VMRay Analyzer Report for Sample #89710
VMRay Analyzer
3.0.2
Process
1
2544
demo.exe
1116
demo.exe
"C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\demo.exe"
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\users\5p5nrgjn0js halpmcxz\desktop\demo.exe
Child_Of
Created
Opened
Opened
Opened
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Created
Opened
Opened
Created
Created
Opened
Opened
Opened
Opened
Process
2
2564
cmd.exe
2544
cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\cmd.exe
Child_Of
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Process
3
2604
mode.com
2564
mode.com
mode con cp select=1251
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\mode.com
Process
4
2656
vssadmin.exe
2564
vssadmin.exe
vssadmin delete shadows /all /quiet
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\vssadmin.exe
Child_Of
Process
5
2808
vssvc.exe
460
vssvc.exe
C:\Windows\system32\vssvc.exe
C:\Windows\system32\
c:\windows\system32\vssvc.exe
Process
9
1400
demo.exe
888
demo.exe
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\demo.exe"
C:\Windows\system32\
c:\programdata\microsoft\windows\start menu\programs\startup\demo.exe
Opened
Opened
Opened
Process
10
1408
demo.exe
888
demo.exe
"C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\demo.exe"
C:\Windows\system32\
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\demo.exe
File
STD_INPUT_HANDLE
File
STD_OUTPUT_HANDLE
File
STD_ERROR_HANDLE
File
$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
c:\
c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini
ini
File
boot\bcd.log
boot\bcd.log
c:\
c:\boot\bcd.log
log
File
boot\bootstat.dat
boot\bootstat.dat
c:\
c:\boot\bootstat.dat
dat
File
bootsect.bak
bootsect.bak
c:\
c:\bootsect.bak
bak
File
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
c:\
c:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
xml
File
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
c:\
c:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
xml
File
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
xml
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
xml
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
boot\bcd
boot\bcd
c:\
c:\boot\bcd
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
xml
File
boot\bcd.log1
boot\bcd.log1
c:\
c:\boot\bcd.log1
log1
File
boot\bcd.log2
boot\bcd.log2
c:\
c:\boot\bcd.log2
log2
File
boot\cs-cz\bootmgr.exe.mui
boot\cs-cz\bootmgr.exe.mui
c:\
c:\boot\cs-cz\bootmgr.exe.mui
mui
File
boot\da-dk\bootmgr.exe.mui
boot\da-dk\bootmgr.exe.mui
c:\
c:\boot\da-dk\bootmgr.exe.mui
mui
File
boot\de-de\bootmgr.exe.mui
boot\de-de\bootmgr.exe.mui
c:\
c:\boot\de-de\bootmgr.exe.mui
mui
File
boot\el-gr\bootmgr.exe.mui
boot\el-gr\bootmgr.exe.mui
c:\
c:\boot\el-gr\bootmgr.exe.mui
mui
File
boot\fonts\jpn_boot.ttf
boot\fonts\jpn_boot.ttf
c:\
c:\boot\fonts\jpn_boot.ttf
ttf
File
boot\fonts\kor_boot.ttf
boot\fonts\kor_boot.ttf
c:\
c:\boot\fonts\kor_boot.ttf
ttf
File
boot\fonts\wgl4_boot.ttf
boot\fonts\wgl4_boot.ttf
c:\
c:\boot\fonts\wgl4_boot.ttf
ttf
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml
xml
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml
xml
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
boot\fr-fr\bootmgr.exe.mui
boot\fr-fr\bootmgr.exe.mui
c:\
c:\boot\fr-fr\bootmgr.exe.mui
mui
File
boot\hu-hu\bootmgr.exe.mui
boot\hu-hu\bootmgr.exe.mui
c:\
c:\boot\hu-hu\bootmgr.exe.mui
mui
File
boot\it-it\bootmgr.exe.mui
boot\it-it\bootmgr.exe.mui
c:\
c:\boot\it-it\bootmgr.exe.mui
mui
File
boot\ja-jp\bootmgr.exe.mui
boot\ja-jp\bootmgr.exe.mui
c:\
c:\boot\ja-jp\bootmgr.exe.mui
mui
File
boot\ko-kr\bootmgr.exe.mui
boot\ko-kr\bootmgr.exe.mui
c:\
c:\boot\ko-kr\bootmgr.exe.mui
mui
File
boot\memtest.exe
boot\memtest.exe
c:\
c:\boot\memtest.exe
exe
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.xml
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.xml
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.xml
xml
File
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.msi
msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.msi
c:\
c:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.msi
msi
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml
xml
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.xml
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.xml
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.xml
xml
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
c:\
c:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
cab
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml
xml
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml
xml
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml
xml
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml
xml
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm
chm
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm
chm
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\branding.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\branding.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\branding.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml
xml
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
xml
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.xml
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.xml
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.xml
xml
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.xml
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.xml
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.xml
xml
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.xml
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.xml
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.xml
xml
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi
msi
File
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
c:\
c:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
cab
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.xml
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.xml
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.xml
xml
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.xml
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.xml
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.xml
xml
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.xml
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.xml
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.xml
xml
File
program files\common files\microsoft shared\grphflt\ms.eps
program files\common files\microsoft shared\grphflt\ms.eps
c:\
c:\program files\common files\microsoft shared\grphflt\ms.eps
eps
File
program files\common files\microsoft shared\grphflt\ms.gif
program files\common files\microsoft shared\grphflt\ms.gif
c:\
c:\program files\common files\microsoft shared\grphflt\ms.gif
gif
File
program files\common files\microsoft shared\grphflt\ms.jpg
program files\common files\microsoft shared\grphflt\ms.jpg
c:\
c:\program files\common files\microsoft shared\grphflt\ms.jpg
jpg
File
program files\common files\microsoft shared\grphflt\ms.png
program files\common files\microsoft shared\grphflt\ms.png
c:\
c:\program files\common files\microsoft shared\grphflt\ms.png
png
File
program files\common files\microsoft shared\ink\alphabet.xml
program files\common files\microsoft shared\ink\alphabet.xml
c:\
c:\program files\common files\microsoft shared\ink\alphabet.xml
xml
File
program files\common files\microsoft shared\ink\content.xml
program files\common files\microsoft shared\ink\content.xml
c:\
c:\program files\common files\microsoft shared\ink\content.xml
xml
File
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-delete.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
program files\common files\microsoft shared\ink\en-us\boxed-join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-join.avi
avi
File
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
program files\common files\microsoft shared\ink\en-us\boxed-split.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\boxed-split.avi
avi
File
program files\common files\microsoft shared\ink\en-us\correct.avi
program files\common files\microsoft shared\ink\en-us\correct.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\correct.avi
avi
File
program files\common files\microsoft shared\ink\en-us\delete.avi
program files\common files\microsoft shared\ink\en-us\delete.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\delete.avi
avi
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
cab
File
program files\common files\microsoft shared\ink\en-us\join.avi
program files\common files\microsoft shared\ink\en-us\join.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\join.avi
avi
File
program files\common files\microsoft shared\ink\en-us\split.avi
program files\common files\microsoft shared\ink\en-us\split.avi
c:\
c:\program files\common files\microsoft shared\ink\en-us\split.avi
avi
File
program files\common files\microsoft shared\ink\flickanimation.avi
program files\common files\microsoft shared\ink\flickanimation.avi
c:\
c:\program files\common files\microsoft shared\ink\flickanimation.avi
avi
File
program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml
xml
File
program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
c:\
c:\program files\common files\microsoft shared\ink\fsdefinitions\auxpad.xml
xml
File
program files\common files\microsoft shared\ink\ipshrv.xml
program files\common files\microsoft shared\ink\ipshrv.xml
c:\
c:\program files\common files\microsoft shared\ink\ipshrv.xml
xml
File
program files\common files\microsoft shared\ink\ipsita.xml
program files\common files\microsoft shared\ink\ipsita.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsita.xml
xml
File
program files\common files\microsoft shared\ink\ipsjpn.xml
program files\common files\microsoft shared\ink\ipsjpn.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsjpn.xml
xml
File
program files\common files\microsoft shared\ink\ipskor.xml
program files\common files\microsoft shared\ink\ipskor.xml
c:\
c:\program files\common files\microsoft shared\ink\ipskor.xml
xml
File
program files\common files\microsoft shared\ink\ipsnld.xml
program files\common files\microsoft shared\ink\ipsnld.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsnld.xml
xml
File
program files\common files\microsoft shared\ink\ipsnor.xml
program files\common files\microsoft shared\ink\ipsnor.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsnor.xml
xml
File
program files\common files\microsoft shared\ink\ipsplk.xml
program files\common files\microsoft shared\ink\ipsplk.xml
c:\
c:\program files\common files\microsoft shared\ink\ipsplk.xml
xml
File
program files\common files\microsoft shared\office14\1033\readme.htm
program files\common files\microsoft shared\office14\1033\readme.htm
c:\
c:\program files\common files\microsoft shared\office14\1033\readme.htm
htm
File
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml
program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml
xml
File
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi
msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi
c:\
c:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi
msi
File
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm
chm
File
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml
program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml
xml
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
cab
File
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml
program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml
program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml
program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml
xml
File
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi
msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi
c:\
c:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi
msi
File
program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml
program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml
program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml
program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml
program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
cab
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.msi
msi
File
program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml
program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml
program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
cab
File
program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml
program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.msi
msi
File
program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml
program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab
cab
File
program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml
program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml
xml
File
program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml
program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml
c:\
c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml
xml
File
program files\common files\microsoft shared\smart tag\1033\mcabout.htm
program files\common files\microsoft shared\smart tag\1033\mcabout.htm
c:\
c:\program files\common files\microsoft shared\smart tag\1033\mcabout.htm
htm
File
program files\common files\microsoft shared\smart tag\lists\1033\dates.xml
program files\common files\microsoft shared\smart tag\lists\1033\dates.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\dates.xml
xml
File
program files\common files\microsoft shared\smart tag\lists\1033\phone.xml
program files\common files\microsoft shared\smart tag\lists\1033\phone.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\phone.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.msi
msi
File
program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat
program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat
dat
File
program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml
program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml
xml
File
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi
msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi
c:\
c:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi
msi
File
program files\common files\microsoft shared\smart tag\lists\1033\time.xml
program files\common files\microsoft shared\smart tag\lists\1033\time.xml
c:\
c:\program files\common files\microsoft shared\smart tag\lists\1033\time.xml
xml
File
program files\common files\microsoft shared\smart tag\lists\basmla.xsl
program files\common files\microsoft shared\smart tag\lists\basmla.xsl
c:\
c:\program files\common files\microsoft shared\smart tag\lists\basmla.xsl
xsl
File
program files\common files\microsoft shared\smart tag\metconv.txt
program files\common files\microsoft shared\smart tag\metconv.txt
c:\
c:\program files\common files\microsoft shared\smart tag\metconv.txt
txt
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi
msi
File
program files\common files\microsoft shared\stationery\bears.htm
program files\common files\microsoft shared\stationery\bears.htm
c:\
c:\program files\common files\microsoft shared\stationery\bears.htm
htm
File
program files\common files\microsoft shared\stationery\bears.jpg
program files\common files\microsoft shared\stationery\bears.jpg
c:\
c:\program files\common files\microsoft shared\stationery\bears.jpg
jpg
File
program files\common files\microsoft shared\stationery\blue_gradient.jpg
program files\common files\microsoft shared\stationery\blue_gradient.jpg
c:\
c:\program files\common files\microsoft shared\stationery\blue_gradient.jpg
jpg
File
program files\common files\microsoft shared\stationery\cave_drawings.gif
program files\common files\microsoft shared\stationery\cave_drawings.gif
c:\
c:\program files\common files\microsoft shared\stationery\cave_drawings.gif
gif
File
program files\common files\microsoft shared\stationery\connectivity.gif
program files\common files\microsoft shared\stationery\connectivity.gif
c:\
c:\program files\common files\microsoft shared\stationery\connectivity.gif
gif
File
program files\common files\microsoft shared\stationery\desktop.ini
program files\common files\microsoft shared\stationery\desktop.ini
c:\
c:\program files\common files\microsoft shared\stationery\desktop.ini
ini
File
program files\common files\microsoft shared\stationery\dotted_lines.emf
program files\common files\microsoft shared\stationery\dotted_lines.emf
c:\
c:\program files\common files\microsoft shared\stationery\dotted_lines.emf
emf
File
program files\common files\microsoft shared\stationery\garden.htm
program files\common files\microsoft shared\stationery\garden.htm
c:\
c:\program files\common files\microsoft shared\stationery\garden.htm
htm
File
program files\common files\microsoft shared\stationery\garden.jpg
program files\common files\microsoft shared\stationery\garden.jpg
c:\
c:\program files\common files\microsoft shared\stationery\garden.jpg
jpg
File
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab
msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab
c:\
c:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab
cab
File
program files\common files\microsoft shared\stationery\genko_1.emf
program files\common files\microsoft shared\stationery\genko_1.emf
c:\
c:\program files\common files\microsoft shared\stationery\genko_1.emf
emf
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab
cab
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\stationery\genko_2.emf
program files\common files\microsoft shared\stationery\genko_2.emf
c:\
c:\program files\common files\microsoft shared\stationery\genko_2.emf
emf
File
program files\common files\microsoft shared\stationery\graph.emf
program files\common files\microsoft shared\stationery\graph.emf
c:\
c:\program files\common files\microsoft shared\stationery\graph.emf
emf
File
program files\common files\microsoft shared\stationery\green bubbles.htm
program files\common files\microsoft shared\stationery\green bubbles.htm
c:\
c:\program files\common files\microsoft shared\stationery\green bubbles.htm
htm
File
program files\common files\microsoft shared\stationery\greenbubbles.jpg
program files\common files\microsoft shared\stationery\greenbubbles.jpg
c:\
c:\program files\common files\microsoft shared\stationery\greenbubbles.jpg
jpg
File
program files\common files\microsoft shared\stationery\grid_(cm).wmf
program files\common files\microsoft shared\stationery\grid_(cm).wmf
c:\
c:\program files\common files\microsoft shared\stationery\grid_(cm).wmf
wmf
File
program files\common files\microsoft shared\stationery\grid_(inch).wmf
program files\common files\microsoft shared\stationery\grid_(inch).wmf
c:\
c:\program files\common files\microsoft shared\stationery\grid_(inch).wmf
wmf
File
program files\common files\microsoft shared\stationery\hand prints.htm
program files\common files\microsoft shared\stationery\hand prints.htm
c:\
c:\program files\common files\microsoft shared\stationery\hand prints.htm
htm
File
program files\common files\microsoft shared\stationery\handprints.jpg
program files\common files\microsoft shared\stationery\handprints.jpg
c:\
c:\program files\common files\microsoft shared\stationery\handprints.jpg
jpg
File
program files\common files\microsoft shared\stationery\orange circles.htm
program files\common files\microsoft shared\stationery\orange circles.htm
c:\
c:\program files\common files\microsoft shared\stationery\orange circles.htm
htm
File
program files\common files\microsoft shared\stationery\orangecircles.jpg
program files\common files\microsoft shared\stationery\orangecircles.jpg
c:\
c:\program files\common files\microsoft shared\stationery\orangecircles.jpg
jpg
File
program files\common files\microsoft shared\stationery\peacock.htm
program files\common files\microsoft shared\stationery\peacock.htm
c:\
c:\program files\common files\microsoft shared\stationery\peacock.htm
htm
File
program files\common files\microsoft shared\stationery\peacock.jpg
program files\common files\microsoft shared\stationery\peacock.jpg
c:\
c:\program files\common files\microsoft shared\stationery\peacock.jpg
jpg
File
program files\common files\microsoft shared\stationery\softblue.jpg
program files\common files\microsoft shared\stationery\softblue.jpg
c:\
c:\program files\common files\microsoft shared\stationery\softblue.jpg
jpg
File
program files\common files\microsoft shared\themes14\arctic\preview.gif
program files\common files\microsoft shared\themes14\arctic\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\arctic\preview.gif
gif
File
program files\common files\microsoft shared\themes14\arctic\thmbnail.png
program files\common files\microsoft shared\themes14\arctic\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\arctic\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\axis\preview.gif
program files\common files\microsoft shared\themes14\axis\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\axis\preview.gif
gif
File
program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\axis\thmbnail.png
program files\common files\microsoft shared\themes14\axis\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\axis\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\blends\preview.gif
program files\common files\microsoft shared\themes14\blends\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\blends\preview.gif
gif
File
program files\common files\microsoft shared\themes14\blends\thmbnail.png
program files\common files\microsoft shared\themes14\blends\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\blends\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\bluecalm\preview.gif
program files\common files\microsoft shared\themes14\bluecalm\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\bluecalm\preview.gif
gif
File
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi
msi
File
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab
cab
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiolr.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\blueprnt\preview.gif
program files\common files\microsoft shared\themes14\blueprnt\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\preview.gif
gif
File
program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\boldstri\preview.gif
program files\common files\microsoft shared\themes14\boldstri\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\preview.gif
gif
File
program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\breeze\preview.gif
program files\common files\microsoft shared\themes14\breeze\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\breeze\preview.gif
gif
File
program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\breeze\thmbnail.png
program files\common files\microsoft shared\themes14\breeze\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\breeze\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\canyon\preview.gif
program files\common files\microsoft shared\themes14\canyon\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\canyon\preview.gif
gif
File
program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\canyon\thmbnail.png
program files\common files\microsoft shared\themes14\canyon\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\canyon\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\capsules\preview.gif
program files\common files\microsoft shared\themes14\capsules\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\capsules\preview.gif
gif
File
program files\common files\microsoft shared\themes14\capsules\thmbnail.png
program files\common files\microsoft shared\themes14\capsules\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\cascade\preview.gif
program files\common files\microsoft shared\themes14\cascade\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\cascade\preview.gif
gif
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi
msi
File
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0054-0409-1000-0000000ff1ce}-c\visiomui.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi
msi
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab
cab
File
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi
msi
File
program files\common files\microsoft shared\themes14\cascade\thmbnail.png
program files\common files\microsoft shared\themes14\cascade\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\cascade\thmbnail.png
png
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab
cab
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab
cab
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projectmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\compass\preview.gif
program files\common files\microsoft shared\themes14\compass\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\compass\preview.gif
gif
File
program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\compass\thmbnail.png
program files\common files\microsoft shared\themes14\compass\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\compass\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\concrete\preview.gif
program files\common files\microsoft shared\themes14\concrete\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\concrete\preview.gif
gif
File
program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\concrete\thmbnail.png
program files\common files\microsoft shared\themes14\concrete\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\concrete\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-00b4-0409-1000-0000000ff1ce}-c\projlr.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi
msi
File
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll
dll
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
exe
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll
dll
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\deepblue\preview.gif
program files\common files\microsoft shared\themes14\deepblue\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\preview.gif
gif
File
program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\echo\preview.gif
program files\common files\microsoft shared\themes14\echo\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\echo\preview.gif
gif
File
program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\echo\thmbnail.png
program files\common files\microsoft shared\themes14\echo\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\eclipse\preview.gif
program files\common files\microsoft shared\themes14\eclipse\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\preview.gif
gif
File
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\edge\preview.gif
program files\common files\microsoft shared\themes14\edge\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\edge\preview.gif
gif
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe
exe
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest
manifest
File
program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\edge\thmbnail.png
program files\common files\microsoft shared\themes14\edge\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\edge\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\evrgreen\preview.gif
program files\common files\microsoft shared\themes14\evrgreen\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\preview.gif
gif
File
program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll
dll
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab
cab
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi
msi
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi
msi
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\expeditn\preview.gif
program files\common files\microsoft shared\themes14\expeditn\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\preview.gif
gif
File
program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\ice\preview.gif
program files\common files\microsoft shared\themes14\ice\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\ice\preview.gif
gif
File
program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll
dll
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst
mst
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi
msi
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\ice\thmbnail.png
program files\common files\microsoft shared\themes14\ice\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\ice\thmbnail.png
png
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab
cab
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\indust\preview.gif
program files\common files\microsoft shared\themes14\indust\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\indust\preview.gif
gif
File
program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi
msi
File
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
msi
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\indust\thmbnail.png
program files\common files\microsoft shared\themes14\indust\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\indust\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\iris\preview.gif
program files\common files\microsoft shared\themes14\iris\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\iris\preview.gif
gif
File
program files\common files\microsoft shared\themes14\iris\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\iris\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\iris\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\iris\thmbnail.png
program files\common files\microsoft shared\themes14\iris\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\journal\preview.gif
program files\common files\microsoft shared\themes14\journal\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\journal\preview.gif
gif
File
program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\journal\thmbnail.png
program files\common files\microsoft shared\themes14\journal\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png
png
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll
dll
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\layers\preview.gif
program files\common files\microsoft shared\themes14\layers\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\layers\preview.gif
gif
File
program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\layers\thmbnail.png
program files\common files\microsoft shared\themes14\layers\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\layers\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\level\preview.gif
program files\common files\microsoft shared\themes14\level\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\level\preview.gif
gif
File
program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\level\thmbnail.png
program files\common files\microsoft shared\themes14\level\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\level\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\network\preview.gif
program files\common files\microsoft shared\themes14\network\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\network\preview.gif
gif
File
program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\network\thmbnail.png
program files\common files\microsoft shared\themes14\network\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\network\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\papyrus\preview.gif
program files\common files\microsoft shared\themes14\papyrus\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\preview.gif
gif
File
program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe
exe
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png
png
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
cab
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\pixel\preview.gif
program files\common files\microsoft shared\themes14\pixel\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\pixel\preview.gif
gif
File
program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\pixel\thmbnail.png
program files\common files\microsoft shared\themes14\pixel\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\profile\preview.gif
program files\common files\microsoft shared\themes14\profile\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\profile\preview.gif
gif
File
program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\profile\thmbnail.png
program files\common files\microsoft shared\themes14\profile\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\quad\preview.gif
program files\common files\microsoft shared\themes14\quad\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\quad\preview.gif
gif
File
program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\quad\thmbnail.png
program files\common files\microsoft shared\themes14\quad\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\quad\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\radial\preview.gif
program files\common files\microsoft shared\themes14\radial\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\radial\preview.gif
gif
File
program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll
dll
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
xrm-ms
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\radial\thmbnail.png
program files\common files\microsoft shared\themes14\radial\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\radial\thmbnail.png
png
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi
msi
File
program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\refined\preview.gif
program files\common files\microsoft shared\themes14\refined\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\refined\preview.gif
gif
File
program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\refined\thmbnail.png
program files\common files\microsoft shared\themes14\refined\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\refined\thmbnail.png
png
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proplusrww.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab
cab
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww2.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab
cab
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\proprww.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe
exe
File
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi
msi
File
program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe
exe
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll
dll
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\ricepapr\preview.gif
program files\common files\microsoft shared\themes14\ricepapr\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\preview.gif
gif
File
program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png
png
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab
cab
File
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\ripple\preview.gif
program files\common files\microsoft shared\themes14\ripple\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\ripple\preview.gif
gif
File
program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\ripple\thmbnail.png
program files\common files\microsoft shared\themes14\ripple\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\ripple\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\rmnsque\preview.gif
program files\common files\microsoft shared\themes14\rmnsque\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\rmnsque\preview.gif
gif
File
program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll
dll
File
program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
xrm-ms
File
program files\common files\microsoft shared\themes14\satin\preview.gif
program files\common files\microsoft shared\themes14\satin\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\satin\preview.gif
gif
File
program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\satin\thmbnail.png
program files\common files\microsoft shared\themes14\satin\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\satin\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\sky\preview.gif
program files\common files\microsoft shared\themes14\sky\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\sky\preview.gif
gif
File
program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\sky\thmbnail.png
program files\common files\microsoft shared\themes14\sky\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\sky\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\slate\preview.gif
program files\common files\microsoft shared\themes14\slate\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\slate\preview.gif
gif
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi
msi
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab
cab
File
program files\common files\microsoft shared\themes14\slate\thmbnail.png
program files\common files\microsoft shared\themes14\slate\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\sonora\preview.gif
program files\common files\microsoft shared\themes14\sonora\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\sonora\preview.gif
gif
File
program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\sonora\thmbnail.png
program files\common files\microsoft shared\themes14\sonora\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\sonora\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\spring\preview.gif
program files\common files\microsoft shared\themes14\spring\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\spring\preview.gif
gif
File
program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\spring\thmbnail.png
program files\common files\microsoft shared\themes14\spring\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\strtedge\preview.gif
program files\common files\microsoft shared\themes14\strtedge\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif
gif
File
program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprrww.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\prjprorww.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\studio\preview.gif
program files\common files\microsoft shared\themes14\studio\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\studio\preview.gif
gif
File
program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\studio\thmbnail.png
program files\common files\microsoft shared\themes14\studio\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\studio\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\sumipntg\preview.gif
program files\common files\microsoft shared\themes14\sumipntg\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\preview.gif
gif
File
program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe
exe
File
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-003b-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\water\preview.gif
program files\common files\microsoft shared\themes14\water\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\water\preview.gif
gif
File
program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\water\thmbnail.png
program files\common files\microsoft shared\themes14\water\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\water\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\watermar\preview.gif
program files\common files\microsoft shared\themes14\watermar\preview.gif
c:\
c:\program files\common files\microsoft shared\themes14\watermar\preview.gif
gif
File
program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\watermar\thmbnail.png
program files\common files\microsoft shared\themes14\watermar\thmbnail.png
c:\
c:\program files\common files\microsoft shared\themes14\watermar\thmbnail.png
png
File
program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vba\vba7\1033\fm20.chm
program files\common files\microsoft shared\vba\vba7\1033\fm20.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\fm20.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm
chm
File
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi
msi
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\office32ww.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\system\ado\adojavas.inc
program files\common files\system\ado\adojavas.inc
c:\
c:\program files\common files\system\ado\adojavas.inc
inc
File
program files\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets
program files\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe
exe
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\ose.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll
dll
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\osetup.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab
cab
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\owow32ww.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll
dll
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pidgenx.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
xrm-ms
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\services\verisign.bmp
program files\common files\services\verisign.bmp
c:\
c:\program files\common files\services\verisign.bmp
bmp
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe
exe
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab
cab
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi
msi
File
pagefile.sys
pagefile.sys
c:\
c:\pagefile.sys
sys
File
program files\common files\designer\msaddndr.dll
program files\common files\designer\msaddndr.dll
c:\
c:\program files\common files\designer\msaddndr.dll
dll
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\setup.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\dw\dbghelp.dll
program files\common files\microsoft shared\dw\dbghelp.dll
c:\
c:\program files\common files\microsoft shared\dw\dbghelp.dll
dll
File
program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.cab.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi.id-9c354b42.[bigmacbig@cock.li].beets
msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\msocache\all users\{91140000-0057-0000-1000-0000000ff1ce}-c\visiorww.msi.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\designer\msaddndr.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\designer\msaddndr.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\designer\msaddndr.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\dw\dw20.exe
program files\common files\microsoft shared\dw\dw20.exe
c:\
c:\program files\common files\microsoft shared\dw\dw20.exe
exe
File
program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\dw\dwtrig20.exe
program files\common files\microsoft shared\dw\dwtrig20.exe
c:\
c:\program files\common files\microsoft shared\dw\dwtrig20.exe
exe
File
program files\common files\microsoft shared\equation\1033\eeintl.dll
program files\common files\microsoft shared\equation\1033\eeintl.dll
c:\
c:\program files\common files\microsoft shared\equation\1033\eeintl.dll
dll
File
program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\equation\eqnedt32.cnt
program files\common files\microsoft shared\equation\eqnedt32.cnt
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.cnt
cnt
File
program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\equation\eqnedt32.exe
program files\common files\microsoft shared\equation\eqnedt32.exe
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe
exe
File
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe.manifest
manifest
File
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\equation\eqnedt32.hlp
program files\common files\microsoft shared\equation\eqnedt32.hlp
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.hlp
hlp
File
program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\equation\mtextra.ttf
program files\common files\microsoft shared\equation\mtextra.ttf
c:\
c:\program files\common files\microsoft shared\equation\mtextra.ttf
ttf
File
program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\euro\msoeuro.dll
program files\common files\microsoft shared\euro\msoeuro.dll
c:\
c:\program files\common files\microsoft shared\euro\msoeuro.dll
dll
File
program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\filters\msgfilt.dll
program files\common files\microsoft shared\filters\msgfilt.dll
c:\
c:\program files\common files\microsoft shared\filters\msgfilt.dll
dll
File
program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\filters\odffilt.dll
program files\common files\microsoft shared\filters\odffilt.dll
c:\
c:\program files\common files\microsoft shared\filters\odffilt.dll
dll
File
program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\filters\offfiltx.dll
program files\common files\microsoft shared\filters\offfiltx.dll
c:\
c:\program files\common files\microsoft shared\filters\offfiltx.dll
dll
File
program files\common files\microsoft shared\filters\visfilt.dll
program files\common files\microsoft shared\filters\visfilt.dll
c:\
c:\program files\common files\microsoft shared\filters\visfilt.dll
dll
File
program files\common files\microsoft shared\grphflt\cgmimp32.cfg
program files\common files\microsoft shared\grphflt\cgmimp32.cfg
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.cfg
cfg
File
program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\cgmimp32.flt
program files\common files\microsoft shared\grphflt\cgmimp32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.flt
flt
File
program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\cgmimp32.fnt
program files\common files\microsoft shared\grphflt\cgmimp32.fnt
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.fnt
fnt
File
program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\epsimp32.flt
program files\common files\microsoft shared\grphflt\epsimp32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\epsimp32.flt
flt
File
program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\gifimp32.flt
program files\common files\microsoft shared\grphflt\gifimp32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\gifimp32.flt
flt
File
program files\common files\microsoft shared\grphflt\jpegim32.flt
program files\common files\microsoft shared\grphflt\jpegim32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\jpegim32.flt
flt
File
program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl
xsl
File
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\gifimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\gifimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\gifimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\ms.cgm
program files\common files\microsoft shared\grphflt\ms.cgm
c:\
c:\program files\common files\microsoft shared\grphflt\ms.cgm
cgm
File
program files\common files\microsoft shared\grphflt\ms.cgm.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\ms.cgm.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\ms.cgm.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\ms.wpg
program files\common files\microsoft shared\grphflt\ms.wpg
c:\
c:\program files\common files\microsoft shared\grphflt\ms.wpg
wpg
File
program files\common files\microsoft shared\grphflt\ms.wpg.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\ms.wpg.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\ms.wpg.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\jpegim32.flt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\jpegim32.flt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\jpegim32.flt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\pictim32.flt
program files\common files\microsoft shared\grphflt\pictim32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\pictim32.flt
flt
File
program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\png32.flt
program files\common files\microsoft shared\grphflt\png32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\png32.flt
flt
File
program files\common files\microsoft shared\grphflt\png32.flt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\png32.flt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\png32.flt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\pictim32.flt.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\grphflt\pictim32.flt.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\grphflt\pictim32.flt.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\grphflt\wpgimp32.flt
program files\common files\microsoft shared\grphflt\wpgimp32.flt
c:\
c:\program files\common files\microsoft shared\grphflt\wpgimp32.flt
flt
File
program files\common files\microsoft shared\help\hxds.dll
program files\common files\microsoft shared\help\hxds.dll
c:\
c:\program files\common files\microsoft shared\help\hxds.dll
dll
File
program files\common files\microsoft shared\help\hxds.dll.id-9c354b42.[bigmacbig@cock.li].beets
program files\common files\microsoft shared\help\hxds.dll.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\common files\microsoft shared\help\hxds.dll.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\help\itircl55.dll
program files\common files\microsoft shared\help\itircl55.dll
c:\
c:\program files\common files\microsoft shared\help\itircl55.dll
dll
File
program files\microsoft office\clipart\pub60cor\ag00037_.gif
program files\microsoft office\clipart\pub60cor\ag00037_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00037_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\common files\microsoft shared\help\msitss55.dll
program files\common files\microsoft shared\help\msitss55.dll
c:\
c:\program files\common files\microsoft shared\help\msitss55.dll
dll
File
program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
File
program files\microsoft office\clipart\pub60cor\ag00052_.gif
program files\microsoft office\clipart\pub60cor\ag00052_.gif
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif
gif
File
program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[bigmacbig@cock.li].beets
program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[bigmacbig@cock.li].beets
c:\
c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[bigmacbig@cock.li].beets
beets
Mutex
Global\syncronize_17G9M5A
Mutex
Global\syncronize_17G9M5U
Mutex
Global\syncronize_17G9M5A
Mutex
Global\syncronize_17G9M5U
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE
demo.exe
C:\Windows\System32\demo.exe
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Common Startup
File
STD_OUTPUT_HANDLE
File
STD_INPUT_HANDLE
WinRegistryKey
Software\Policies\Microsoft\Windows\System
HKEY_CURRENT_USER
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_CURRENT_USER
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
File
STD_INPUT_HANDLE
File
STD_OUTPUT_HANDLE
File
STD_ERROR_HANDLE
Analyzed Sample #89710
Malware Artifacts
89710
Sample-ID: #89710
Job-ID: #221108
This sample was analyzed by VMRay Analyzer 3.0.2 on a Windows 7 system
100
VTI Score based on VTI Database Version 3.3
Metadata of Sample File #89710
Submission-ID: #138642
bc1c6fc23fd634e3b93d74d27bf536cd843b1b01ae4255a7c9fa51f4acf8303eexe
MD5
887e76ccf9ae8a731570f13324877426
SHA1
67286d63ab0c619c2fe98dd820486a28f8e4ee61
SHA256
bc1c6fc23fd634e3b93d74d27bf536cd843b1b01ae4255a7c9fa51f4acf8303e
Opened_By
Metadata of Analysis for Job-ID #221108
True
Timeout
True
269.92
XDUWTFONO
win7_64_sp1
x86 64-bit
Windows 7
6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa)
5p5NrGJn0jS HALPmcxz
XDUWTFONO
This is a property collection for additional information of VMRay analysis
VMRay Analyzer
Anti Analysis
VTI rule match with VTI rule score 2/5
vmray_dynamic_api_usage_by_api
Resolves an unusually high number of APIs.
Resolves APIs dynamically to possibly evade static detection
Process
VTI rule match with VTI rule score 1/5
vmray_install_ipc_endpoint
Creates mutex with name "Global\syncronize_17G9M5A".
Creates system object
Process
VTI rule match with VTI rule score 1/5
vmray_install_ipc_endpoint
Creates mutex with name "Global\syncronize_17G9M5U".
Creates system object
Process
VTI rule match with VTI rule score 0/5
vmray_enumerate_processes
Enumerates running processes.
Enumerates running processes
File System
VTI rule match with VTI rule score 1/5
vmray_create_file_in_os_dir
Creates file "C:\Windows\System32\demo.exe" in the OS directory.
Modifies operating system directory
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "C:\Windows\System32\demo.exe" to Windows startup via registry.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\demo.exe" to Windows startup folder.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\programdata\microsoft\windows\start menu\programs\startup\demo.exe" to Windows startup folder.
Installs system startup script or application
Process
VTI rule match with VTI rule score 1/5
vmray_create_process_with_hidden_window
The process "C:\Windows\system32\cmd.exe" starts with hidden window.
Creates process with hidden window
Process
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\Windows\system32\mode.com".
Reads from memory of another process
Process
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\Windows\system32\vssadmin.exe".
Reads from memory of another process
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 4/5
vmray_modify_user_files
Modifies the content of multiple user files. This is an indicator for an encryption attempt.
Modifies content of user files
File System
VTI rule match with VTI rule score 4/5
vmray_delete_user_files
Deletes multiple user files. This is an indicator for ransomware or wiper malware.
Deletes user files
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.eps.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.eps".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.jpg.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\ado210.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\readme.htm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\1033\mcabout.htm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\dates.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\time.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\basmla.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files\common files\microsoft shared\stationery" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\metconv.txt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\genko_2.emf".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\arctic\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\arctic\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blends\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\bluecalm\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\preview.gif".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\preview.gif".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\desktop.ini.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
Masquerade
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files" has a changed appearance.
Changes folder appearance
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\designer\msaddndr.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\1033\eeintl.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.cnt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.exe.manifest.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.exe.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.hlp.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\euro\msoeuro.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\msgfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\equation\mtextra.ttf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\cgmimp32.cfg.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\cgmimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\odffilt.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\offfiltx.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\cgmimp32.fnt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\epsimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\gifimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.cgm.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\jpegim32.flt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\png32.flt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\pictim32.flt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\help\hxds.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\png32.flt".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00057_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00090_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00092_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00103_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00120_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00126_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00129_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\wpgimp32.flt.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00130_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00139_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00142_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00154_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00157_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00158_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00160_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00161_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00164_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00165_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00167_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00169_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00170_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00163_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00172_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00021_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00175_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00176_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00010_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00015_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00790_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00171_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00135_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00914_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00932_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00965_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01039_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00174_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00853_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01044_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\help\itircl55.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\help\msitss55.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\msclientdatamgr\mscdm.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\aceintl.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\aceodbci.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\acerecr.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\acewstr.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\alrtintl.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\msointl.dll.idx_dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\msointl.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\msointl.rest.idx_dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\oarpmanr.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\mssoapr3.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01174_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01173_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceerr.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acecore.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01184_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01216_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01218_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01251_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01545_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceexch.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceexcl.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceodbc.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acedao.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceodexl.dll".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01060_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02724_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an03500_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04108_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04117_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceoddbs.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02122_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04174_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04191_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04195_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04196_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02559_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04225_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04235_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04267_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04269_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04323_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01084_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04134_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04206_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04326_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceodtxt.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04384_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04385_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acerclr.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acerep.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00116_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00141_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00146_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04355_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00160_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00173_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd05119_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd06102_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04332_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07761_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07804_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07831_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08758_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08773_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04369_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08868_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09031_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09194_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09662_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acer3x.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00155_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd10890_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd10972_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19563_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19582_.gif.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19695_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd06200_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19828_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19986_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19988_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd20013_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09664_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00008_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08808_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19827_.wmf.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\aceoledb.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acewdat.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acewss.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acetxt.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
File System
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acexbe.dll.id-9c354b42.[bigmacbig@cock.li].beets".
Modifies application directory
Anti Analysis
VTI rule match with VTI rule score 2/5
vmray_detect_generic_vm_by_rdtsc
Possibly trying to detect VM via rdtsc.
Tries to detect virtual machine
OS
VTI rule match with VTI rule score 4/5
vmray_modify_windows_backup_settings
Deletes Windows volume shadow copies.
Modifies Windows automatic backups
File System
VTI rule match with VTI rule score 1/5
vmray_create_many_files
Creates an unusually large number of files.
Creates an unusually large number of files
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Boot\BOOTSTAT.DAT.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\BOOTSECT.BAK.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[bigmacbig@cock.li].beets".
YARA match