Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\WMIAPSRVR.EXE.exe
|
MD5:
337cdd6d89e93362c8223fb8810dec2c
SHA1:
9558ea613144c8b50a24153411823e8b39c03e03
SHA256:
b6e3cdf6757bb325e62cd43f31eb590e8ec63f25674b89ff65d70707af999951
SSDeep:
49152:Dd/0TZpoV8kyG+xYRiEg4hPTlyy3P8D/1c7Go0zFqlHcuNr6Q:B/8pY8kyGNVEh67GCdlr6
ImpHash:
8319d19984b9466baf70aef5aa238768
|
|
Sample File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\_uninstalling_.png
|
MD5:
36d67361ac3fec05ff0fb004e3889780
SHA1:
a8faa546be14694251a1f0099c45dcbd93b4d6b7
SHA256:
f99ffc8d05df4b760069bda20ece4f52121adefe5e6dc136b60dd35a051f53a3
SSDeep:
24:dPE9OsVvGjt5JYo62gcKjdFeUQIu3hsQhGV/Ai0g5Q1OqRgiQRwF7b/nPW9nSKMw:dPoOKvGjPJYo6s+gUQIwsQhyL0nXBOw2
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\#Decrypt#.txt
|
MD5:
41c76ef0f0c43b87c543a42eb98bae25
SHA1:
b8433a4ca7b3efddd9cccc7733bee7c97efe5b64
SHA256:
373033340ee4cd4c5e40d42bd81487e4dbd2fac9f78c3b8a9e7cf33ef504ad20
SSDeep:
48:UoLRBlAG1mWQ4d5/m0KlPoOKvGjPJYo6s+gUQIwsQhyL0nXBOw9/PW5gYS:LVTx5odK+NlgyIWhRX5Gg3
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
\\?\C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
|
MD5:
f829d4dd809af1f953bb043a93cca90e
SHA1:
2332edb1ec5bc42c534d3867106f49703e55ec28
SHA256:
12c4b77e8625ce88dd3a2d6ac721c3c163eb685ffe2c048d9232b02c95df0cd4
SSDeep:
6:sAr0UJlvX8CIxLXUXThweEvo8GyCkK2UvANsfM1jea+2s:s14GLcThwe8ikzNj0L
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\Boot\BCD.LOG1
|
MD5:
80ed0d4c901f651b364f2772c12d600f
SHA1:
0e82c1032097a8be755a995d77e6667cd8736aa7
SHA256:
da885365ddf4fc42d3fc55f517e5ff558e6421248f80a43d2656edaf80093260
SSDeep:
3:pwqrN6CI24E9EaX9xdv0HtufX2Z8jirbnUJn5Z50GEn:aq7Q4XvdstYmpbnGt0/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\Boot\BCD.LOG2
|
MD5:
9247545a32da7bdb3ee650944e3299bb
SHA1:
72ec5c7bd45f6ccdee59cee91832a28145d8f00a
SHA256:
448d0e3bdec1c92eb892450700ad822f05ecbdcd46a8f30efab18800d95dd23e
SSDeep:
3:pXBvHyG0HZABW74Fal418P77UawhaDE+44E7Lr1RscmuT8THmB1:RNS752W8FaCc7UaKaD6HwPmB1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\Boot\BOOTSTAT.DAT
|
MD5:
16c88df8598a83d14eee95e6e656fbab
SHA1:
da808c2a885bd8148e55d349c53fb2bdb455d9c1
SHA256:
d69c4ca30e748905e0dbcbc11cf429dc188b58987228353f36713b56dab61669
SSDeep:
1536:hiRxMgv4eo3jzSJgNjx9kuiRxMgv4eo3jzSJgNjx9kuiRxMgv4eo3jzSJgNjx9kT:ux9u3nMwjkx9u3nMwjkx9u3nMwj4
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab
|
MD5:
ce1053ce82832e9834f4f46fb291f8f5
SHA1:
c9bb962dcb0e0e291c3f20003e80cdb5fac26b02
SHA256:
135266f980fbd44661bd21e771a54037003589435b4940eafdcce7207e996944
SSDeep:
196608:Xba8A7fKP0ReD0wXKLUEfRrDXP2ifogB+jHcSBLWiyyyWJRMLhdPWfi:LaRDKP0q0wM9JrL2ifJEjhW/rvL3Ai
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi
|
MD5:
6ef4d013e0bfa411dd2c17ea8e3b4590
SHA1:
47a5cda3956dc3e82824593c8d3fd8af2d8a9b07
SHA256:
b2d13243509f0d3bd9a8ae92c91d175d31d81fd6a7f4130969e6004fdc216abb
SSDeep:
49152:DDxL8QBoI9eljidYex4S120ytJyham6CT:DR89Ex1oW
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml
|
MD5:
f405fcf3a10f41c51d9dc196cc9c8f4b
SHA1:
fea2d240499fd2eb401c59f09936c24763b6ff59
SHA256:
d4a9e362b2db53321cdc2cf5579e867ac4e522dbe4a79439d3c59ae007b176e2
SSDeep:
48:nvv/JmR0cUrOykMMishlsbbbfpDlVgYVDWp:v5m+cxy53E2bbLPKY0
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
d6fea2052c2f129abf5285891bc2f7b9
SHA1:
68e4f88a2ff05dc3bea22449ea99f35b236dd357
SHA256:
68b18e4c43b3f8baa8c893898d820e2322c97c7cfec590964985c4a5191b1050
SSDeep:
48:mFryCCon7PAt2KxnVmbbRsV4CxrjwVWUJcPlAAUB6haUnWruPA:mdyCFPAthngH2xPDUJcPlAAGUnWruPA
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi
|
MD5:
f0ca521ddee088248f63f34fd84cd818
SHA1:
625dbe5e7bc0daf3d53fcef569ed433489c4d004
SHA256:
7fd023f45b96fe2b718ea1afb7409a725f18ae6b03baf897462d61a5a0aed8af
SSDeep:
49152:gDxL8QBoI9eljidGcex4S120ytJyha16Cl:gR89Es1o7
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml
|
MD5:
715b480c5292260d009fc3f193151837
SHA1:
735410f2853ffead7e5c643f3a3c977b7443abbf
SHA256:
5c05c6234f99092c92e99d6cd550e4d574ad2b34f28394c6bc386c98e63f1a70
SSDeep:
48:M/n2HesMY1Xnca17OACq3uY6aYgMgKPB15ricrr:M/29MEXcaoAeY6aYHPBPxrr
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab
|
MD5:
451bd7b31ac28401ad4da9efe9c65832
SHA1:
c11515c75fcea7d4a52a5377d51e8991a9c274e6
SHA256:
ac9430cce22a1bbeca6a2ceda5449bed755a0a4dd8699fe2b1aa4dc23faf400e
SSDeep:
196608:48m4KKCX5FvaeoDcBdxmOJR7nxOKOmE7dzaNQwr:I4KKCX5FvaVczxmUJnYSE7dzAT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
b9645f20c7f8716915816dc9329594df
SHA1:
289b2c8071f95c510ea3f681be711041a3d9d1ad
SHA256:
8831bd5801f956435f2b2975dfbe9f1894050164887e7edfe30adf010df3f9e2
SSDeep:
48:19fiHXKjyTxPDZRMo1/LcjVz9d8hDx9z8Qj1s8A:0KeTVDXMocjVwhfnhs/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab
|
MD5:
9d55795a77d2275c5144cee6d042aaa7
SHA1:
4c1ee14cde454d06eeca1adafc025587f7442e19
SHA256:
a519c30b490e56aba988549b22a105ba806a58d99d8454ba797a279af7db0f90
SSDeep:
196608:SxPUvTYpH9lBl/tjs7o4L7tZiTnp/jE4U/bxlLRx+Q:0UvTiJhf4L7tZiTnprP0txRsQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi
|
MD5:
cc1abcbe517d1ab8c42906715f544d48
SHA1:
ef7d65584a8ee2051b89534a5939d1970d378bdb
SHA256:
59d71728ed80920c205eb5cdf060e80828b48bbb22aedc89685a716606371bb5
SSDeep:
49152:1DxL8QBoI9eljidjex4S120ytJyhaLz6CCHmOD:1R89EI1oLGD
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml
|
MD5:
d42643f031757c2d774a8609228e2076
SHA1:
04fd48037fe8948c3755609c0dfc6d035dff4d79
SHA256:
d0734a7b0b95beea75e985a9ebc907911a7f80022a23d8f9d0eb896a68a22632
SSDeep:
24:IKNScUJykCRvfwe8GyG9QhlhFOHuRbthgqpXWqUDBp/zjdvXSemi2dgR86oWXRuP:I6754CQeul3gqVUDrbRvX5E36oWhE7/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
75c05b7412eb33d67a3135be6e5807cb
SHA1:
48ab7a879ac7b87b014f3cc11d5183dcd6f039ef
SHA256:
677df72bb52c17cd1cdbc8350d38af7910bf8c1fc71faf459fa79b1447c41fb1
SSDeep:
48:9dqY+MJsrxkaFMQrm5lra0RbTed1UjO/Ed:98Y+3NXV0RbTegSMd
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab
|
MD5:
c4bd2ed9f1a74b9525bf69258c54dd24
SHA1:
f0a01454e9738079177d5162b7e393fdf31b3260
SHA256:
5ca9fa52c5ff0c2bd807741d98895565a524c2246d619374201095bd9935f79d
SSDeep:
196608:TeIwm3nNVAl+ig71eZ8FclBElWHp8byLbyo9crpLlR/ioLO0ZF9CrpbQ:fL71eiFgepGHyo2rpLXcoCrpbQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi
|
MD5:
f5121c45da98a7933d00f29af08cea8a
SHA1:
51aa49fa141d1861bb4276997cf87b89f07b0893
SHA256:
955de48dd0e4bec744cd0e8da457543d63d9fb4fba66ce170c4b07acdd68fba3
SSDeep:
49152:PHYLL/Wo9kLljbRR6rOSN20yRJ63PooFMP+3:PqLVeGvj1
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml
|
MD5:
56eafe25c7a15e333672c8800e5be093
SHA1:
ca1ddc304eb467324ccb7c84223368cb4e2326d5
SHA256:
369aa94310eb9416362eb8ebe755dbad0227a1f8110356953e6e3cf7d5c6c490
SSDeep:
96:tcLNuQ7rmCcfB2pDinD0DH06OD5zD1gJCUK0kWaD:SLN5nDcpAkDiHZOD5eJL9e
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
b9480160a75440e0f52687a9890270b7
SHA1:
f544318ba07ea5e38daec978896f519d82ae7ab8
SHA256:
e448a127ba31aa25b591f4e875e1bf775af1cd3fe69e5640340f8eaf500c2864
SSDeep:
96:2fk8uBSscxPpUS+J7MbsP4JFTq2WIfe7VUcXANbh6:DgsBBiU4bTq207DMw
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
72c50501f21c62b012685787d5a8c8a9
SHA1:
1f8655065a1d561d8b8328f21eab35e3d69eb2ff
SHA256:
9cdbd68f5c10b5cdb232fc848f8c25c47da2e9afd452f0be70333b8f78f34423
SSDeep:
48:SjGaD7uQ7z+yjHtgGUjykFqgXjm4IeX6YiGGY1nP8BQoMBRcEjbsbbGd:SjGaD7D3VjHnKqgXjmreX6+GY1nP8Woy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab
|
MD5:
87230565adbe4f53d1b86c5323fd4000
SHA1:
e9124232b1833a0d2d10a009a7155ff2056ee887
SHA256:
cd0122113bbff01f48c0f93d33827d80f3688c6886e0e3bf918bc747d21aba2c
SSDeep:
196608:h9Tk7aurJM4k8IMj3kMxfGbWaxJMKMA4JxuiNQG3A2r7rfiSFhysD8uxDxKj:h9qOn8IQkM2BFEx96G3AUf7FnzKj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi
|
MD5:
be91779da3bdab4882ef2166465b8e51
SHA1:
8bc0f5497b4af85e0a8dc516854d84bca31cdbfe
SHA256:
a0f7f84aa3a7bc66cf099a55f74bff7381a609f74bb76980ca82aa33529056a8
SSDeep:
49152:nDxL8QBoI9eljid+ex4S120ytJyhaM6CLS:nR89EX1oR
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml
|
MD5:
cc8e29c2a031671a8163c0c87a42a651
SHA1:
692cfe8f5e62730282a38e702bbb8031b874c5e4
SHA256:
b5881390ce0e7ad920f7602b6b197d923b3b9b9d8bf0bba704a26703ee5b7aa1
SSDeep:
48:DP08/pGKcG1QH/2EaF39fL0ri4xJfFrVVNMJi5IP0:whKcKQHdq9fLD4TNVVNMHM
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab
|
MD5:
751b9255a7bb5d67493dd47f9d890a38
SHA1:
ce80521199e9a7d876bee10049877d689b5b308a
SHA256:
02c61aadb447b3752105dc0c6cf31d6a613e4de62e5ad1dc63331b3f6b05d95e
SSDeep:
196608:5wxkf1gRyjQR9g8YYIcjfX+vntQdQGsFZaGkGdN7p06H1JX/WanfW/OIV0h:exU1WbR9YY5mvJGSZWGRz1kaza0h
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi
|
MD5:
6f4cb0b161dba649cbbc451bfd60838d
SHA1:
9cf6674472f40a87993086d92d68e24d2a2b7eae
SHA256:
9c50ecb11866ac38cc3f5222c135255f4132fa5aac00e4eb4317e59753190844
SSDeep:
24576:EgpI7fJQPi4x3P6QHWkmf3egDqo8o9370Pvuw:xJ2Lf7qo6Pvuw
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml
|
MD5:
5cee69935fb3cd7466f2cdee62d014b3
SHA1:
6630419232a3c630c8a8e587dbde4cdbe438019e
SHA256:
ec53407bdbff81c5a391634c85d8c198e748418a0c200af2aacff3c567265a6b
SSDeep:
24:GYk/DGyqAZwPWQ08SOr59lsdtpZYVn7ET5ftRIG7KmqLaP+6pWdekWXnBi49I:Gn/DGy98lr5O2Vna5fttfu9sk6BiZ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab
|
MD5:
29319fd10e99eef0a7b898de42f0a10a
SHA1:
dbe65815ce101a5843fc2a8c5c1abb07087bc299
SHA256:
74de42518668961b0cd66485a6f9de7142a8a199bd39aaedef36a925b6d62f22
SSDeep:
196608:AQu6eDsIwHBL4B9lCzT2bOgBoDuihGYrLpVUBJV7HAFGtNy6aMhnRTU+:A+qsIwHNB26gfE7eV7JNMM5RTU+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi
|
MD5:
7d07f50164d7419a7b4703d6f548b71e
SHA1:
3d68967d83b1f915346d767c55322ec76ba0755f
SHA256:
5ca58c2b365833dc765455586a26123086b0b87791b1d86d5a84a7e7d1136316
SSDeep:
24576:ngQgfI7flQPmbxnP6nzkm83xgDBo8o93OOr8AO:ngA0L8QBohr8J
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml
|
MD5:
be8e2687e73fdd1ecc0b7ac4e0fb7b7d
SHA1:
ba32021d90f0807fd259332dda8f60e7590639b7
SHA256:
6c885d38b8c052bcd40da26e0300cb8069b12c54c11fd757eb4e6acf8ed2f24f
SSDeep:
48:NIJvyynraK4WBU0OppaKTE4bz2tPYBWyfKcdtfZar:NIwynW7WjApjz2tPYBWyxBar
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab
|
MD5:
281cb5ccccf1340a6d8e901b86b84c7a
SHA1:
02b32f55f1e02815de770c2e3ce764fbfb949e5e
SHA256:
abd68690d16e247c153098371969890f869a2782345011fc9339edd3fb3c25b8
SSDeep:
196608:WGcFNUxdiOm1j3/abCsYwFOSQo2eWDOQs4hW6s63HS:WaPmN3/abtYIQo2OQ93RS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi
|
MD5:
f2f85e823993707d8496da68ff2e672c
SHA1:
4550ad7569b7dae2e22d6c0be17bc46ce0770e94
SHA256:
e254616bb374e3fccbcb6918bc833f6d2f40dd22fc9346bb3d412ba9891391f2
SSDeep:
24576:2gfI7flQPmzxnP6Szkm83xgDBo8o93m9XLHmmO:SDL8QBo6XLHml
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml
|
MD5:
5357bd5f85fc7d38ce64d3e7a5fb87cc
SHA1:
d8f8cb8d2d6f93e614faea20ecf647868001518e
SHA256:
162c7158b1a81dce3c923dcc5384ded1ea390a806ed913c096196d095f6a5cb8
SSDeep:
48:LB/T/d2t05b0HIY+CKUGFQdxVNvXNxgqCIx30e5:LtT/kt05b0oY+bUGwVNvXNIIB04
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi
|
MD5:
4ddd8aff3820750a0a4a32ac12e7d199
SHA1:
48fe28370d14ad9bf655c48272d09dc47decb852
SHA256:
e99b29612a60e978b01095376a44f768be25d382a1893b92390ba3a671f80323
SSDeep:
24576:axf83PV4gElx3Pm2DJWkmf3egDqo8o93lo6pjoe/:a3MnLf7qo46pke/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml
|
MD5:
d8c873b0c74576aaab45b2afa627c130
SHA1:
1f10823430a0091c420115b447b839769b60dc3a
SHA256:
e70386f79c3e01790b8b8b4cf061732883573b82949ba2d7b319c867aaaa7acc
SSDeep:
24:kx4QfkfkdM5ubns/ZD67PS+lJfKaFKQ3Hdq:kofkdVzsD67PhJfKl2I
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
fd1efcb8a764f1385f01337fa01d213c
SHA1:
7b6b9d86ba30df8a53e5acda716d0bafdaaf1a49
SHA256:
0ecb971ec596e661173253b91d0815dfa58923a9649232a628bf8c501beb260b
SSDeep:
96:pnbz5WxG+LZPWvkJexQsUWY39LN+U0fNU4iWY48OKXqh5F3+drCj+AHzjzoDAUtd:dzsxxZPpOD639LN+HG4ihOK4FIC1fzO/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab
|
MD5:
bc25656c53e7abbb41b34ca35dd87222
SHA1:
7064acca6cd82cee76495602f351e986379acb63
SHA256:
21797e149fbd837d36279357ea812a615d8b573e4a9a9628f2feffda22e2ce1f
SSDeep:
49152:BaUJVRveFNMMFrwnbddIOxT+YoC59POSOEwPFhbYRjfIDPHLoBTv5oJBB47q5Fqw:cUgDMUwxyOCC5QtPFhbY12HLodiF4+5v
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi
|
MD5:
daf00b4f5c40a258116e27d421a02705
SHA1:
bcf2a606a3a1c174ab9ccb5774dfeead954d5a84
SHA256:
ff0663afa555340250047c5f0a00ab8e3ae19e9321e86a92b18259eba1255200
SSDeep:
24576:5+f83PV4gEgx3P6MWkmf3egDqo8o93PU6ppkKF:59kLf7qo26ppkKF
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml
|
MD5:
96ef3980068fd971d75126679de7f808
SHA1:
54ffca93ff1c9dc37958e6eadd4950872507eb11
SHA256:
d27e0b088a75cacf719c5c8de42ab487f4ff0b3c8e3305206fac4d5431166269
SSDeep:
24:qjPZsHC+tDe24N9kVFfes7XpBcKiONONtk/vdudqep6OVnEj9sMuJn:q6TtanN9atR1BcukToFWqeX2sJn
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml
|
MD5:
96001a7a49f6422024fe5d8ef2fbb399
SHA1:
68e6b56bac811eecf43110e3382badbd16b9d4c9
SHA256:
58fc39d201ccec1f6512b8a391c71e6fa1cb16c895f22434404501e706ef9a8b
SSDeep:
48:K5YmwhLGVmZ8g57TMYPOj46S35AR2sbhFQ0YxIRp+9BUNUReOJE0UjpN98VM:99mmWOUjm35AssHQ0YI+9BUNUgL3uM
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab
|
MD5:
79ab42c91254065c35f78e58681a41f2
SHA1:
2953a3eb306c766aeeabd7bd81be32f06cc3b9a5
SHA256:
fa28614019b1dcd188162221f21c5fe1747f3fc423f27d6b302e8825c67976bf
SSDeep:
24576:DKwZzklZCTxS7nH4OpUKelCYTtDq/xYpl8FfHET51it+wUnDnY:2Ui+xiHrh2TUGD0HEytsDY
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Modified File
|
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop
|
-
|
Access
|
|
|
C:\Windows\system32\MFC42u.dll
|
-
|
Access
|
|
|
C:\Windows\system32\cmd.exe
|
-
|
Access
|
|
|
\\?\C:\$Recycle.Bin\.
|
-
|
Access
|
|
|
\\?\C:\$Recycle.Bin\..
|
-
|
Access
|
|
|
\\?\C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\.
|
-
|
Access
|
|
|
\\?\C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\..
|
-
|
Access
|
|
|
\\?\C:\BOOTSECT.BAK
|
-
|
Access
|
|
|
\\?\C:\Boot\.
|
-
|
Access
|
|
|
\\?\C:\Boot\BCD
|
-
|
Access
|
|
|
\\?\C:\Boot\BCD.LOG
|
-
|
Access
|
|
|
\\?\C:\Boot\Fonts\chs_boot.ttf
|
-
|
Access
|
|
|
\\?\C:\Boot\Fonts\cht_boot.ttf
|
-
|
Access
|
|
|
\\?\C:\Boot\Fonts\jpn_boot.ttf
|
-
|
Access
|
|
|
\\?\C:\Boot\Fonts\kor_boot.ttf
|
-
|
Access
|
|
|
\\?\C:\Boot\Fonts\wgl4_boot.ttf
|
-
|
Access
|
|
|
\\?\C:\Boot\cs-CZ\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\da-DK\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\de-DE\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\el-GR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\en-US\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\en-US\memtest.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\es-ES\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\fi-FI\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\fr-FR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\hu-HU\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\it-IT\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\ja-JP\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\ko-KR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\memtest.exe
|
-
|
Access
|
|
|
\\?\C:\Boot\nb-NO\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\nl-NL\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\pl-PL\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\pt-BR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\pt-PT\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\ru-RU\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\sv-SE\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\tr-TR\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-CN\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-HK\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Boot\zh-TW\bootmgr.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Config.Msi\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\..
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\..
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\.
|
-
|
Access
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\PerfLogs\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\PerfLogs\Admin\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\.
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\DESIGNER\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EURO\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
|
-
|
Access
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML
|
-
|
Access, Delete, Read, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.horseleader
|
-
|
Access, Create
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\#Decrypt#.txt
|
-
|
Access, Create, Write
|
|
|
\\?\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML
|
-
|
Access, Delete, Read, Write
|
|
|
For performance reasons, the remaining 2041 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|