99ad582d...f7f3

File (1470)

»

Filename	Hash	Operations	Category	Severity
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\sqlbrowser.exe	MD5: 5ca268b5fb47388c9b2187d8158021d8 SHA1: c52162b159694f19e90fc0ce0e6aeb8e30315274 SHA256: 99ad582d96da32eef7d38c757494dbf67b7c38315daaefcd5e01cd9920a8f7f3 SSDeep: 3072:9zAWS7dlLb0ag4nkKlR6L8PeUdJ9exPAuHp+NlMtl5:RAffJk6R64Pe6uJ+ ImpHash: ff9ba4884cd8a52b3d06ede96951bff9		Sample File	Malicious
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab	MD5: 53bb6c6964549877fc26b48bb9f254c6 SHA1: 8a23e70ccbbd13cd6361e1695a365cf8036d261c SHA256: e954cb5fed86ff58886432284327d3ba8563ca7a34259fb3e6b6bbae8fe2472d SSDeep: 196608:tjiPH0Vh1AiJN3YTaxsf+I4L6CMvnrVUz5yqoDMXLXDGBYh:uH0LYWqGI4+Jvnq5y4XLXAYh ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.midwestsurinc_readme	MD5: ae4fa9dbefe75ff88ce0e332af763f01 SHA1: 5d5a440437949625647ea536aeaffad995fa1994 SHA256: fa32d677a10a8a596d2c96162e5236b63de4186618f666d0eef4088cda4583aa SSDeep: 24:aRijvGzquk09SJgTN8ogsEOmvLAXaE+PkFPHZZp49Nj10rsFu/8:akjXuF9SCTNblXmDAj+PaPHOI3/8 ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi	MD5: a3dc47943d257ef8bf4f689d51f0fdde SHA1: 8f80ab617536a6cfc79507138d9f27243863bed0 SHA256: 98064e2951fb3d13c3e88e626bb57175ec2165c64118ecbf7bca5428a57960b7 SSDeep: 49152:xjmakfoQt9O8M5p/po7GcMTUPRqgNPvd4jYrRbUXPgblcAsxCnZEMbgv7w3NyM:BHkfJt9OVs6cMTlgNndZRbUBJCZhgj0d ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.midwestsurinc_readme	MD5: 2dcc5ce9bfc1cdc7b62d984c5a9067e3 SHA1: 25711dc693645485a4b4d5e7dd4c85465bd572ff SHA256: 2c5bd2d17e1b27dfcf023070d16c26d6d153f7ed45cf2d3807eff840cd9d141f SSDeep: 24:aRijvGzquk09SJgTN8ogsEOAManvL8c8JZHQ3tMnMShem3uhGBh1R4Jne+:akjXuF9SCTNblXTanD0sdMnMS49gBDR8 ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml	MD5: dfa1af96cf2f1812f45ff3a22b3084f3 SHA1: 906c16de42649f57a4640b8038d956ab034a9077 SHA256: 364ee732a42ceb53bf1f5a44af4bf05150f2c298f76b0be5bae85516a44466d4 SSDeep: 48:MWj1nETM74ErPzmK1eVV9lAG2FEEXWnw7DLcKF:M+Cw7vrPzmQy6vEEGnwzcKF ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.midwestsurinc_readme	MD5: 09fc16cea0d143e7201500aca3f831c0 SHA1: 9087ee53512980e04acb9502428286e90d2290d8 SHA256: 69bec7cd6ebcfd1d6e26ced958448a8dd7953ed38e7ac240dedca3db36ee7639 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOqvLe6a0rHF33H3yAuIRiB0ECNaea:akjXuF9SCTNblXqDtaU3XvuM80XNG ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml	MD5: 63f900f67de941ea41dc4b488ca2a758 SHA1: 14a81510df88a4ea55d4f7616368d3aa38e092c6 SHA256: 4f16607537aaa228c1effd632c470ea6db928d330dc663918156996e3f8f0e41 SSDeep: 48:Z3JrMjkxLI8SUzgnjtNEAfxXjRJH2z8bhXKSTWoPwJ2aKjCmUn5:ZJrDagsjfE2TPhp8Yazn5 ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.midwestsurinc_readme	MD5: 59c143d2c0e7995d3b115c7cc4430347 SHA1: 9981ec12c49ed1689b3fd08ea436876462d9d2a5 SHA256: 6f0c4fba439bf23679ceed2aeaa7b7d1c6d66369d8354595f7de036b65a2be06 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOU/vLOGX79aRE4ZH8MN1WyqojA4a:akjXuF9SCTNblXU/DOGrMREkmya ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi	MD5: ad7b71166cf2b097f191f0b3514786a7 SHA1: 2d052bd656674e3ace93abde170bb4218e568ea4 SHA256: be5cf880017aff5c7f0dc821f71b7642892190520aeae8de37e7ae02296d7d72 SSDeep: 49152:SHhEzwOgn+6kCuIWp/1ZNmhJamGBNIf5E6mN/1GJjFGUktNSZQ0:uIGanrAbfGef5f8GJWtNwQ0 ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.midwestsurinc_readme	MD5: 41772889750bd446b3de142d98892218 SHA1: 464b9a86ec7edec7b9a63b59ab0a8e27c7a0d11b SHA256: 934daaf76bd131ebe60eb307fab6b2a7aee5174ac07048ff7a1e3f6fc92452dc SSDeep: 24:aRijvGzquk09SJgTN8ogsEOcvLtAU6LlOLdnW0rUnOtWF9txrXTMqCkDqc:akjXuF9SCTNblXcDtAU65SM0rmOOjXTB ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml	MD5: 9428d9589c2078ba7ddef1c89ce28802 SHA1: ab9eef1081875de744b42505ccd3910cf4bd1a8c SHA256: 7110e683f442ab448bcd2902cc8b5b43c1f2590e614e9fb60ee05c2b9d1231c3 SSDeep: 24:4ywhkvqCVkssHBMP4hSMzMyOAgTHpEM/XMet5bWtfaNcspgkMluRRJ1PiyzZlQxG:4ThkvVAh5zV4HpEM/Xb5bWpaNvAulNNR ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.midwestsurinc_readme	MD5: 5d182d797c62a532a1ac051af2ab1031 SHA1: 1e692c1d37e73594e4760dd1a877295d8201bef9 SHA256: ccc111477d37be05a33a466295e6eda8e1ef24d227c6f2b5c16105071cb32d04 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOevLiqeVkvj9IFPoLIZXC8GgEsh68Ixq5+EZd4Kap/:akjXuF9SCTNblXeDiq5j9iQQCxO/Qq5k ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab	MD5: e529bce7f8d4ead686fd38b39a1d0f36 SHA1: 25e66551e4696015c4dbe248692c5e7c8993d0ea SHA256: 9c929bf048d674cf3fd554b2f3ab62fb95cbf5aadc066143c015a580cb09d66d SSDeep: 196608:vqdr3XGEmn1ABGWZsazGAKH2Upqd420q7jKUD4mQ2E+J7mxskCmtZANvI:cnGL2Zsazta2US7jP4mQR+/m ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.midwestsurinc_readme	MD5: 32b377b5ec743599e2a53bb712ebe0a0 SHA1: 322f9128ab38dadbce70c83cb5362c7031976975 SHA256: fea54761fd12a2c44c8d1143856dae75c27a3705bf9e70f0c953dd469d129c84 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOnNvLDLSFAAkvfnQoaeVvOqUeceQYQ0RdtV4YWBtkp:akjXuF9SCTNblXnNDCnO/aeVmqpceI0V ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml	MD5: dc639ea31b29998e361a3d56c1a9f4b5 SHA1: c905e64b41e02e6994440fd10216b7af5bfb2861 SHA256: de646ed2a9d5ef2abf9e15ced554d948ce5fdb8b1f340ef4306d4187faf56d23 SSDeep: 48:d3GfJWnjhMKbIKfKb+TAuz1Lz4f+o3k0v5CNLokqDa9:dWInjuKbNAqLm+ov5dDa9 ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.midwestsurinc_readme	MD5: 18fcd409b273981c14613db18475368c SHA1: 796ec48126a61a77b8a295caea23b749c776d38d SHA256: d8c69a53c1552359543cb9d7eb0cdf7ec7917c33717271358aa854e79713a4c3 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOMvLKIYvXOYGuA11dSOPm/2XYvsbdqPmn:akjXuF9SCTNblXMDbaHu1HjVb46 ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab	MD5: 31e8851908fe36e634ca55bd7b45956e SHA1: d6fdd9bd9cf327d1b95ae6306d8eaf21064414d3 SHA256: b4aaa51393a70e3e041bbafa8339cec9139e978cc4a0233e72ce088ade389850 SSDeep: 196608:lcmJOUfaM9JW/1NjbIPnMeazfuic7eGKzDwReyQjWmjilZ9EQssUIQJcu:XUUNJitcMeYflcXKsodilAQsrJD ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.midwestsurinc_readme	MD5: f43f0be6d3208b14361317a99f1c96bf SHA1: 2e424aaff9688f4b3bff751c447e383b76159a3e SHA256: 3f02a65f30412601daa5d4b9ff31e014121f8ab2ecf206df4374e6b98141af4d SSDeep: 24:aRijvGzquk09SJgTN8ogsEO75zCrvLb0S9YB3df9NppnMeYEsoXhZD2WK:akjXuF9SCTNblX6DYSWLPpnMe8oXLe ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi	MD5: c433d5082defa6da37a2f2a86d91b022 SHA1: 8deb76333325d13fd097330bf7a138c78c48112d SHA256: c91ca0514a68bcd31e3045857adf257f5174571d5c2efc408ee81f053041c798 SSDeep: 49152:DbMw8uFSliYpyVRG4WrYXldA8aViHq99mLKJdE0CfWCw1FBATE2N+Hn:DauQlHitzUiHqbOKJdv3X1v55n ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.midwestsurinc_readme	MD5: b4d81a192d1b0040d95216bb4705733a SHA1: 768127000768c7a1b0f8e76a07a3dd9f86ed9793 SHA256: 0c6e68e06434360578cc95e73df1c0d63aad0b6dcbafb1ddb5cd5f7360eeb257 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOp9vLvqC13/xnt8U6mypm0fMgWY3rqDAryU9WAw+:akjXuF9SCTNblXjDv5FNt8Y8mzgN3+Ut ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml	MD5: 9fe64703110963f8c99477d18630feaa SHA1: bf264dfd8064e296443f97f0b2505be7196ffdf8 SHA256: 619420a9c5f30edd5d702c6b0f8e15eeca96d1da377b380cc54b6bd6f4d02aa8 SSDeep: 24:KEWgEEv19wiExHoP0/ySOHNeuf9f8DSVCb6dpUOhaJY6Y6ODG1FQIx9i1UhDjj4:MZpiEJi0atN79kuVCb63tY6tSjQIx9UX ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.midwestsurinc_readme	MD5: 74e37d8178a50e6bf0b927e89983190c SHA1: 456bb12178dc37d8e0087b2e5f41a59a5d0846dd SHA256: 9abf00b0cd673e03f726f010d3d5f380ffa33c200b94e03448ad415a7f935741 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOrvLKvgf2dTdkdBDrpnZidFdLX7A6FlAuFBAlv:akjXuF9SCTNblXrDTR9rpiFdLXUSlAqy ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml	MD5: 4ebc0cee923260e868536bd2e9aea6f9 SHA1: 3fd00876080127c6d47b4c0ddce387b61673372e SHA256: 673561a0f48c2ed05d2dfeb4fec2da66cae44a1be4dad49b7cbdab6cc3ec592b SSDeep: 48:EsU/W+sIMO2eXbzauk4B/izoVKoMGOdeyiDtS:gW+szO2eLzaN6a8IoByiE ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.midwestsurinc_readme	MD5: a8a2d229da5690e1088892d0918d8c13 SHA1: 595f2c47094a144fdf2d3f0957ce84de290200cc SHA256: d4238a3121b729f2d9eb7232aa7b01d0a777b0c2d27e3b9aed3f61b63e0ea472 SSDeep: 24:aRijvGzquk09SJgTN8ogsEO+FYvLvCyHxb9tHD2omS1+ATBHR/Oj2TTlL+:akjXuF9SCTNblX+2Dv3jHDEAT//tE ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab	MD5: a62d5c9a70aee5a57b7f12e98bce3588 SHA1: e8f4e51f4556c8ccb987cadd65ca6c2a2457fd4e SHA256: d08d08ed9abca28933b3e8eb865eec65cfa713ed1dc1155a889e49e89ab7cda4 SSDeep: 196608:B5TOPAgVylVM926jumo0cE3niLoj2czbyiftMqXNqcI6MPfC2mgCrus8uYxb0EAW:BZeANH66ESZnf651MPa2yKs8uq9FMJk ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.midwestsurinc_readme	MD5: b1a1ec03c109c8d4fcc94e7473c22c7a SHA1: ddd7aea60816a5d14636a93c7afb90122af8c879 SHA256: 3f60fe823fdb841c734b63d75f4dec46f420c169d1339fae9745f32046127e81 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOSAvLmRHFAkoLVw8pGyCe9FL0vlFFW/:akjXuF9SCTNblXLDkl36v9J8FQ ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi	MD5: 4dfd00d3bd5f5ff89bacd38a126eea74 SHA1: a0f0c02bd1e58f4d452e1c3f9adf45c023ceed65 SHA256: f1311fd2fbbc90a442a7b7f4ad873706827d0357954c323ffec4c676a7a90ed3 SSDeep: 49152:oKu2UQoixH99Nzd9dQ+QqiYxTeXFTZ0r7umcVPV4/7ttdbmmKXCdFtn1/Oy92/:ox2UZ43NzhQJYxTCtEGVP+ZMCXtZNc ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.midwestsurinc_readme	MD5: e23cb0cb331df1bd12bae3dd5504a0e4 SHA1: 75bf0d9ac1a2e12f83e2fea2215fbcdcd6292780 SHA256: 7e5f1a94e28f6bc16b10d9390a1e37db973cffd31e889bd84537896f9cf7477f SSDeep: 24:aRijvGzquk09SJgTN8ogsEOF9+vLMHTU3JQbgRHm9zpgDBtfhyLCfCM2mlqV:akjXuF9SCTNblXz+D13JQbgoppcBNML9 ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml	MD5: f62cce1632ef1466bf139e3ce2be8772 SHA1: 73c7934ed1607149e2f5c81bc0f1af266dcb084e SHA256: 1af0a545ddd4f7f0bcdfa5201fbc5e8da08f949d017e520afac67fe9020dd04c SSDeep: 48:Rukrz1urW8YyqNobPwyzDAr4oBZLi7pwLaubjNPlzgn2cV6AQY4qQoNzDQHswsP3:Btur3Y1QDCBditZubxPVgnJcATnfVd2u ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.midwestsurinc_readme	MD5: a5dca095f7bd34075fa1d5e7dadcd95b SHA1: d1403ba81faef91cde003b8dfcb6d6ebb4aa1ad2 SHA256: 758c948859906f017c8cbf6b0bdb2ac96d0ccc81c289a27a854dcc47cc22ed9b SSDeep: 24:aRijvGzquk09SJgTN8ogsEO5JvLr0o8pAH1DOf0hqlMM1med21BqYz:akjXuF9SCTNblX5JDIC9WMM1me411 ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml	MD5: f72fbfbb0d157de61ab427b7266438bf SHA1: 41e6b8c7fb208fcf55b0eb9bb3bd865b38ba345b SHA256: 8f139d61b2f072105bda22459c38f1ca08cef7ce7965636925a09a4ec69bcb09 SSDeep: 96:PtogqX+tV4g1DNG6jvFBCYdDcZoKF7VAmypgGP/wf:Ptogqu4b6TChoKbAmF4q ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.midwestsurinc_readme	MD5: 11787f8bb40a21bca0308bbbbfd87446 SHA1: ef05a14f82e9a841017639bb396e726938ffc7b1 SHA256: 02ad8cb4967a440d31a9166071894f804cf4db43336225fa8d09bf43f6bf5778 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOTrvLvcnUZc7SICM+uWfhrbAscMJDsMx:akjXuF9SCTNblXTrDvcUZISIVWf5AUsW ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml	MD5: d490898bab74fde1124b38013b734445 SHA1: 7c028cd9af51fe265578dec6570c79247629618b SHA256: af2902978c0b7ba338ff6d5da916b5c04696b1359b1496152796e368bbcf3813 SSDeep: 48:+rXmjRD7rE0xXTiFhXdJGU2WX5k9garD2ALS3mQul+XSZgNj:+rGNXTiFl3tf5YM2omQRCZgt ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.midwestsurinc_readme	MD5: b1a9555872af70acf9b284721e7076ad SHA1: e0c2f6169c6c0674ba310624766770476e86dca9 SHA256: ca8a3149411b83c36c815be61d879844daf511d82ed526158762e71309ed90fb SSDeep: 24:aRijvGzquk09SJgTN8ogsEOUvL4GcPDuvOMOFFCVBbUPsb8im60Z:akjXuF9SCTNblXUD4Gc6OFFCe/d ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab	MD5: bd9e0b0aa661e3a90c2358fc065d15d0 SHA1: c9950916366820799b61486b1e0d7d51101644f4 SHA256: 38967cbf1b1499507f2dd5c4a6d5c7e80189a8ae98446b7d4ab39fc5369099b4 SSDeep: 196608:qov3KoQeix4PAc508oyaB1rWaKRHVdsJwyCOqemxNlFvBr1KO:/Ko10UyEXcZm5Z0O ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.midwestsurinc_readme	MD5: 8832521b08508b7192eb4677a76ebeef SHA1: 8bdd4c76347a86ce97a64c6fa2fb8cd42e25cb1d SHA256: 52de947ceda0a7e48417fb26b5f48c4b336c0176e5d22e0c2a5812cb6f5f6f03 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOJAvLGyXRJsc0VBXfAHRKS08GyQTi9k+:akjXuF9SCTNblXJADHXMPBIxKFVTi9Z ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi	MD5: a7f5d4eb6c8a4d7b8a7a714f16aa2c90 SHA1: 5fc7190281aa6b8d858acd5b5e4a5735025e706e SHA256: 6b34349ea1a79ae07ceaf46388685e2aa1bb97cb4067c74f5f5636f4b414bba8 SSDeep: 49152:T+OeOwR2aLl5M6dnhjfwuCpc0x9o5rgQAiluFs7s5Qj2trr8PCWFVPI:oOaTJvww0x96ruMZ7s562trr8LVQ ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.midwestsurinc_readme	MD5: bcb67154a16c088f4d9ac58e53684ff2 SHA1: 064668f57008c6e5d1bb4bae872877c19d38d27d SHA256: cca57fef213babfed6342192da41345225b370332867f53d0ae94b475423367f SSDeep: 24:aRijvGzquk09SJgTN8ogsEOpvLqWvvTzO1HC0Nk2MSzaXfBtEdGK1m:akjXuF9SCTNblXpDqWHTa1Ne0zaX/Evo ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml	MD5: 54569331374a0f193e6172c7d65eb93f SHA1: 41c24b6e2f58bfb13b89ff71f95e2f6ad6232a60 SHA256: e5677005122cf91857bbd0d7cfa73596ed0575db28d7d26e621e8e36515a1b55 SSDeep: 48:0k/4G7XX8Vww50rJlDJC9aW/cQ3Pf3ofb9+hOtMo:0k/4EXe50rJlNC9aWJ3C+hOtMo ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.midwestsurinc_readme	MD5: 78feb02d64d704b3448482ba752ba9b3 SHA1: 6caf32d1e4a9a60508c58e5b4aebab7e236a208a SHA256: edda8c557dec4589e57788c3849e88bc1973f76601441f236feaff3819dc6c5a SSDeep: 24:aRijvGzquk09SJgTN8ogsEOX7vLd9HsA0PlHc2s8ElEp635Ajrv3qtoqj0cr4lJq:akjXuF9SCTNblXX7DdCrIKL/qDj0cUXy ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab	MD5: 1c79746fe1cd89b9e3e977e80ff8c943 SHA1: f23acd2f4254a2755b6bb98710142c4d36b0c0f2 SHA256: 32bbffb78180999f29d82760135e90af1c76ed13bd673db033f44214ed38c718 SSDeep: 196608:JMUH4s3mR72UIcOyLujFuJHMHnill+Zg7xrG7Pj8AYSNejx3zM:iUH4s3KIczujIsHcsZ+xrG73QM ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.midwestsurinc_readme	MD5: 05a44227119bc6670761b464c81009a1 SHA1: 393ef104961f3d8e87612bf666e680f848abd2a5 SHA256: 3b416c5ac7dd5a3311a6b2a4f79ae7d44f8108acd5386d8884867a2c1a576a6d SSDeep: 24:aRijvGzquk09SJgTN8ogsEOsrvLYHPw/hMYDItcOx7zZKyZBixdRTGi:akjXuF9SCTNblXsrDYHPNZtXdaUi ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi	MD5: 4f05d8b965549a9d6c783c4b05b77a55 SHA1: 3c194355787087b3121ad3d252e6ea6f4f413666 SHA256: 9dd7af515616217232b28b0833a6dc515c940a6994bdee8d987c6cd292d3ae00 SSDeep: 12288:GMRLulcb/QnakGp7DP6woHBeLH3fIbeUBLrMoLw3WKspnTTOhcDoOqJjZKT1WXQH:GMRSug+e1Bs5UZ4oUCT2Fc1Wn2 ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.midwestsurinc_readme	MD5: db4e5e76f626017b3317709f43df7d93 SHA1: 52d4c243108ffb9d8ecf3e1fc342f96d87ba7b70 SHA256: 9aafe2eff6b0348f1cbfb9618ad6eaabe5f2e4587ceea2430c1989adb9de26e3 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOPODvLnMXGHHJMVK43JTGDmOSARPIzYffIv:akjXuF9SCTNblXPODDndJMzJqiOPVfgv ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml	MD5: fce5b8fdfadb3ee6150c927c3ad95050 SHA1: 4054db84a5221cd4f925b85c7b227aab8a27aad8 SHA256: 39dae4ce3f7cff4ab9373542ef250d55e3ef035ffde225f6738a19c7ad0ee234 SSDeep: 24:TkN3vyom2o05zZGHY1nH11rFEWq2Rkqd+KC5/rcSzvjPHx6gxeqI9LliXa:olx5zgHY1nR+MknKsAQvrRxxu ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.midwestsurinc_readme	MD5: 23a17813694c4d179343f7f2004c7930 SHA1: 6020b3fa9b587fb4e19dc21fdcae29048fcaa5cb SHA256: 549b32e30bbf05612f5feb006686b3fbb73f70606daac262830cc9d9131a796b SSDeep: 24:aRijvGzquk09SJgTN8ogsEOUnvLGaBKWPdhAP0782L7oPoDGjdUskttnOyACrfpF:akjXuF9SCTNblXUnDd8Q78EDGgrcQiSR ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab	MD5: ed1565d0312f9f53e0f433b9462e8cf8 SHA1: c63ec8f7e65e20ff5bc60172d5870408ab3bcd00 SHA256: f36fc6278c2cc25b55447e3f3d24ece5d5be78aa2530c49372065a73d8c79bb6 SSDeep: 196608:4OCTxdpRM/uODDCL0CDBDIUYuPpudA9lpWQxddnHd6slcm:WcDDyDBmmpuq9lgIddnHd6slcm ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.midwestsurinc_readme	MD5: cba7b1f492ae873673d8b8d3bfd28071 SHA1: f3a29c4341191ae98bca701022d4f5c93f1151a3 SHA256: 6a8c7176a6c057e47cd93dfd62d976c8da75bb8d8fc0ab47484ac1ced6966c1f SSDeep: 24:aRijvGzquk09SJgTN8ogsEOFvLDAdfmoA8t48/9RPjcE4zRbDgIt:akjXuF9SCTNblXFDw6W95jIzRN ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi	MD5: fd629dbaf47e6d1132bc803abf100462 SHA1: c41feb62626bbc0b121dcd0d2823ce25f2c48ca8 SHA256: 2158bb82f751e35b18043dd80a02137f585310c210c225df1e45c9a5c52adcde SSDeep: 24576:yjlOMkOyl6/VY652MlwtBjXTie9r55JwzCHzc:yJv0xMm8Q55J5o ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.midwestsurinc_readme	MD5: 3598ed2a096d373c93e8780f12e40903 SHA1: 234a322ab58ea064f63c3fce206e21ffa6f5b4ae SHA256: b908b7991d56d28584794ba2c3aa4b5b3d6d5a352d5f4762176deea38f1fc5ea SSDeep: 24:aRijvGzquk09SJgTN8ogsEORvLllAC2Yc3kfGw5sJlfOlX2OPYQ:akjXuF9SCTNblXRDYC2YcVyGC ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml	MD5: 6ddddc7e7b69ad40664f2deb08ed0a06 SHA1: 4fa25f2cad63f0d8f438c3fbdb2b4722fc32ff07 SHA256: 146d23ac6b9ddae8f3376ea8baaefc83aa6133f3778cbbdde40afbd011c0feb2 SSDeep: 24:+5c5Kmu9yNEj63I3rDwp5TPMJbYFxSzxKXUvK9GNSidvfAMSPnk4Cgs1BU:+qZiuI7sd82sFTvKqxVAMSPkdBE ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.midwestsurinc_readme	MD5: e5b9c178c2be372e95ce5b6dc7285f4b SHA1: 5a0b46ca7099107de34f8db075e9cf21ff2e24ae SHA256: 9e75b1e2939156854622abc2ac5b4f364cc2fc3f6ce1ea97b7d1a634a5b7e0c6 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOdvL1mEHDMVThw7EdpOU4h:akjXuF9SCTNblXdD1mO37E3Kh ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab	MD5: d639dde57b08852942e239cc2e4254e9 SHA1: 405721deb1672cd13f7206c8632065db455efaa6 SHA256: f56f590595b971d613539a633e51f507b4f654feaa04dfbf3b45b4d6b662a3dc SSDeep: 196608:Hlui/noRzH1QI0SpE4I/R8hBtCBlKccl0gNvWqudKi5OPKdan4xxGCGUaVIF4W:B/gzVp0SvI/RYBW4x1Z9s5tYCGUaVISW ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.midwestsurinc_readme	MD5: 9e22982dea464a118855fe8067d42819 SHA1: 5ab7f771bf11fd3d99d047ed4d9f024fab232f43 SHA256: 00de4bf2936f041156a4daecf5f79b376dd1bbfb5fd1093468ada8db3e8460aa SSDeep: 24:aRijvGzquk09SJgTN8ogsEOMz+vL7ui+p6sHC21S5rLU21Yh60TgveBVMg2S:akjXuF9SCTNblXMz+DyiiS8h60Etgl ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi	MD5: 6ae99ae781284e4026070681da409fe3 SHA1: ea4ed86573169f0f711465855480be86d6771474 SHA256: b136e01f6f9fce6abdc8b7439e65aa2947a159260fbabd598daeede854bf26b1 SSDeep: 24576:4grHB6m+6BmwuJy8ktlSNj7t/usWY5mGD:4grHBofwukWd7tmsWY5mGD ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.midwestsurinc_readme	MD5: 0223c32a70a9ba5bb83318383f35ab1c SHA1: afe30d61049f1809302a5ece01efb0e92e5894b8 SHA256: fb216a67c7903a410ac7624bf9444268ca9fa2f0fddd88681881c485f29b46d1 SSDeep: 24:aRijvGzquk09SJgTN8ogsEO0YrnvL9D+veDoul1k2ntyAe+OcF91ve18VdL:akjXuF9SCTNblX0snD9DbDZnyAe2xvDD ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml	MD5: df11145cda35773f046eac33646b682c SHA1: a328f7bebab0fc9475dd3e399ca923b5ac2d0adb SHA256: a141d991db0f9a7031c374d41e5737c0b4a41d4561bda745fee9ffb6894f57f2 SSDeep: 24:UO2FyYnGpEC7fp9AaRdajtMuoCjtKsCZJuQr5BsxrnkpeEn9j1w:r2FRnd4fp95shgCjtMarkMI9j1w ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.midwestsurinc_readme	MD5: f00cbe4c504f1c02c7d10d301cea732d SHA1: 09259f6af0d3ef0b145b7267ff8872d1430d4dd2 SHA256: fce5cce67c91de9f41a1ec0daafe0a7de4fd5ef1f24255becce00fbb2eaed1e7 SSDeep: 24:aRijvGzquk09SJgTN8ogsEObJmvLFkQABlGpP4L/slbnaF7+/SJmei0:akjXuF9SCTNblXbgDFMDiP4CzatqSJD ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi	MD5: 88ea40585d26f5249af269423301d081 SHA1: ca9895fb351205ce3789ee5dca025f8f77ab08af SHA256: e26f1e8f7901e6301981c9a125d78989c9d87975b43e118e0e42060ddf95931d SSDeep: 24576:LnSewC49NgSJV0rV4jlIG9Ed7xixECImrHn:LSen43ZJe54BIDdWE4H ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.midwestsurinc_readme	MD5: 2ff2e437d0eb6be2a1df4844974af370 SHA1: 179ad9c8764c422748c91caa358fedb0e1eee9df SHA256: 939483a8aa520c507d6c0767527b4d7e77372efe05c4822a746c6ef80876ce46 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOHm9vLF1q7AYrpat3F2er+wL10+5+VyCcyqn:akjXuF9SCTNblXYDF+AYNaJh0KbCFq ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml	MD5: 99fdc3b9b0ccac9e1bb735c539ce2423 SHA1: b124719e88df9c551f174cb5e9ebc34c6bf567f6 SHA256: 530beeddb9aaab3504a419f590f1ea9b5f1ea38f356383a29694d9d071d81aa0 SSDeep: 12:xRaJtThD69TMW/Wnei6KDehF9ofds+GRGoTq9SCLs6LFqNxG13aHQseqJzhTHrDL:3+sTMPvPsoyMZjFswPkNT+6 ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.midwestsurinc_readme	MD5: bdedd007b75cb4c224fcefea522b325e SHA1: 76e030c90b599e5b9ab33d2d95b7ac8351d744c2 SHA256: d4b9548b5af28a81f7c7ed59f0fdd127cc6f2e8d89b464ce629fa536d474d811 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOsrvLeeh33qpZ/qo1WmNp1c6ae71hBc3VnqZWJRF+W:akjXuF9SCTNblXaDfeE8Wmtc1e2FRF+W ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml	MD5: dc7f1b39954b5ccac4613dca7784920c SHA1: 3ed7302ca848cb714fe1c36e425ba7febdf7a7af SHA256: b561f87e61909da4ef5a13b92ba6fd9bb4b075f0d67a45dad269598b961089ee SSDeep: 96:gFbD+7WwZOFmrBKttnVBAVKiVQJJ4IgGdAQtLQY1hipVFoA3jkWCBoQWXs6oX5y3:gFbidsYrotZsRVMJFgGdTFQtwWCB6KA3 ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.midwestsurinc_readme	MD5: af58955af5ac557be06427573539c781 SHA1: 13544703868579c7c6592c3e511a7f8a3e70d5b8 SHA256: 85a9a9511ffb531b2b1f6405ad05bd2c2e652296f0a9711c556cc6c915c826cf SSDeep: 24:aRijvGzquk09SJgTN8ogsEOZvL9RubkXlBk83SgG1JTVDk3vdp25Fvv2eNQ:akjXuF9SCTNblXZDqkXX3Z+JTFk3vT+A ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab	MD5: 0460266e5f744ef4e717ec5647804d42 SHA1: 696e14f8780590c06373ef544731823acaf82507 SHA256: 22839fa25f658f2eb74c579bc3edc711fc65b8da6e418476efd97d1ff4bc60a7 SSDeep: 49152:OQOQS1i8Twq0BwqL3Tzv398eFTXRBKo+Xtr92ZsqyudUH780vQmHSrEIdqAyyQCI:OQJSjwrNDzvN1JBBWdr9Us7KUH78o9y+ ImpHash: -	Access, Create, Delete, Read, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.midwestsurinc_readme	MD5: 577f6b284f09a9105224b38240d9f0bc SHA1: 3cbde487bd6e27a58aeb87a3fca8b6546a0b266d SHA256: 90881f8a5444ea431face2349dc1573dd1f163f70eb992b2280d9a1efc131ea7 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOfvLaVowr19gDDu049V35GR4+XTsdONmirBgT9yGJL:akjXuF9SCTNblXfDQrTgm9VkvXTHcir0 ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi	MD5: 8d01271b95bf5b4a5ae41fa8863f0dfd SHA1: 7ae5fa9073f3e0920d633976ce3234bf9a0dd11d SHA256: d656ca4a55ca4a28f527be264f1953a59346ebd4211f8ddf2c793fea5b58b829 SSDeep: 24576:0UGL84Rd1bo3zFfzpa1jK7Rc+At5OfKbhm41f:4RdSDHap5RASbhm4d ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.midwestsurinc_readme	MD5: 655a665186668318b9544dab54ca7af5 SHA1: 02b413efe48f90aa601d8d4518e81f66f546d038 SHA256: de718e864acadc9a52865a0abddabef28e1372ccb5572dff82c384543e33e430 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOjLvL16QfJFg8q3M4qWX4t7g53GVzY/4+:akjXuF9SCTNblXjLDAQfHhqMJWXOK3z ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml	MD5: f0bca06ce4784d70fd4b041ee06a056b SHA1: 1b05f41a448e96d8e8b5cd5a2bfa69b41ff77ed0 SHA256: 1a385331551ceda475ba45e6a1be1316c93c39447647661d039c18669f2898c0 SSDeep: 24:z/sNE2ypQUVEVJxRq+SiuYJeEq7gt/meA9EP6y3nnwYh00Tu:7UE2ypQUVmxMzxwa7gcegEyuwYhNu ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.midwestsurinc_readme	MD5: 60f25e369e21855374ef4dbf1a69b274 SHA1: 19ad4b20cc136f3a6a567434e8d25bead4c26930 SHA256: 3ddf18eaf8460e1e1edf2983680348368f52c9e5a3bc4be0d6c1a7ef2b916920 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOlDvLn6Je7kgsNXCNhT1gIhyC2BCZ9PQdQ+QDt:akjXuF9SCTNblXdD2ePsNXC/51ybcZ9P ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml	MD5: a22c27ebdcff583ebc5f77a719e8186c SHA1: 8ec669c076dd97d386ee49d84c6076c87217b86a SHA256: 1181d807a514c2a1bf72165684801650a9c5a1acfd24712d15928e559cbcc8db SSDeep: 48:gvSfpSd6fVavERorbaG4kF0JMy3x88J5TJz1RgQuokZJR5NpdK02rbd:gIpSo9honaG4kF0x88nVzjMzj7dArbd ImpHash: -	Access, Create, Delete, Read, Write	Modified File	Unknown
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.midwestsurinc_readme	MD5: ae964b0d7aacc25cf7b34085af8c7e21 SHA1: 55538643eee1181544f6c9767e8ce67eff6eadd4 SHA256: cc5b4ff332392d359a99b870542e02653631901358f16f56b3ebbddc7b5b2ad9 SSDeep: 24:aRijvGzquk09SJgTN8ogsEOdgvLhEEx69jiKvTbeyyVB8z2fQwGQ9SfkMT734HQH:akjXuF9SCTNblXCDkRLyyu8z2fTh9SfD ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\Users\5P5NRG~1\AppData\Local\Temp\Sey7C50.tmp	MD5: e028c8417dd1f4a1bbebe990687f60be SHA1: 735a00747091318bb37e2a99495d7d2d329eeddc SHA256: ad1745fb0662b3217f3d8e591fc3476278766709a185b43bdea26c966071a6c3 SSDeep: 3:pMCMj:3Mj ImpHash: -	Access, Create, Write	Dropped File	Unknown
C:\Windows\TEMP\2cgDD4F.tmp	MD5: 9a042997fea2f144df904de527694e58 SHA1: bebffe9adc332738333887230f1eec81ce8742ab SHA256: f95584715df74f908b483323d278e9573e5b75adf0dd5d848859e849ebcdbcf7 SSDeep: 3:cMLH6+W4RKGzUTTFk3QWWALV2RHIZJVFBX/:cMj6b4RvzI9WHLoRo3VFBX/ ImpHash: -	Access, Create, Delete	Dropped File	Unknown
C:\Windows\TEMP\7dBF1E.tmp	MD5: 58f0b5925675e4be77420b9d29c24c04 SHA1: e728cd694a3fee1e04e0124e86da05d7db5c1c54 SHA256: 1e81e0f55d5da3c062050676bb452f68b5c4cc944fddedebad1bfdb180e483b5 SSDeep: 3:qiTmJh1k5RAkSZv:7wh+5mfR ImpHash: -	Access, Create, Delete	Dropped File	Unknown
C:\Windows\TEMP\ND6D7.tmp	MD5: fda9ff56c54a8234b5a8c49ae942aef0 SHA1: 239ebab32cb8f79a5ffb3f06cb6bdaaea40eef94 SHA256: 216a641af323ca047cc10c8660829e4ea4f9c29740c156ecc3871bcff884a4ff SSDeep: 3:qiJhXcsR5RAkSZv:j5mfR ImpHash: -	Access, Create, Delete	Dropped File	Unknown
C:\Windows\TEMP\bUC66F.tmp	MD5: a6ba8e0370f83b101efaead1ffe56ba3 SHA1: 52aa83c47c570d7df33575bfc06a161dd91cbb73 SHA256: b28fa7dfe5b277f9056c095bf93d5545b1c29c3766189fbce791520244f2e62e SSDeep: 3:cPGKhARtucmJhpozzlLq3QRtt7hX4an:oGKWbTwhp4oAbt6a ImpHash: -	Access, Create, Delete, Read	Dropped File	Unknown
C:\Windows\TEMP\eADBD.tmp	MD5: 605866a66fd890d4efa389a56fb183a4 SHA1: a367e27150a9a1902d7bbd65e63f683fe45f8f61 SHA256: 96dfbfffa039f5f9bce909a750cc90d5b1d1b4ccc4a515b2687a10c89f234047 SSDeep: 3:cPGKhARtucmJhpov:oGKWbTwhpy ImpHash: -	Access, Create, Delete, Read	Dropped File	Unknown
C:\Windows\TEMP\p43ADCE.tmp	MD5: 44ab1155051f70b414b12b027f92fce8 SHA1: 83cf1732eb1c826953880ef2f800409b00f20818 SHA256: ba00146ddfc63902906c6fe74901c94ae285a832ac095aeaa07857dedda55ea4 SSDeep: 3:qiTmJhGqIA5RAkSZv:7whGzA5mfR ImpHash: -	Access, Create, Delete	Dropped File	Unknown
C:\Windows\TEMP\vDD4E.tmp	MD5: 48dc487b4efeae7397cf3de8ad52b857 SHA1: c02eaa43c144a37abc36f11bde2400c80ad26bb0 SHA256: 5d12da043c8ef4de78510423075ad0f5761bdcb474a3acef5db643f1246616a4 SSDeep: 6:oGKWbTwhpdBMW+hFa5urYs0D5FFW3vyQuvskEcNIov:oWfw7d5Pu0vD5FFW3vyQu0kdIy ImpHash: -	Access, Create, Delete, Read	Dropped File	Unknown
C:\Users\5P5NRG~1\AppData\Roaming\Dp1UhjpLO	MD5: d41d8cd98f00b204e9800998ecf8427e SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SSDeep: 3:: ImpHash: -	Access, Create, Delete, Read, Write		Not Queried
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe:0	MD5: e8892a34670a85b9f8caf901d32fef38 SHA1: c4e83cfbfb60f384c76df0852fe2717505edc0e3 SHA256: 8ae54ac3a03872601a3b55ea4f4ab3b90bbb433b4c0b69b70e1a517d9b48e5f3 SSDeep: 3072:nuIOlFBEND9fxxSaR8M70EvQjMd7wEJHJmzc+R:nuI8BAmaKREoqwEBs4+R ImpHash: f34d5f2d4577ed6d9ceec516c1f5a744	Access, Create, Write	Dropped File	Whitelisted
C:\Windows\System32\vds.exe:0	MD5: 8d6b481601d01a456e75c3210f1830be SHA1: 3b513b3cf3ed7b5bc248403a87d0ab9322af8213 SHA256: a2cef483f4231367138eef7e67fd5be5364fc0780c44ca1368e36ce4aa3d0633 SSDeep: 6144:90SOYMTqQO5m4UTGbwL9raZzbIGneJi+v7Ye1RSQSNvMP69D/q:eP0xvMgzNciyYe1EQSNvoU/ ImpHash: 6837a7cff1dc2cc5f03975b3caeaaa7c	Access, Create, Write	Dropped File	Whitelisted
C:\$Recycle.Bin	-	Access		Not Available
C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000	-	Access		Not Available
C:\Boot	-	Access		Not Available
C:\Boot\BCD	-	Access		Not Available
C:\Boot\BCD.LOG	-	Access		Not Available
C:\Boot\BCD.LOG1	-	Access		Not Available
C:\Boot\BCD.LOG2	-	Access		Not Available
C:\Boot\BOOTSTAT.DAT	-	Access		Not Available
C:\Boot\Fonts	-	Access		Not Available
C:\Boot\Fonts\chs_boot.ttf	-	Access		Not Available
C:\Boot\Fonts\cht_boot.ttf	-	Access		Not Available
C:\Boot\Fonts\jpn_boot.ttf	-	Access		Not Available
C:\Boot\Fonts\kor_boot.ttf	-	Access		Not Available
C:\Boot\Fonts\wgl4_boot.ttf	-	Access		Not Available
C:\Boot\cs-CZ	-	Access		Not Available
C:\Boot\cs-CZ\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\da-DK	-	Access		Not Available
C:\Boot\da-DK\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\de-DE	-	Access		Not Available
C:\Boot\de-DE\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\el-GR	-	Access		Not Available
C:\Boot\el-GR\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\en-US	-	Access		Not Available
C:\Boot\en-US\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\en-US\memtest.exe.mui	-	Access		Not Available
C:\Boot\es-ES	-	Access		Not Available
C:\Boot\es-ES\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\fi-FI	-	Access		Not Available
C:\Boot\fi-FI\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\fr-FR	-	Access		Not Available
C:\Boot\fr-FR\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\hu-HU	-	Access		Not Available
C:\Boot\hu-HU\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\it-IT	-	Access		Not Available
C:\Boot\it-IT\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\ja-JP	-	Access		Not Available
C:\Boot\ja-JP\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\ko-KR	-	Access		Not Available
C:\Boot\ko-KR\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\nb-NO	-	Access		Not Available
C:\Boot\nb-NO\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\nl-NL	-	Access		Not Available
C:\Boot\nl-NL\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\pl-PL	-	Access		Not Available
C:\Boot\pl-PL\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\pt-BR	-	Access		Not Available
C:\Boot\pt-BR\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\pt-PT	-	Access		Not Available
C:\Boot\pt-PT\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\ru-RU	-	Access		Not Available
C:\Boot\ru-RU\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\sv-SE	-	Access		Not Available
C:\Boot\sv-SE\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\tr-TR	-	Access		Not Available
C:\Boot\tr-TR\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\zh-CN	-	Access		Not Available
C:\Boot\zh-CN\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\zh-HK	-	Access		Not Available
C:\Boot\zh-HK\bootmgr.exe.mui	-	Access		Not Available
C:\Boot\zh-TW	-	Access		Not Available
C:\Boot\zh-TW\bootmgr.exe.mui	-	Access		Not Available
C:\Config.Msi	-	Access		Not Available
C:\Documents and Settings	-	Access		Not Available
C:\MSOCache	-	Access		Not Available
C:\MSOCache\All Users	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en	-	Access		Not Available
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es	-	Access		Not Available
C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab	-	Access, Read, Write		Not Available
C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us	-	Access		Not Available
C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C	-	Access		Not Available
C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C	-	Access		Not Available
C:\PerfLogs	-	Access		Not Available
C:\PerfLogs\Admin	-	Access		Not Available
C:\Program Files	-	Access		Not Available
C:\Program Files (x86)	-	Access		Not Available
C:\Program Files (x86)\Adobe	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Esl	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHT	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CZE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DAN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\DEU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ENU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ESP	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\EUQ	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\FRA	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HRV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\HUN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\ITA	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\JPN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\KOR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NLD	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\NOR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\POL	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\PTB	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUM	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\RUS	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SKY	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SLV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SUO	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\SVE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\TUR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\UKR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Javascripts	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\JPN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\KOR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NLD	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\NOR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\POL	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\PTB	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUM	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\RUS	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SKY	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SLV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SUO	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\SVE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\TUR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\UKR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hr_HR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hr_HR\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hu_HU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hu_HU\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\it_IT	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\it_IT\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ko_KR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ko_KR\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nb_NO	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nb_NO\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pl_PL	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pl_PL\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pt_BR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pt_BR\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ru_RU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ru_RU\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sl_SI	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sl_SI\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_TW	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_TW\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\SPPlugins	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\prc	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CAT	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHS	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CHT	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CZE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DAN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\DEU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ESP	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\EUQ	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\FRA	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HRV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\HUN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ITA	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\JPN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\KOR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NLD	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\NOR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\POL	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\PTB	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUM	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\RUS	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SKY	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SLV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SUO	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\SVE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\TUR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\UKR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_CZE	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_HRV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_HUN	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_POL	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_RUM	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_RUS	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_SKY	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_SLV	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_TUR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP_UKR	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\PFM	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\Providers	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\SaslPrep	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files	-	Access		Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}	-	Access		Not Available
C:\Program Files (x86)\Common Files	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\ARM	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ca_ES	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\cs_CZ	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\da_DK	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\de_DE	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\en_US	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\es_ES	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\eu_ES	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\fi_FI	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\fr_FR	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\hr_HR	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\hu_HU	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\it_IT	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ja_JP	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ko_KR	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\nb_NO	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\nl_NL	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\pl_PL	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\pt_BR	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ro_RO	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ru_RU	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sk_SK	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sl_SI	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\sv_SE	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\tr_TR	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\uk_UA	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\zh_CN	-	Access		Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\zh_TW	-	Access		Not Available
C:\Program Files (x86)\Common Files\Java	-	Access		Not Available
C:\Program Files (x86)\Common Files\Java\Java Update	-	Access		Not Available
C:\Program Files (x86)\Common Files\Services	-	Access		Not Available
C:\Program Files (x86)\Common Files\SpeechEngines	-	Access		Not Available
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft	-	Access		Not Available
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20	-	Access		Not Available
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk	-	Access		Not Available
C:\Program Files (x86)\Common Files\System	-	Access		Not Available
C:\Program Files (x86)\Common Files\System\Ole DB	-	Access		Not Available
C:\Program Files (x86)\Common Files\System\Ole DB\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\System\ado	-	Access		Not Available
C:\Program Files (x86)\Common Files\System\ado\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\System\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\System\msadc	-	Access		Not Available
C:\Program Files (x86)\Common Files\System\msadc\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\DAO	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1028	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1031	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1033	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1036	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1040	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1041	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1042	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1046	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\1049	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\2052	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Help\3082	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\MSEnv	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\MSInfo	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Portal	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Stationery	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\TextConv	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Triedit	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VBA	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VC	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VC\amd64	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VGX	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTO	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\ink	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization	-	Access		Not Available
C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US	-	Access		Not Available
C:\Program Files (x86)\Google	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Extensions	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Installer	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\Locales	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\VisualElements	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\WidevineCdm\_platform_specific\win_x64	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\default_apps	-	Access		Not Available
C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics	-	Access		Not Available
C:\Program Files (x86)\Google\CrashReports	-	Access		Not Available
C:\Program Files (x86)\Internet Explorer	-	Access		Not Available
C:\Program Files (x86)\Internet Explorer\SIGNUP	-	Access		Not Available
C:\Program Files (x86)\Internet Explorer\en-US	-	Access		Not Available
C:\Program Files (x86)\Java	-	Access		Not Available
C:\Program Files (x86)\Java\jre7	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\bin	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\bin\client	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\bin\dtplugin	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\bin\plugin2	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\applet	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\cmm	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\deploy	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\deploy\jqs	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\ext	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\fonts	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\i386	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\images	-	Access		Not Available
C:\Program Files (x86)\Java\jre7\lib\images\cursors	-	Access		Not Available
For performance reasons, the remaining 970 entries are omitted. The remaining entries can be found in ioc_export.txt or ioc_export.json .

Registry (61)

»

Registry Key Name	Operations
	Access, Create
HKEY_CURRENT_USER	Access
HKEY_CURRENT_USER\Software	Access
HKEY_CURRENT_USER\Software\Classes	Access
HKEY_CURRENT_USER\Software\Classes\MSCFile	Access, Delete
HKEY_CURRENT_USER\Software\Classes\MSCFile\shell\open\command	Access, Create, Write
HKEY_CURRENT_USER\Software\Microsoft	Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor	Access
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun	Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar	Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor	Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion	Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck	Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions	Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar	Access, Read
HKEY_CURRENT_USER\Software\Microsoft\Windows	Access
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion	Access
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer	Access
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders	Access
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData	Access, Read
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System	Access
HKEY_LOCAL_MACHINE	Access
HKEY_LOCAL_MACHINE\SOFTWARE	Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft	Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows	Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion	Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies	Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin	Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDesktop	Access, Read
HKEY_LOCAL_MACHINE\SYSTEM	Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet	Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\DependOnService	Access, Read, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\DependOnService	Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ImagePath	Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ImagePath	Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ObjectName	Access, Read, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ObjectName	Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\RequiredPrivileges	Access, Read, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\RequiredPrivileges	Access, Write
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services	Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver	Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver\DependOnService	Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver\ObjectName	Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver\RequiredPrivileges	Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor	Access
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun	Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\CompletionChar	Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DefaultColor	Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DelayedExpansion	Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DisableUNCCheck	Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\EnableExtensions	Access, Read
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\PathCompletionChar	Access, Read
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient	Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters	Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\DNSLookupOrder	Access, Read
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\DhcpDomain	Access, Read
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\DhcpSearchList	Access, Read
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Domain	Access, Read
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\SearchList	Access, Read

Mutex (4)

»

Mutex Name	Operations
	Access
Global\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E}	Access
{Global\{-D2A8-E443--570-7-F5B2-D923-}	Access
{{16E1D10-D-C0-32-9-739--65D6-A4AD8A8}	Access

IP (1)

»

IP	Protocols	Sources
192.168.0.1	DNS, UDP	Function Log, PCAP

Remarks (1/1)

Indicators

Before

After