\authoredextensions.xml.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00004_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00011_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00021_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00037_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00038_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00040_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00052_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00090_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00092_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00103_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00120_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00057_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00126_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00129_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00130_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00135_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00139_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00142_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00154_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00157_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00158_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00160_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00161_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00163_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00164_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00165_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00167_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00169_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00170_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00171_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00172_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00174_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00175_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ag00176_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an00010_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an00015_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an00790_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an00853_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an00914_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an00932_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an00965_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01039_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01044_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01060_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01084_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01173_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01174_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01184_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01216_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01218_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01251_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an01545_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an02122_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an02559_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an02724_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an03500_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04117_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04108_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04134_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04174_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04191_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04195_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04196_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04206_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04225_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04235_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04267_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04269_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04323_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04326_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04332_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04355_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04369_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04385_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\an04384_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd00141_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd00146_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd00155_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd00160_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd00173_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd05119_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd06102_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd00116_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd06200_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd07804_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd07831_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd08758_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd08773_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd07761_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd08808_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd08868_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd09031_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd09194_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd09662_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd09664_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd10890_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd19563_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd19582_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd19695_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd10972_.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd19827_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd19828_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd19986_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd19988_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bd20013_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00008_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00012_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00045_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00098_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00105_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00122_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00130_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00148_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00152_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00194_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00008_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00195_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00242_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00247_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00234_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00248_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00252_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00254_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00261_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00262_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00265_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00267_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00269_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00270_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00273_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00274_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00296_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00390_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
Process
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\WINDOWS\system32\mode.com".
Reads from memory of another process
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00392_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00525_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00526_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00648_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00524_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00921_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00923_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00932_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bl00985_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\boat.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00076_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00078_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00092_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00100_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\boatinst.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00135_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00136_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00145_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00174_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00184_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00186_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00200_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00224_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00440_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00441_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00442_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00439_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00443_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00444_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00445_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00453_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01080_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01603_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs00438_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01634_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01635_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01636_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01637_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01638_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\bs01639_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\cg1606.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\classic1.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\classic2.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\clip.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\crane.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\craninst.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\cup.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\cupinst.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00117_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00121_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00234_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00255_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\crane.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\designer\msaddndr.olb.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-heap-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-locale-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-private-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-process-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-runtime-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-math-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-stdio-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-string-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-time-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-utility-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\api-ms-win-crt-multibyte-l1-1-0.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvcleaner.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvintegration.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvintegration.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvisvstream32.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystems32.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvisvsubsystems64.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvscripting.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\appvshnotify.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\c2r32.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\c2rui.en-us.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\i640.hash.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\integratedoffice.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\concrt140.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\i641033.hash.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mavinject32.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso20win32client.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso20win32client.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso30win32client.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso30win32client.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso40uires.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso40uires.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso40uiwin32client.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\mso40uiwin32client.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\msointl30.en-us.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\officec2rclient.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\officec2rcom.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\officeclicktorun.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\officeclicktorun.exe".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\ucrtbase.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\clicktorun\vccorlib140.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\da-dk\tipresx.dll.mui".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\inkobj.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\micaut.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\mraut.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\tabskb.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office16\liclua.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office16\office setup controller\pidgenx.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office16\office setup controller\pkeyconfig-office.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office16\office setup controller\pkeyconfig.companion.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\source engine\ose.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vc\msdia100.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vc\msdia90.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00255_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\1033\vstoinstallerui.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\vstoinstaller.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\vstoloader.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\1033\vstoloaderui.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\vstomessageprovider.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\vstoee100.tlb.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\vstoee.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\vstoee90.tlb.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\internet explorer\signup\install.ins.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\awt.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\bci.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\dcpr.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00256_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00261_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00297_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00372_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00405_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00407_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00413_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00414_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00419_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00437_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00448_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00449_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00687_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd00705_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01015_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01039_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01138_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01139_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01140_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\decora_sse.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\deploy.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\dtplugin\deployjava1.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\dtplugin\npdeployjava1.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01143_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01145_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01146_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01151_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01152_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01157_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01160_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01162_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01163_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01166_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01167_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01168_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01169_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01170_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01171_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01172_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01173_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\dt_shmem.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\dt_socket.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\eula.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01176_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01178_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01179_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01180_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01181_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01182_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01183_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01186_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01366_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01434_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01585_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01586_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01628_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\glib-lite.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\gstreamer-lite.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\fxplugins.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\hprof.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\glass.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\instrument.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\j2pcsc.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\j2pkcs11.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\fontmanager.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jaas_nt.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jabswitch.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01629_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\java-rmi.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\java.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01631_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01761_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01772_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01793_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01629_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ed00010_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ed00019_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ed00172_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ed00184_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00006_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00202_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\dd01630_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00222_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00242_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00319_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00320_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00397_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\en00902_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00074_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\java.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javaaccessbridge-64.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javacpl.cpl.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javacpl.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javafx_font.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javafx_font_t2k.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javafx_iio.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javaw.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\javaws.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\java_crw_demo.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jawt.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jawtaccessbridge-64.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jdwp.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00076_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00077_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00086_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00090_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00096_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00296_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00297_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00306_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jfr.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jfxmedia.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jfxwebkit.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00336_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00361_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00369_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00382_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00397_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00403_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00414_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00419_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jjs.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jli.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jp2iexp.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jp2launcher.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jp2native.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jp2ssv.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jsdt.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jsound.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jsoundds.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\jpeg.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\kcms.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\kinit.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\klist.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\ktab.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\keytool.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\lcms.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\management.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\mlib_image.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\msvcp120.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\msvcr120.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00428_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00438_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00455_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00459_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00544_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00564_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00543_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "6647296" to Windows startup via registry.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "C:\Users\FD1HVy\AppData\Roaming\payload2.exe" to Windows startup via registry.
Installs system startup script or application
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\server\jvm.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\copyright.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\accessibility.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\amd64\jvm.cfg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\calendars.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\charsets.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\classlist.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\cmm\ciexyz.pf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\cmm\gray.pf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\cmm\linear_rgb.pf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\cmm\pycc.pf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\cmm\srgb.pf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\content-types.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\currency.data.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00586_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00779_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00799_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00814_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00965_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00435_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01074_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd00775_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01084_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01176_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01193_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01196_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01548_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01657_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\cmm\pycc.pf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_es.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01191_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01658_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01659_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd01660_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02068_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_de.properties".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02071_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02075_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_de.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_fr.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_it.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_ja.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_pt_br.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_sv.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02088_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02097_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02115_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_zh_hk.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_zh_tw.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02116_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy.jar".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02141_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02153_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_ko.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\access-bridge-64.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy\messages_zh_cn.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\deploy.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\cldrdata.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\dnsns.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\jaccess.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\jfxrt.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\jfxrt.jar".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\meta-index.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\nashorn.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\sunec.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\localedata.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\server\classes.jsa.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\sunmscapi.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02161_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\sunjce_provider.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\flap.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00057_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\sunpkcs11.jar".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00231_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00235_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00236_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00241_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00260_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00276_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00334_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00443_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00513_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00524_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00526_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\sunpkcs11.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00546_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00601_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\ext\zipfs.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fd02158_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fontconfig.bfc".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00084_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fontconfig.properties.src.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemibold.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00602_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fontconfig.bfc.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\flavormap.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightdemiitalic.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightitalic.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidabrightregular.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00623_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00625_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidasansdemibold.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00527_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidasansdemibold.ttf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidasansregular.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterbold.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\images\cursors\cursors.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00612_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00669_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00681_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00685_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00687_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00693_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00636_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01013_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01015_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\fonts\lucidatypewriterregular.ttf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01065_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01080_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01242_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01291_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01329_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01461_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\javaws.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\jce.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\jfr\default.jfc.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\jfr\profile.jfc.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\jfr.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\javafx.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh00688_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01058_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01618_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01759_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01875_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh01923_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\jfxswt.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\jsse.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\logging.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\management\jmxremote.access.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\management\jmxremote.password.template.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\management\management.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\management\snmp.acl.template.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\management-agent.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh02155_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh02166_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh02282_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\meta-index.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\net.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh02298_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh02312_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\psfont.properties.ja.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\psfontj2d.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\resources.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\rt.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\blacklist.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\blacklisted.certs.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\cacerts.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hh02313_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hm00005_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\plugin.jar".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\plugin.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\java.policy.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\java.security.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\javaws.policy.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\local_policy.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\security\us_export_policy.jar.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\sound.properties.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\lib\tzmappings.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\license.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\release.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hm00116_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hm00426_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00046_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00118_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hm00114_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00177_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00204_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00233_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00343_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00346_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00351_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\client\appvisvsubsystems64.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\client\mfc140u.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\hm00172_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\east_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\explr_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fall_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fincl_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\carbn_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\baby_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00956_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00957_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\cmnty_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\grid_01.mid".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00919_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0086384.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0086420.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00557_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0086424.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0086426.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\in00915_.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0086428.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\htech_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\indst_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\java_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0075478.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0086432.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0086478.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\grden_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\jngle_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0089945.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0089992.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090027.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\jngle_01.mid".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090087.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090089.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090149.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090390.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\nbook_01.mid".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\fincl_02.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\ocean_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\music_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\outdr_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090777.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090779.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090781.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0090783.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0093905.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0098497.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\paper_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\grid_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_02.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_03.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_04.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_05.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_06.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\nbook_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_07.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099145.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_08.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_09.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\parnt_10.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099148.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099149.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099146.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099150.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099151.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099152.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099153.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099154.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099147.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099156.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099157.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\safri_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\schol_02.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099158.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099159.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\road_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\show_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\space_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
Process
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\WINDOWS\system32\vssadmin.exe".
Reads from memory of another process
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099160.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099161.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\sprng_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\sumer_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\swest_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\urban_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099155.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099162.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\vctrn_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099163.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099164.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099165.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099166.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099167.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\frosted glass.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\wnter_01.mid.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\glossy.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\glow edge.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\extreme shadow.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\banded edge.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\grunge texture.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099168.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099169.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\inset.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\milk glass.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\office 2007 - 2010.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\reflection.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\riblet.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\smokey glass.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\subtle solids.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\document themes 16\theme effects\top shadow.eftx.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099170.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099171.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099172.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099173.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099174.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099175.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099177.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099178.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099179.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\flattener\appvopcservices.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\flattener\appvopcservices.dll.manifest.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099182.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099181.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\flattener\appvpackaging.dll.manifest.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099176.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099183.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099184.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099185.jpg".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099185.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099184.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\flattener\microsoft.appv.modernizer.managedcpp.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099187.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099189.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099190.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099191.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099192.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099188.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099193.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099180.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099195.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099186.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099196.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099197.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099198.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099199.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099200.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099201.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099202.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099204.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099205.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\c2rint.16.msi.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\onedrivesetup.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\qfe31927.msp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099203.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\sppredist.msi.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\windows6.1-kb2999226-x64.msu.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\qfe31928.msp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\windows6.1-kb2999226-x86.msu.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101857.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101858.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101859.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\windows8-rt-kb2999226-x64.msu.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\windows8-rt-kb2999226-x86.msu.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101860.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101861.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\windows8.1-kb2999226-x64.msu.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0099194.gif.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101862.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101856.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101863.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101864.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101865.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101866.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101980.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0102002.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0102594.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0102762.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0102984.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0103058.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0103262.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0103402.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\windows8.1-kb2999226-x86.msu".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\integration\windows8.1-kb2999226-x86.msu.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_oem_perp-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_retail-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0103850.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105230.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105232.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0103812.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105234.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105238.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105240.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105244.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105246.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105250.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_retail-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_retail-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105266.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105272.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0101867.bmp.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105276.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105280.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105282.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105286.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105288.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105292.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105294.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_trial-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_trial-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105306.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105298.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105298.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105320.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105328.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_trial-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessvl_kms_client-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105306.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105332.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105336.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105338.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105348.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105360.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105368.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_oem_perp-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessvl_kms_client-ul.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessvl_mak-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105328.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessvl_mak-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessvl_mak-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessvl_kms_client-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessvl_mak-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\client-issuance-bridge-office.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\accessr_retail-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\client-issuance-root-bridge-test.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\client-issuance-root.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\client-issuance-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\client-issuance-ul.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105384.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_grace-ppd.xrm-ms".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105386.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105388.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_oem_perp-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\client-issuance-stil.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_oem_perp-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_oem_perp-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_oem_perp-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_retail-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_retail-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_retail-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105380.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105390.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_retail-ul-phn.xrm-ms".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_trial-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_trial-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelvl_kms_client-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelvl_kms_client-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_retail-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelvl_kms_client-ul.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelvl_mak-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelvl_mak-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelvl_mak-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105376.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105398.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105410.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105378.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105412.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105414.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105396.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105396.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105490.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105496.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105502.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105504.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelvl_mak-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105506.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105520.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105526.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105588.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105600.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105638.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinesspipcr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105530.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinesspipcr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinesspipcr_oem_perp-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\excelr_trial-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinesspipcr_oem_perp-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinesspipcr_oem_perp-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105710.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105846.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105912.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0105974.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinesspipcr_oem_perp-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106020.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106124.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106146.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp2-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp3-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106208.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106222.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106572.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp3-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp3-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp4-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106816.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0106958.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107024.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107042.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107090.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp3-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107130.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107132.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp4-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp4-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail2-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail3-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail3-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail3-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107134.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107148.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107026.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107150.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107152.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107138.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107154.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107146.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107158.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107182.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107188.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107192.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_trial-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_trial-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_trial2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_oem_perp4-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_trial-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_retail3-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_trial2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homebusinessr_trial2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107254.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107262.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentdemor_bypasstrial180-pl.xrm-ms".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_oem_perp-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_oem_perp-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_oem_perp-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_oem_perp-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107264.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107258.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107266.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107280.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107282.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107290.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107300.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107302.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107308.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107314.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107316.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107328.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_retail-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_retail-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_retail-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_trial-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_trial-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_trial-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_trial2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107342.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107344.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107288.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107350.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_retail-ul-phn.xrm-ms".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_trial2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_trial2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_bypasstrial180-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107364.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_bypasstrial180-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107426.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\homestudentr_retail-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_kms_automation-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_kms_automation-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_kms_automation-ul.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_oem_perp-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_oem_perp-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107446.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_oem_perp-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107450.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107452.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107358.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107456.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107458.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107468.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107480.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107482.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107484.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_retail-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_retail-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_retail-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107488.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107490.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_retail-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subscription-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subscription-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subscription-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subscription2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subscription2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subscription2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtest-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtest-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtest-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtest2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtest2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtest2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtrial-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtrial-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107494.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107496.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtrial-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107502.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107512.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107514.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107516.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107526.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107492.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107528.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107544.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107500.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107708.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107712.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107718.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107658.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107722.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107724.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107730.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107734.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107742.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtrial2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtrial2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_subtrial2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_trial-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_trial-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107744.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_trial-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107746.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondor_oem_perp-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondovl_kms_client-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondovl_kms_client-ul.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondovl_mak-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107728.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107748.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0107750.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0136865.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0144773.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondovl_mak-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondovl_mak-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondovl_mak-ul-phn.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subscription-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subscription-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subtest-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subtest-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subscription-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subtest-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subtrial-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\mondovl_kms_client-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subtrial-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365businessr_subtrial-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription1-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription1-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription1-ppd.xrm-ms".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription3-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription3-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription3-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription2-ul-oob.xrm-ms".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription4-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription4-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription4-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription5-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription5-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145361.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145373.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145669.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145212.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145707.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145810.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145168.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145272.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription1-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subscription5-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145879.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145895.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0145904.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest1-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest1-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest1-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest3-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0148309.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0146142.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest3-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0148757.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0149018.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest4-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest4-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest4-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest5-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest3-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest5-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtest5-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial1-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial1-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0149118.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial1-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial3-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0148798.jpg.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0150150.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0150861.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151041.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151045.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151047.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151055.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151061.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial3-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial3-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial4-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial4-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial4-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial5-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial5-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365homepremr_subtrial5-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_grace-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_grace-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151063.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151067.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151073.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0151581.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152414.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152432.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152436.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152556.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152430.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152558.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152560.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription1-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription1-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription3-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription3-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription3-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription1-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription4-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription4-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription4-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription5-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152568.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152570.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152590.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152594.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152600.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152602.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152606.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152608.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription5-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subscription5-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152610.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152622.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152626.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial1-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial1-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152628.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152688.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152690.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152690.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152696.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152698.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152626.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152702.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152704.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152708.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152716.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152694.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152876.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152878.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152882.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152884.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152890.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152892.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial2-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial2-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152894.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153047.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153087.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152898.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153089.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153091.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153093.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153095.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial3-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial3-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial3-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial4-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial1-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial4-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial4-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial5-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial2-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial5-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0152722.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153265.wmf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\clipart\pub60cor\j0153265.wmf.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\root\licenses16\o365proplusr_subtrial5-ul-oob.xrm-ms.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\net.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\nio.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\npt.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\orbd.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\pack200.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\plugin2\msvcr100.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\plugin2\npjp2.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\policytool.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\prism_d3d.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\prism_sw.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\resource.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\prism_common.dll.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\rmid.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\java\jre1.8.0_144\bin\rmiregistry.exe.id-b4197730.[vip76@protonmail.com].html".
Modifies application directory
Anti Analysis
VTI rule match with VTI rule score 2/5
vmray_detect_generic_vm_by_rdtsc
Possibly trying to detect VM via rdtsc.
Tries to detect virtual machine
OS
VTI rule match with VTI rule score 4/5
vmray_modify_windows_backup_settings
Deletes Windows volume shadow copies.
Modifies Windows automatic backups
File System
VTI rule match with VTI rule score 1/5
vmray_create_many_files
Creates an unusually large number of files.
Creates an unusually large number of files
Local AV
VTI rule match with VTI rule score 5/5
vmray_av_malicious_match
Local AV detected the sample itself as "Trojan.Ransom.Crysis.E".
Malicious content was detected by heuristic scan
Process
VTI rule match with VTI rule score 3/5
vmray_create_process_with_elevated_privileges
Process "payload2.exe" creates child process "payload2.exe" with elevated privileges.
Escalates Privileges
Reputation
VTI rule match with VTI rule score 5/5
vmray_known_malicious_file
File "C:\Users\FD1HVy\Desktop\payload2.exe" is a known malicious file.
Known malicious file
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\$GetCurrent\SafeOS\GetCurrentOOBE.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\$GetCurrent\SafeOS\SetupComplete.cmd.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1025\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1025\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1025\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1028\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1028\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1029\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1029\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1030\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1031\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1031\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1032\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1028\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1029\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1030\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1032\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1030\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1031\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1032\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1033\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1033\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1033\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1036\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1036\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1036\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1037\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1038\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1038\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1037\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1040\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1040\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1040\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1043\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1044\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1045\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1038\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1041\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1041\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1042\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1042\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1042\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1049\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1053\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1055\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1037\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1043\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1044\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1043\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1045\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1045\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1046\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\2052\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\2070\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\3082\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\DisplayIcon.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Print.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate2.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate3.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1044\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1046\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1035\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1049\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1053\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1035\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate5.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate6.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate7.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1035\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1055\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1055\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1046\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\2052\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\2070\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\2070\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\3076\SetupResources.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate8.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Save.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Setup.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate1.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\SysReqMet.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\warn.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\Rotate4.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1049\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\3076\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\3076\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\1053\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\3082\LocalizedData.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\2052\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Client\UiInfo.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Extended\Parameterinfo.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\header.bmp.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\ParameterInfo.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Graphics\stop.ico.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\3082\eula.rtf.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\SetupUi.xsd.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\SplashScreen.bmp.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Client\Parameterinfo.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Strings.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Extended\UiInfo.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\watermark.bmp.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Boot\BOOTSTAT.DAT.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\BOOTSECT.BAK.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\UiInfo.xml.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\netfx_Core_x86.msi.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\desktop.ini.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\RGB9RAST_x64.msi.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\RGB9Rast_x86.msi.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\Setup.exe.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\Office16\OSPP.HTM.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\SetupUi.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\SetupEngine.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\Office16\SLERROR.XML.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\Office16\OSPP.VBS.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\SetupUtility.exe.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\588bce7c90097ed212\sqmapi.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00010_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00015_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00790_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00853_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00914_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00932_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN00965_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01039_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01044_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01060_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01084_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01174_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01216_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01218_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Logs\Application.evtx.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Logs\HardwareEvents.evtx.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02122_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02559_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN02724_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN03500_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01184_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04108_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04134_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04174_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04191_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04196_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04206_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04225_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04117_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN01545_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04267_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04269_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04323_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04332_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04355_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04369_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04195_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04235_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04384_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04385_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00141_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00146_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00155_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00160_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD05119_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00116_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06200_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AN04326_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07804_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07831_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08758_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD07761_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08808_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08868_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD00173_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09194_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09662_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09664_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD06102_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD08773_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19827_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19828_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19986_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD09031_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19988_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD20013_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00012_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00045_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19695_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00105_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00122_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00148_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00152_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00194_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00008_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00195_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00242_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00098_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00130_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00252_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00248_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00234_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00247_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00262_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00267_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00270_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00261_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00274_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00254_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00390_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00269_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00392_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00525_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00526_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00648_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00273_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00524_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00923_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00932_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00985_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOAT.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00076_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00078_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00092_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BOATINST.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00135_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00136_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00921_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BL00296_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00145_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00184_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00174_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00186_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00200_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00100_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00224_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00440_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00441_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00442_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00439_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00443_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00444_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00445_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00453_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01080_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01603_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS00438_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01634_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01635_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01637_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01638_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01639_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC1.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLASSIC2.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CLIP.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANINST.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUP.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CUPINST.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CG1606.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00121_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\DD00234_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CRANE.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BS01636_.WMF.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Logs\Security.evtx.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Logs\Setup.evtx.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Logs\System.evtx.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvStream32.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.id-B4197730.[vip76@protonmail.com].html".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll.id-B4197730.[vip76@protonmail.com].html".
YARA match