Filename
|
Hash
|
Operations
|
Category
|
Severity
|
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vbcudt.exe
|
MD5:
d33bd2147ebec07b3e50ac0d318fa793
SHA1:
fa50fb875c925690cbebc95aec5f7770a6def5ef
SHA256:
efa6224f16a7f9320a476b79d30a6a1db9191aa09d738591239856906e571c59
SSDeep:
24576:eajHluuF4KP5nUo03S1WcnNhw+xsWI3ul/IuiaCGIihuHMo:9pYynUoYSn/w+K5ul/IuB0rM
ImpHash:
2cd14f15921469c2e776cf169a885091
|
|
Sample File
|
|
C:\BOOTSECT.BAK.egmwv
|
MD5:
171aa65c6883f8e9c2185a67944df17d
SHA1:
62fb57d7e93dae0e6517b90c0154771d657298da
SHA256:
a71cadfe0746650dded4fca71b943e79a628d7f3a99802b19fb40cf94c11aaca
SSDeep:
192:R1coBOQ4hMPPTeK+Rcs1PkBtd1dLsSMIdDz2eVWyJJ:R1cAOQ7XaJxkPdHLsSlN2o
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Boot\BOOTSTAT.DAT.egmwv
|
MD5:
a2bdf3b352b7db6bb7625c9cce907dbc
SHA1:
4ce5b7cd7e69ca781b7ce44f4abce11ad36b0daa
SHA256:
ab69b9c6ef0b1fe5373e821cc0451d9a1d839ab58519597b0512b47fdf040559
SSDeep:
768:WYDVwnPXs9ApOq7YpO9RLaeZmByRWWKF+H:1DVwnPXs9eOqWOWeZmoWT6
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\Boot\Fonts\DECRYPT_EGMWV_FILES.txt
|
MD5:
90fb0728a07baf5bc3e177ef21b175ca
SHA1:
ed5e19a942c668537aa925be6c1ecc7790a63255
SHA256:
3dd562e5279a9c962a95ea80cdef84bc43e94be6c0fa9d79faf875c045c4d026
SSDeep:
12:a0zeGLZA5vDVMC1M8SGEXDjarsRvkEBv5VMdQpNGB1OWKtuJqFOCYvlj6G:auNZARG8HQ3GBoWKt1FOCYJ6G
ImpHash:
-
|
Access, Create, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.egmwv
|
MD5:
a0f8e274a89930aaf0b227f752f5144b
SHA1:
dc98d5acb6e24452afba37a2331f590e1fc5ffc6
SHA256:
2313da222fc081044ba38db3c4ce960c10a445a166f282d6e7c4c9faa3beda64
SSDeep:
196608:9+Qz7fKP0ReD0wXKLUEfRrDXP2ifogB+jHcSBLWiyvyWJRMLhdPWfi:9lDKP0q0wM9JrL2ifJEjhW/6vL3Ai
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.egmwv
|
MD5:
7ab7ddd20c8d217e8b6dd939ee0bca62
SHA1:
7e73af949cc60c6637d30319cfe9fe6982fadb86
SHA256:
6c65ab84bc78b05ed97633c05eba98f2f3519dbef150a99f9c4e93ed2fe61938
SSDeep:
49152:NAfK1DxL8QBoI9eljidTex4S120ytJyham6Co60:NAC1R89EQ1oL
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.egmwv
|
MD5:
bba1a9f8f68e62e2b674d5967ae5eb97
SHA1:
e3ed72443cd783357a100812c48bcd986448bcfb
SHA256:
e3a42b58479eb9da625abcbcf9f15ce8761674776385277edcb382f9f952e4d9
SSDeep:
48:GC2eyz/SC2Vp+xosjpNUOXIYUSeSwzpghRtV8l:GFqZVp+xNBXIYUSHwzpgzb8l
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
05aadf493696d03684f7f10345694e79
SHA1:
01f9f77d04de721fc1d3cc5bfb4a8fd64d85999a
SHA256:
9fb40608ef080ea560a27c8508e1b12fdfb1d5781d6f4425218431e3933e8123
SSDeep:
48:YMbcYWpxifsT+dmhzhZ1EnsQOUZVqjD7+8rgvWOlKIAeGQa4jl:1qcezSsQhVqjv+8rgvDwIbhjl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.egmwv
|
MD5:
b37217eb0fdb6b0afd1cb73182c9a259
SHA1:
a29ab1449dfec21f358403851eef2d41e6f9235a
SHA256:
b53debc828c89cd92950439084fe140440e8917ba2434d9d9312ad892377434e
SSDeep:
49152:dD+crS0h9sDxL8QBoI9eljidTex4S120ytJyha16CZtg:jr9eR89EQ1oe
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.egmwv
|
MD5:
e95ab45e8816a12fba3a03ac00ee9ec2
SHA1:
6d3027f18c70d1d001fef3290bbfa617ff61b417
SHA256:
7956a996c64d7fc69e2b04671cc7a0ba4d047db1d7c97d5acc06e582c43522c6
SSDeep:
48:PD7juUFwhP+oyPSU00jz9pGQ5s0tM8GXNvPv3Sl:7nFI0jz9pjsgM8qv3Sl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.egmwv
|
MD5:
92e1731f289a3c524a0a31957f0ac7b9
SHA1:
3637c6176cd6aea71ffeb5a7d72e1c61bee3036b
SHA256:
02f32543eb459aa8bf2965bb4cedb7db1e9d7a879531bd1abdc91b35309dc853
SSDeep:
196608:sY8zN4KKCX5FvaeoDcBdxmOJR7nxOKOmE7dzaNQwr:sY8Z4KKCX5FvaVczxmUJnYSE7dzAT
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
e6dd82dbd5d95d2165c37d4dfc15f289
SHA1:
1273931868720ac9904be4093c82f5b300cb35a6
SHA256:
f851575d8818bc80e76672d268866e3c9e2ca879c576fd1cb60e66f897cc45c3
SSDeep:
48:xjlsPHkxdkD8wvEi4R+mn3nTKlrkfCCvTurq888W0l:xpsgdTZVYW3nTTB0l
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.egmwv
|
MD5:
7a61b16540bdd9fbf39726394d156464
SHA1:
3c6d83cdec41a1dbbefff1cf02e5d0d1ad5c2639
SHA256:
d0854d44aab856701dc898a0b138085a62339ad258beec2a4de0daa087aaec8b
SSDeep:
196608:y6xhPUvTYpH9lBl/tus7o4L7tZiTnp/jE4U/bxlLRx+U:3UvTiJhU4L7tZiTnprP0txRsU
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.egmwv
|
MD5:
a749531f98db4ecdb4e3a4ed913ee084
SHA1:
d498081e4f4a27bd2589f6c0f51cb4e40ff15e66
SHA256:
92f2d39ecaa6f9a25771f1781bd31636787a636c04f7c1afb320d43814b5f413
SSDeep:
49152:TIH8BpA3DxL8QBoI9eljidTex4S120ytJyhaLz6CCHmo:TIHgpA3R89EQ1oLg
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.egmwv
|
MD5:
64e2b1814933799dbbe926f46888729e
SHA1:
7cb879bef1bf4fc2c7e4492f4a70770762a59c28
SHA256:
8c9094f9db57d2ac1e1f0f9365d147d21943be3923571ef542e4a4dc2898a93e
SSDeep:
24:DS2IWKR3/tn02WJTswG6qf+nHeB6MKTzAiaUxZFWMxno1ap1wmZVjWfTKHgq3YJl:GzZR3Fn0hJTWdgXPTR2qLS7CgmSl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
e4a0d9488d96beae91746944e347c564
SHA1:
b6bfd74b02f2d20405e3d559390787005e13f771
SHA256:
d72c5beefe60e644a56cf62f19281038bd772119eae592b5e36f8d1005dcf444
SSDeep:
48:/+90ciRp4ad4yVnvuSdOwR2sL9GhMfbwnUhBW549FmtlLMXAtIvfOQ8Jl:BcqplVnvB59Ghywn/hZMQtIexJl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.egmwv
|
MD5:
6b6bc4534caa83358a0c4e5fcd9d77e1
SHA1:
00e837a581ec0687a82b682add17cade9b902913
SHA256:
230e2995413ba52d9a4f3e2caaf5227fdc120b52bd80305a2e9dbf7ce11d3128
SSDeep:
196608:LMNR9ZNVAl+ig71eZ8FclBElWHp8byLbyo9crpLlR8ioLO0ZF9CrpbQ:mR1L71eiFgepGHyo2rpLkcoCrpbQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.egmwv
|
MD5:
58d5bf39aa65c2bb135d81bef1a7114b
SHA1:
98ea8b2d4f2af9321aedf72446f79a3eb4dea61c
SHA256:
74564c11e6f56faa929210085f34866e356e04bc4da4c34a8755fceb0d2588ac
SSDeep:
49152:lC3LHYLL/Wo9kLljb1R6rOSN20yRJ63PooFMP+u:lC3LqLVe6vjQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.egmwv
|
MD5:
6a9e1d2b37be08f0aba5395907ddcb1b
SHA1:
131077a4f170fdf1042c62305adedfdff310f1c5
SHA256:
4449dca816359f7eaff727e4e796796fa04fc18ee30f3327836de7d706a6d23b
SSDeep:
96:AyGBnoQRc2EaQRSbwfNYZ8eNpXT3UBSRL4M1ipfSVUEF1wmwMhl:HGBnetyw10zNpXIQjoQUEF1wmvz
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
62dc957b1037bd6986b9dd42892fd74d
SHA1:
1147fbeea9890b2558766be039c42fd095601e74
SHA256:
96ac088f04d5b71517b81fcf57ff9c719d0166b7ce6c50464d55f2612769aed2
SSDeep:
96:H8xR1z+50HqBLDmUALYfcbO0YNsX2P3OXI/p6CUokl:QR1y50HaDl4ccANsX2PL/p6CUoQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
bf5e1f7ec8ca16d5ef05496b6cc223ea
SHA1:
f0f7242b9b76678d1fd4f94f64442f96561aa01a
SHA256:
83b13a08ef633cd3d91c18a4668c704b8bc0fd17dcf72f2fc8f1da30c6581999
SSDeep:
48:iiAWAiIf7VtY5DucWwy849vzJyJ7GRzOG7+5WtxETqbtA+6kTzWvpBMMl:idWAicO59y8O0hGKWXxtAu2vpSMl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.egmwv
|
MD5:
6f84c87a3ac4cffe4d2f49c467b2a926
SHA1:
42d126d98697f6a9965b54048350fc084760901c
SHA256:
5dcd7011b6dde117af9daab1bf735fb4fe0da3518287408400400271769a6c98
SSDeep:
196608:Rw4DjgEaM4k8IMj3kMxfGbWaxJMKMA4JxuiNQG3A2r7rfiSFhysD8uxDxKj:Rw8jzn8IQkM2BFEx96G3AUf7FnzKj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.egmwv
|
MD5:
78d7d55be51bd94f18081740fd97b3fa
SHA1:
5bff05023c701fc263e24fb1a793bf4d4130fce9
SHA256:
8d4f2c65226de3f8bb3b997dd4830a5c85ed32772442a5084e83dadcff10e8e2
SSDeep:
49152:ZVz5RDxL8QBoI9eljidTex4S120ytJyhaM6CLCt:LfR89EQ1on
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.egmwv
|
MD5:
9cc8345bc26e970ee61997be78c6001e
SHA1:
ff35cb6cbb0c78de35d1ab1ff2e5d0ca03491ba6
SHA256:
d912ff9e08d25fc00ea2d82144aca38bca653a17dd891975039d584f0983adc8
SSDeep:
48:CyTZZgwL/Fh2W7Yi1Ke0X2cq4Zb7XESiXNQ3JXp1P8jC/XVKl:C6ZR/aKh12TfZb7XsXIJXp1P8yFKl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.egmwv
|
MD5:
e0f4a7d80a0964a70f0d9625467fa232
SHA1:
227ee8d92b6072e89d5242e7d4ab3b42d2973ac1
SHA256:
5622b1e4bcc1aa6fc5d4fca79b5ac68ab2b2c2cc2db75478be9cc5275a1bad11
SSDeep:
196608:6icrZjQR9g8YYIcjfX+vntQdQGzFZaGkGdN7p06H1JX/WanfW/OIV0h:tBR9YY5mvJGBZWGRz1kaza0h
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.egmwv
|
MD5:
e293554185908b5a4fbb66ed3e084955
SHA1:
b9d0883511a7fd4f5eb339b5359f455396add3df
SHA256:
24e8e46a6a629b1beb7f85e745253c8d5d5d8e1eee6842f8d87fce20d2ad1b40
SSDeep:
24576:XSyHFI7fJQPi4x3P6WBWkmf3egDqo8o9370Pv6YwO:XSSzgLf7qo6Pv6Yj
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.egmwv
|
MD5:
7afe82a8b6128bc02f3f63b0774e6a4e
SHA1:
c4afc1921c7fe68073db695115b31f133a9515a4
SHA256:
6ca06982d0a46b1b61b8e9feb1671f96f64d22e07577793ba95c900f1e39dcd0
SSDeep:
48:SsSEFa7zN5Lefy2kAa1jYHnIyEj0YnneGAzl:qduVUdYJlqnevzl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.egmwv
|
MD5:
768faf47c66d85083fb66ecf2f2b29fa
SHA1:
afa93d577d1da763c16a962fcefec98deb4dd3a4
SHA256:
953d928ad8f77fd7c34ba35f3dd7f9d0da314912142ca0a07f0a1948e78deb37
SSDeep:
196608:UehMF0S6eDsIwHBL4B9lCzT2bOgBoDuihGYrLpVUBJ/7HAFGtNy6aMhnRTU+:UeSeqsIwHNB26gfE7e/7JNMM5RTU+
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.egmwv
|
MD5:
7607686e5c85d9e75d210117b8d72b08
SHA1:
f4871150f7331cae3e1475643f62212e3060edd9
SHA256:
5d348c5a7a792a1d1714d0d85df69a1868edba9fc23413a899b20d1493daa9f6
SSDeep:
24576:kkXI7flQPmbxnP6WBzkm83xgDBo8o93OOr8Bky6:TiDxL8QBohr8Bk/
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.egmwv
|
MD5:
f81afd4f9723591ab1c92aef9ba2d606
SHA1:
0f0d652376094b9dddec9108543b183e13258648
SHA256:
6ac7d5cf9122fa0d5ee912d8fa7630352f75c3e89ac1c12d8dba46746aebea18
SSDeep:
48:wnNun7x6iUBJg7vugh0Sej8mgPzdOFcuZtfl:gwn7x6zJg7vJCSXkNZhl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.egmwv
|
MD5:
42b940cea68bf2bc11af6bcaefddda53
SHA1:
1acb1e71a78609054943df9f67d74928e13454e2
SHA256:
93dd87c488615608292687e4d50d814636c4ddc755e9f6d6b632044160f94644
SSDeep:
196608:hm4iOm1j3/abCsYwFOSQo2eWDOQs4hW6s63HS:hhmN3/abtYIQo2OQ93RS
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.egmwv
|
MD5:
b1a4c15667e81476b1c7b3c7901be323
SHA1:
2ce5f6ca420d6106b02fdd7c09adfc0d6577140b
SHA256:
b8b6b6580317dc32b56f6f670dd7cfab52eff8872bf73f52935138a02fe92c07
SSDeep:
24576:ZVXOuI7flQPmzxnP6WBzkm83xgDBo8o93m9XLH5Xq:ZV4DxL8QBo6XLH5a
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.egmwv
|
MD5:
e928f0011785fe2729e057f0485b9274
SHA1:
f8b10260b9e24941184b87eee821014bc06a2b94
SHA256:
fece5b303e41a1a6128538a2ce4c21afd94bab97551cbab3bb6406256a99a25b
SSDeep:
48:lnwXcH85sKhjgtMl9PGs9oVWy3OcPYHFAKvMBQal:TMfjdPG3VWrSKvWQal
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.egmwv
|
MD5:
d5b6e25e638081fe567118c33919e9d8
SHA1:
6ba8a162e25cd4f8e602f212caf4baae2d4d612c
SHA256:
a6aa99379194c192e034d7f87f865a92a81b5296a00c5feff619af26ca9333af
SSDeep:
24576:DXmV4gElx3P6WBWkmf3egDqo8o93lo6pjEkb:/zgLf7qo46pjE6
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.egmwv
|
MD5:
83f595546861ffdd94c69242ec8d3027
SHA1:
595869bd517c6ec35e327719661b3e31640967a8
SHA256:
5ca2b4306bf482c5b9b1da2b001eae7a59287e32328d27579eb1ad0c66fc21f1
SSDeep:
24:Ly0wUOBE6TK7swqZvESnfJKTj7EiRj3gF3Q6YQx2M:eB+icT/Vj3ghQ6/xl
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
593538fbbcd808fd41b8a7c8cce738aa
SHA1:
f4d2fc84cfcd89a64dbd41745c5749804cd2dce5
SHA256:
cc6be406e95a07e2d6b3d8ab4099fb9fbabf93d66ebcf084954087ac918a3621
SSDeep:
96:AFgt+8r+07jROOKIMnEzF+jaTUEYn1AtMIcdo3BQhV44KYdp9Nh31TH569ontkkT:Ag48TNO8zlUEMAiIcOBsTHK+LL8qH
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.egmwv
|
MD5:
9ac33682b2a6dbf22f559acad17d8427
SHA1:
1de40c6cbc23f5ab28fca1ecb2dde9aaaf3b0d82
SHA256:
c561cac5237cc566373ed8c33b80142e56b8ec679657d3efbbd1b0cb2962fcf0
SSDeep:
49152:inuKVveFNMMFrwnbddIOxT+YoC59POSOwPFhbYRjfIDPHLoBTv5oJBB47q5Fqciy:bJDMUwxyOCC5VPFhbY12HLodiF4+5riy
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
d5afcab33c4f5b102e458e818ba9aa7a
SHA1:
8afdcd23fd71a4c152a144e45850a628881e3f53
SHA256:
be78d5b1ba5073cb09baf6158c5bcf3b64e8402e75de4960af038a7e7bcfa574
SSDeep:
48:FJZKmmI1QVtPkRXoi2WICgZn1+I2t0TtSihsmOuf17i7V74eKa/CeuAWQhl:FJc4ezsRj2WM1D2t0T3e5uf17iVhKcCC
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.egmwv
|
MD5:
7976ecba333f053dc76fdf2f361f467e
SHA1:
8b6ccdd73ff0f650cab4263a8660a77430964acd
SHA256:
3d45ae3fce2e76456ae6478989d6f17228e28c50e7bdde1160ec12417845405e
SSDeep:
49152:p0ELYkDCvlLsUloDoISMljcqmcLaSt20yrujThvLf2AdA:pJCxslDo30DVQ
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.egmwv
|
MD5:
a8abc78516a5ec4b2bd0b13f61a66921
SHA1:
338391041c9ad5099708a0fb53627235602cab9a
SHA256:
8a6844acdeb055d91d9afd32c8b566aab74f120ad4dcafc96426d456d0adf87c
SSDeep:
24:OOn7cKaYR/fZcQUN5y/8RBn2jBI5XH+0kZfhcUJgY1DlEqAu3HYj2M:OIcKb/fZcQUbywn60HtkMSgYq6Il
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
MD5:
c010184846e79bf39ee6ec7f353d3a12
SHA1:
3893417ab17d51564abcd01902d2940afffcd5fa
SHA256:
3383d2f49b39a9ca0755797eb380aa304d78f6178d43183612bc7cd239b76f54
SSDeep:
48:FqCDOUSqua7TKFeGHFU4sZ3qY6Xaea3O0bZe5LK4D0mzlKMYvNel:FV7KQSUNZ31O0bQ4CLJKMYvNel
ImpHash:
-
|
Access, Create, Delete, Read, Write
|
Dropped File
|
|
A:\
|
-
|
Access
|
|
|
B:\
|
-
|
Access
|
|
|
C:\
|
-
|
Access
|
|
|
C:\BOOTSECT.BAK
|
-
|
Access
|
|
|
C:\Boot\
|
-
|
Access
|
|
|
C:\Boot\BCD
|
-
|
Access, Delete
|
|
|
C:\Boot\BCD.LOG
|
-
|
Access, Delete
|
|
|
C:\Boot\BCD.LOG.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\BCD.LOG1
|
-
|
Access
|
|
|
C:\Boot\BCD.LOG2
|
-
|
Access
|
|
|
C:\Boot\BCD.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\BOOTSTAT.DAT
|
-
|
Access
|
|
|
C:\Boot\Fonts\
|
-
|
Access
|
|
|
C:\Boot\Fonts\chs_boot.ttf
|
-
|
Access, Delete
|
|
|
C:\Boot\Fonts\chs_boot.ttf.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\Fonts\cht_boot.ttf
|
-
|
Access, Delete
|
|
|
C:\Boot\Fonts\cht_boot.ttf.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\Fonts\jpn_boot.ttf
|
-
|
Access, Delete
|
|
|
C:\Boot\Fonts\jpn_boot.ttf.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\Fonts\kor_boot.ttf
|
-
|
Access, Delete
|
|
|
C:\Boot\Fonts\kor_boot.ttf.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\Fonts\wgl4_boot.ttf
|
-
|
Access, Delete
|
|
|
C:\Boot\Fonts\wgl4_boot.ttf.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\cs-CZ\
|
-
|
Access
|
|
|
C:\Boot\cs-CZ\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\cs-CZ\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\da-DK\
|
-
|
Access
|
|
|
C:\Boot\da-DK\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\da-DK\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\de-DE\
|
-
|
Access
|
|
|
C:\Boot\de-DE\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\de-DE\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\el-GR\
|
-
|
Access
|
|
|
C:\Boot\el-GR\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\el-GR\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\en-US\
|
-
|
Access
|
|
|
C:\Boot\en-US\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\en-US\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\en-US\memtest.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\en-US\memtest.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\es-ES\
|
-
|
Access
|
|
|
C:\Boot\es-ES\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\es-ES\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\fi-FI\
|
-
|
Access
|
|
|
C:\Boot\fi-FI\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\fi-FI\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\fr-FR\
|
-
|
Access
|
|
|
C:\Boot\fr-FR\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\fr-FR\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\hu-HU\
|
-
|
Access
|
|
|
C:\Boot\hu-HU\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\hu-HU\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\it-IT\
|
-
|
Access
|
|
|
C:\Boot\it-IT\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\it-IT\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\ja-JP\
|
-
|
Access
|
|
|
C:\Boot\ja-JP\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\ja-JP\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\ko-KR\
|
-
|
Access
|
|
|
C:\Boot\ko-KR\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\ko-KR\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\memtest.exe
|
-
|
Access
|
|
|
C:\Boot\nb-NO\
|
-
|
Access
|
|
|
C:\Boot\nb-NO\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\nb-NO\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\nl-NL\
|
-
|
Access
|
|
|
C:\Boot\nl-NL\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\nl-NL\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\pl-PL\
|
-
|
Access
|
|
|
C:\Boot\pl-PL\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\pl-PL\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\pt-BR\
|
-
|
Access
|
|
|
C:\Boot\pt-BR\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\pt-BR\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\pt-PT\
|
-
|
Access
|
|
|
C:\Boot\pt-PT\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\pt-PT\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\ru-RU\
|
-
|
Access
|
|
|
C:\Boot\ru-RU\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\ru-RU\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\sv-SE\
|
-
|
Access
|
|
|
C:\Boot\sv-SE\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\sv-SE\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\tr-TR\
|
-
|
Access
|
|
|
C:\Boot\tr-TR\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\tr-TR\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\zh-CN\
|
-
|
Access
|
|
|
C:\Boot\zh-CN\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\zh-CN\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\zh-HK\
|
-
|
Access
|
|
|
C:\Boot\zh-HK\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\zh-HK\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Boot\zh-TW\
|
-
|
Access
|
|
|
C:\Boot\zh-TW\bootmgr.exe.mui
|
-
|
Access, Delete
|
|
|
C:\Boot\zh-TW\bootmgr.exe.mui.egmwv
|
-
|
Access, Create
|
|
|
C:\Config.Msi\
|
-
|
Access
|
|
|
C:\Documents and Settings
|
-
|
Access
|
|
|
C:\MSOCache\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll
|
-
|
Access
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
|
-
|
Access, Delete
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe
|
-
|
Access
|
|
|
C:\MSOCache\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolui100.dll
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Analysis Services\AS OLEDB\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files\Microsoft Analysis Services\DECRYPT_EGMWV_FILES.txt
|
-
|
Access, Create, Write
|
|
|
C:\Program Files\Microsoft Office\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\CLIPART\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\
|
-
|
Access
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF.egmwv
|
-
|
Access, Create, Read
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF
|
-
|
Access, Delete
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF.egmwv
|
-
|
Access, Create, Read, Write
|
|
|
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF
|
-
|
Access, Delete
|
|
|
For performance reasons, the remaining 1629 entries are omitted.
The remaining entries can be found in
ioc_export.txt
or
ioc_export.json
.
|