VMRay Analyzer Report for Sample #1160998
VMRay Analyzer
3.2.2
Process
1
836
lvtmrr.exe
1108
lvtmrr.exe
"C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\lvtmrr.exe"
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\users\5p5nrgjn0js halpmcxz\desktop\lvtmrr.exe
Child_Of
Created
Opened
Opened
Created
Created
Opened
Opened
Opened
Opened
Process
2
2732
cmd.exe
836
cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\cmd.exe
Child_Of
Child_Of
Created
Opened
Opened
Opened
Process
3
276
mode.com
2732
mode.com
mode con cp select=1251
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\mode.com
Process
4
772
vssadmin.exe
2732
vssadmin.exe
vssadmin delete shadows /all /quiet
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\
c:\windows\system32\vssadmin.exe
Child_Of
Process
5
2056
vssvc.exe
472
vssvc.exe
C:\Windows\system32\vssvc.exe
C:\Windows\system32\
c:\windows\system32\vssvc.exe
Process
7
1252
lvtmrr.exe
980
lvtmrr.exe
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\lvtmrr.exe"
C:\Windows\system32\
c:\programdata\microsoft\windows\start menu\programs\startup\lvtmrr.exe
Opened
Opened
Process
8
1260
lvtmrr.exe
980
lvtmrr.exe
"C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lvtmrr.exe"
C:\Windows\system32\
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\lvtmrr.exe
Child_Of
Child_Of
Child_Of
Created
Opened
Opened
Created
Created
Opened
Opened
Opened
Opened
Modified_Properties_Of
Opened
Process
9
1568
cmd.exe
1260
cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Windows\system32\
c:\windows\system32\cmd.exe
Child_Of
Child_Of
Created
Opened
Opened
Opened
Process
10
1640
mode.com
1568
mode.com
mode con cp select=1251
C:\Windows\system32\
c:\windows\system32\mode.com
Process
11
1716
vssadmin.exe
1568
vssadmin.exe
vssadmin delete shadows /all /quiet
C:\Windows\system32\
c:\windows\system32\vssadmin.exe
Process
12
1136
lvtmrr.exe
1260
lvtmrr.exe
"C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lvtmrr.exe" -a
C:\Windows\system32\
c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\lvtmrr.exe
Child_Of
Created
Opened
Opened
Opened
Opened
Opened
Opened
Process
13
1276
cmd.exe
1136
cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Windows\system32\
c:\windows\system32\cmd.exe
Child_Of
Child_Of
Created
Opened
Opened
Opened
Process
14
1852
mode.com
1276
mode.com
mode con cp select=1251
C:\Windows\system32\
c:\windows\system32\mode.com
Process
15
1636
cmd.exe
1260
cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Windows\system32\
c:\windows\system32\cmd.exe
Opened
Opened
Opened
Process
16
1932
vssadmin.exe
1276
vssadmin.exe
vssadmin delete shadows /all /quiet
C:\Windows\system32\
c:\windows\system32\vssadmin.exe
Mutex
Global\syncronize_DPYOXTA
Mutex
Global\syncronize_DPYOXTU
Mutex
Global\syncronize_DPYOXTA
Mutex
Global\syncronize_DPYOXTU
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE
lvtmrr.exe
C:\Windows\System32\lvtmrr.exe
REG_SZ
lvtmrr.exe
C:\Windows\System32\lvtmrr.exe
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Startup
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER
Startup
Startup
Startup
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Common Startup
Common Startup
Common Startup
WinRegistryKey
Software\Policies\Microsoft\Windows\System
HKEY_CURRENT_USER
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
WinRegistryKey
Software\Microsoft\Command Processor
HKEY_CURRENT_USER
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
DisableUNCCheck
EnableExtensions
DelayedExpansion
DefaultColor
CompletionChar
PathCompletionChar
AutoRun
Mutex
Global\syncronize_DPYOXTA
Mutex
Global\syncronize_DPYOXTU
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER
lvtmrr.exe
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\lvtmrr.exe
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE
lvtmrr.exe
5353224
REG_SZ
WinRegistryKey
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_LOCAL_MACHINE
Startup
Analyzed Sample #1160998
Malware Artifacts
1160998
Sample-ID: #1160998
Job-ID: #3263400
This sample was analyzed by VMRay Analyzer 3.2.2 on a Windows 7 system
100
VTI Score based on VTI Database Version 3.6
Metadata of Sample File #1160998
Submission-ID: #4757475
e7cb48855681fc2655c5e54a0d9ef32a62634614d19dc294d74f22c97ebe47baexe
MD5
78078c6ee30ceac11a4fac9676710c50
SHA1
5fc27e73a87a43d892b718da53e57ac36b7a2407
SHA256
e7cb48855681fc2655c5e54a0d9ef32a62634614d19dc294d74f22c97ebe47ba
Opened_By
Metadata of Analysis for Job-ID #3263400
True
Maximum binlog size reached
True
183.031
XDUWTFONO
win7_64_sp1
x86 64-bit
Windows 7
6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa)
5p5NrGJn0jS HALPmcxz
XDUWTFONO
This is a property collection for additional information of VMRay analysis
VMRay Analyzer
Obfuscation
VTI rule match with VTI rule score 2/5
vmray_dynamic_api_usage_by_api
Resolves an unusually high number of APIs.
Resolves APIs dynamically to possibly evade static detection
Mutex
VTI rule match with VTI rule score 1/5
vmray_create_named_mutex
Creates mutex with name "Global\syncronize_DPYOXTA".
Creates mutex
Mutex
VTI rule match with VTI rule score 1/5
vmray_create_named_mutex
Creates mutex with name "Global\syncronize_DPYOXTU".
Creates mutex
Discovery
VTI rule match with VTI rule score 0/5
vmray_enumerate_processes
Enumerates running processes.
Enumerates running processes
System Modification
VTI rule match with VTI rule score 1/5
vmray_create_file_in_os_dir
Creates file "C:\Windows\System32\lvtmrr.exe" in the OS directory.
Modifies operating system directory
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "C:\Windows\System32\lvtmrr.exe" to Windows startup via registry.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\windows\start menu\programs\startup\lvtmrr.exe" to Windows startup folder.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_file
Adds "c:\programdata\microsoft\windows\start menu\programs\startup\lvtmrr.exe" to Windows startup folder.
Installs system startup script or application
Hide Tracks
VTI rule match with VTI rule score 1/5
vmray_create_process_with_hidden_window
The process "C:\Windows\system32\cmd.exe" starts with hidden window.
Creates process with hidden window
Obfuscation
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\Windows\system32\mode.com".
Reads from memory of another process
Hide Tracks
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000" has a changed appearance.
Changes folder appearance
Obfuscation
VTI rule match with VTI rule score 1/5
vmray_read_from_remote_process
"c:\windows\system32\cmd.exe" reads from "C:\Windows\system32\vssadmin.exe".
Reads from memory of another process
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.eps.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.jpg".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.jpg.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\grphflt\ms.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\flickanimation.avi.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\hwruklm.dat.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\hwruksh.dat.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\hwrusalm.dat.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\hwrusash.dat.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\ado210.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\readme.htm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\excelmui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\excel.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\accessmuiset.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\groovemui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\groove.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\infopathmui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\infopath.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\branding.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\access.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\oct.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\officemuiset.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.ww\office32ww.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\onenotemui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\office32mui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\office32.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\outlookmui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\outlook.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\powerpointmui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\onenote.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\prjprorww.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\prjpror\setup.xml".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\projectmui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\project.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.en\proof.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.fr\proof.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\proofing.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proofing.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proof.es\proof.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\proplusr\proplusrww.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\publishermui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\publisher.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visio.en-us\visiomui.xml".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\powerpoint.en-us\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\word.en-us\wordmui.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\1033\mcabout.htm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\dates.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visior\setup.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\visior\visiorww.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\phone.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\time.xml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\basmla.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\metconv.txt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
Hide Tracks
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files\common files\microsoft shared\stationery" has a changed appearance.
Changes folder appearance
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\desktop.ini.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\smart tag\lists\1033\stocks.dat.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\stationery\monet.jpg".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\aftrnoon\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\arctic\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\axis\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\axis\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\aftrnoon\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\arctic\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blends\thmbnail.png".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\bluecalm\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blends\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blends\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blueprnt\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\bluecalm\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\boldstri\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\boldstri\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\blueprnt\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\breeze\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\canyon\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\breeze\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\canyon\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\capsules\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\cascade\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\cascade\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\compass\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\concrete\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\concrete\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\compass\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\deepblue\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\echo\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\deepblue\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\edge\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\echo\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\edge\thmbnail.png".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\expeditn\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\expeditn\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ice\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\edge\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ice\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\indust\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\indust\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\iris\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\journal\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\iris\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\layers\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\layers\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\level\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\level\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\network\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\network\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\pixel\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\profile\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\profile\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\quad\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\pixel\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\journal\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "5353224" to Windows startup via registry.
Installs system startup script or application
Persistence
VTI rule match with VTI rule score 1/5
vmray_install_startup_script_by_registry
Adds "C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\lvtmrr.exe" to Windows startup via registry.
Installs system startup script or application
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\filters\visfilt.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\help\itircl55.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\inkobj.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\micaut.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\ink\mraut.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\1033\msointl.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acecore.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\acewdat.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\csi.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\csisoap.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\cultures\office.odf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\mso.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\msores.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\office setup controller\osetup.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\prjres.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\riched20.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppcext.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppobjs.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\office14\iacom2.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppsvc.exe.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
Hide Tracks
VTI rule match with VTI rule score 1/5
vmray_change_folder_appearance
Folder "c:\program files" has a changed appearance.
Changes folder appearance
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\desktop.ini.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\performance\title_page.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\translat\arfr\msb1arfr.its.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\translat\msb1ar.lex.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\vbe7.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\performance\title_page_pal.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\web server extensions\14\bin\fpsrvutl.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\dvdmaker.exe.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\pipeline.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\pipetran.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\omdproject.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\omdbase.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\msmdlocal.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\msmgdsrv.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\msolap100.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\baby_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\carbn_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsmainbackground.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsmainbackground_pal.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsmaintonotesbackground.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsmaintonotesbackground_pal.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsmaintoscenesbackground.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsmaintoscenesbackground_pal.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsnotesbackground.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsnotesbackground_pal.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsscenesbackground.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\dvd maker\shared\dvdstyles\sports\sportsscenesbackground_pal.wmv.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cmnty_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\east_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\explr_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00004_.gif".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fincl_01.mid".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fincl_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00004_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00037_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fincl_02.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\grid_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00021_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00038_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\htech_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\grden_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fall_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\indst_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00040_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\java_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00011_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00052_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\jngle_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00090_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00092_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00103_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00057_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00120_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ocean_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00126_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\music_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\paper_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00130_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00129_.gif".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00135_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\nbook_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_03.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_04.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00139_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_06.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00154_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_07.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_05.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\outdr_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_02.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00157_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_08.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00129_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00142_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_09.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00160_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_10.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\road_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00161_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00158_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\parnt_09.mid".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00164_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00163_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\show_01.mid".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\safri_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00165_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\show_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00167_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00164_.gif".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00169_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\schol_02.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\space_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00170_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00171_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00172_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\sprng_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00174_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\sumer_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\swest_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00175_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\urban_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\vctrn_01.mid".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\wnter_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\adjacency.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00015_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\vctrn_01.mid.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00176_.gif".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00176_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00853_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\angles.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00010_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00914_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\apothecary.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00932_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00965_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\aspect.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01039_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an00790_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\austin.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\civic.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\clarity.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\black tie.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\apex.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\composite.eftx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\composite.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01173_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01044_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01084_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\couture.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\elemental.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01174_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01184_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\essential.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\executive.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\concourse.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\concourse.eftx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01218_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01060_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01216_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01251_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an01545_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\flow.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\foundry.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\executive.eftx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02559_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02122_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\equity.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an03500_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04117_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04134_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04174_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04108_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04191_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an02724_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\grid.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04195_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04196_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\metro.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\module.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\median.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04225_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04235_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04206_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04267_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04269_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\newsprint.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04355_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04332_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04323_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04326_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04369_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04384_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\an04385_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00141_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\hardcover.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00155_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00116_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00146_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00173_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd00160_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\opulent.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\paper.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd05119_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\origin.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd06102_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07761_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07804_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\perspective.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd07831_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\oriel.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08758_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd06200_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\slipstream.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08773_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\solstice.eftx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08808_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd08868_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09031_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09662_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09664_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd10890_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd10972_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19563_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\horizon.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19582_.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd09194_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19827_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19695_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\pushpin.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19988_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19986_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd20013_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00008_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00012_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bd19828_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\solstice.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\technic.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\trek.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\urban.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00045_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00098_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00122_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00105_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00148_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00130_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00152_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00194_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00234_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00242_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00247_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00195_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00248_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00252_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00254_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00261_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\media\cagcat10\1033\cagcat10.mml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00254_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00267_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00269_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\waveform.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00262_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\verve.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00265_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00273_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00274_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\document themes 14\theme effects\thatch.eftx.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00296_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00390_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\media\cagcat10\cagcat10.mmw.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00270_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00526_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00392_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00524_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00525_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\media\office14\lines\lines.dll".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\media\office14\bullets\bullets.dll".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\media\office14\office10.mmw.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\media\office14\1033\office10.mml.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00921_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00921_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00923_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00932_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00985_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bl00648_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\access12.acc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\boat.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00076_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\accvdtui.dll".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00092_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\boatinst.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00100_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00078_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\aec.vsl".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00135_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00136_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00145_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00145_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\aecutils.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\asset.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\asset.vrd".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00174_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00184_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00200_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00186_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00224_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00438_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\dataservices\folder.ico.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00439_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00441_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00442_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00440_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\bstorm.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\calevent.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00443_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\aec.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00445_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00453_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01080_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\dbwiz.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\discussion.gta.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\discussion14.gta.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\dbengr.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00444_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01634_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01635_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01603_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\drilldwn.vsl".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01636_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\drilldwn.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01637_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\doorschd.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\dwgcnv.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\envelopr.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\eqplist.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel.dev_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel.dev_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel.dev_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel.dev_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel.dev.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\excel_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\facility.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\floch.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\gantt.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\gr8galry.gra.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\gantt.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\graph.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\graph_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\graph_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\graph_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01639_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\graph_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\grintl32.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\classic1.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cg1606.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\classic2.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\clip.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\crane.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\craninst.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cup.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\bs01638_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\grooveintlresource.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\groove_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\groove_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\groove_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\hvac.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\hvacdiff.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\hvacduct.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\grintl32.rest.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\groove.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\classic1.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopath.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\groove_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00117_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00234_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00255_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00256_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopatheditor.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00121_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopatheditor_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\cupinst.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopatheditor_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopatheditor_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopatheditor_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopath_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopath_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopath_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\infopath_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\instlist.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\inventry.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\issue tracking.gta.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\lgnd.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ipdsintl.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mapir.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mor6int.rest.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess.dev.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess.dev_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess.dev_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\move.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess.dev_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess.dev_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msaccess_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mso.acl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msouc_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msouc_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msouc_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msouc_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub.dev.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub.dev_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub.dev_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub.dev_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub.dev_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\msouc.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00261_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00297_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub.opg.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mstore.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00405_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mstore_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00372_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mstore_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mstore_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mstore_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\mspub_k_col.hxk".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00414_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00419_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00437_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00448_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00449_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00413_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\network2.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\network3.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00687_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00705_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\network1.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ois.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ois_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ois_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ois_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ois_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01015_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01039_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01138_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onenote.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onenote_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01140_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01143_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onenote_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onenote_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01139_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onenote_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01145_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01146_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onintl.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onintl.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd00407_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\onintl.rest.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01151_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01152_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\orgch.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\orgchart.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\orgpos.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01160_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01162_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01163_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01157_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\omsintl.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\orgwiz.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01167_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01167_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01168_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outllibr.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outllibr.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outllibr.rest.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01171_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook.dev.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook.dev_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook.dev_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook.dev_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook.hol.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01170_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01166_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01172_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01176_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01176_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01178_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01179_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01180_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01169_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook.dev_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01181_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlook_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\outlwvw.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01181_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01182_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01173_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01183_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01182_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pe.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pipeline.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01186_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt.dev.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt.dev_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pjintl.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt.dev_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt.dev_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt.dev_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\powerpnt_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01434_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01366_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ppintl.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01585_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01586_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01628_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\ppintl.rest.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01629_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01630_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01631_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01761_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01793_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ed00010_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ed00019_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01772_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pub6intl.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pub6intl.rest.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ed00172_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\proprpt.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pub6intl.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\ed00184_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pubcolor.scm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00222_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\pubwzint.rest.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\savasweb.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00006_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00319_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\setlang_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\setlang_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\setlang.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\setlang_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\setlang_col.hxt".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00397_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\setlang_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\sgres.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00902_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00074_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00320_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00242_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\en00202_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00076_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\shapnum.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00086_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00086_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\smigrate.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00077_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00090_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00096_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00296_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\space.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00297_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00306_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00336_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\timesoln.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00361_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00369_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visbrres.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\uml.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\viscolor.vsl.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\valve.vrd.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00382_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00397_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00403_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visintl.dll.idx_dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00414_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.dev.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.dev_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00419_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.dev_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.dev_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.dev_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.shapesheet.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.shapesheet_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00428_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.shapesheet_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00438_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00455_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00435_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.shapesheet_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio.shapesheet_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00459_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00543_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio_col.hxt.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio_f_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio_k_col.hxk.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio_prm.hxs.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\office14\1033\visio_prm_col.hxc.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00564_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00544_.wmf.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\quad\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\radial\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\refined\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\refined\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\microsoft office\clipart\pub60cor\fd00544_.wmf".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\radial\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ripple\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\ripple\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\rmnsque\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\rmnsque\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\satin\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\satin\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sky\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\slate\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sky\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\slate\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sonora\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\spring\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sonora\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\studio\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\studio\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sumipntg\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\water\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\water\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\spring\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\watermar\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\watermar\thmbnail.png.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\fm20.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbcn6.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\themes14\sumipntg\preview.gif.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbendf98.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbhw6.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vblr6.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbob6.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\vbui6.chm.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\web server extensions\14\bin\1033\fpext.msg.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\vsto\10.0\vstoinstaller.config.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\abu-miss-reflected.exe.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\designer\msaddndr.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dbghelp.dll.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dw20.exe.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
System Modification
VTI rule match with VTI rule score 1/5
vmray_modify_application_dir_by_file
Modifies "c:\program files\common files\microsoft shared\dw\dwtrig20.exe.id-9c354b42.[tcprx@tutanota.com].tcprx".
Modifies application directory
Anti Analysis
VTI rule match with VTI rule score 2/5
vmray_detect_generic_vm_by_rdtsc
Possibly trying to detect VM via rdtsc.
Tries to detect virtual machine
System Modification
VTI rule match with VTI rule score 1/5
vmray_create_many_files
Creates above average number of files.
Creates an unusually large number of files
User Data Modification
VTI rule match with VTI rule score 4/5
vmray_modify_windows_backup_settings
Deletes Windows volume shadow copies.
Modifies Windows automatic backups
Antivirus
VTI rule match with VTI rule score 5/5
vmray_av_malicious_match
Local AV detected the sample itself as "Trojan.Ransom.Crysis.E".
Malicious content was detected by heuristic scan
Antivirus
VTI rule match with VTI rule score 5/5
vmray_av_malicious_match
Local AV detected a memory dump of process "lvtmrr.exe" as "Trojan.Ransom.Crysis.E".
Malicious content was detected by heuristic scan
Privilege Escalation
VTI rule match with VTI rule score 3/5
vmray_create_process_with_elevated_privileges
Process "lvtmrr.exe" creates child process "lvtmrr.exe" with elevated privileges.
Escalates Privileges
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Boot\BOOTSTAT.DAT.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\BOOTSECT.BAK.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "DharmaEncryptedFile" from ruleset "Ransomware" has matched on the dropped file "C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[tcprx@tutanota.com].tcprx".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "Dharma_Based" from ruleset "Ransomware" has matched on the extracted function string file "function_strings_process_12.txt".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "Dharma_Based" from ruleset "Ransomware" has matched on the extracted function string file "function_strings_process_8.txt".
Malicious content matched by YARA rules
YARA
VTI rule match with VTI rule score 5/5
vmray_yara_match_high
Rule "Dharma_Based" from ruleset "Ransomware" has matched on the extracted function string file "function_strings_process_1.txt".
Malicious content matched by YARA rules