e935f391...18df | IOCs
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Ransomware
Threat Names:
Gen:Variant.Razy.682861

ned2.ps1

PowerShell Script

Created 4 years ago

...

Remarks (1/1)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "15 minutes" to "2 minutes, 30 seconds" to reveal dormant functionality.

Indicators

File (3445)
»
Filename Hash Operations Category Severity
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ned2.ps1 MD5: 8db19e8d2a28ef2eadaee68fa47a285d
SHA1: def81f3ad1cec4bbf86a2e8aa23233039cf97ec2
SHA256: e935f3917b5c33eda4fec9dccfce78564bf7979fe36685825ccd5a03de8c18df
SSDeep: 12288:lnMyXUbVDde1sG0ggHcpjKKhz3M1pLu4xs7JfimAlYYhskb+2VsOL3xI2FAoCmuG:I
ImpHash: - 		Access, Read Sample File
Malicious
C:\Program Files (x86)\MSBuild\2F9B60-Readme.txt MD5: 6d4bf814739286517c1614265930fdbb
SHA1: 0caf1dc282f872b211d8b4efadd00808d04776de
SHA256: 4a4f3676287548d525d9f41de8ef2a0c197360037c748d8d8a0b613be8d40692
SSDeep: 48:Hg9yXNOrVu+IcxEC9GstgN+32WGk2BccQCQXJEAaFsdx61U0Hv1x:A9yXNuVtIvC9Gt83rwBccQCMi1sIU0P7
ImpHash: - 		Access, Create, Read, Write Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\c0a7ec20eac.2f9b60 MD5: 0b2861edb7cc6c1d259d93889b9fb60d
SHA1: 081f56fe368ff2401a871d0a7ab1902e2958e51f
SHA256: 52943ea9eca20b60999bbcf857ff8318fc1931859029d428d74adcd167a52396
SSDeep: 192:jkEoKyoALsg+64Lg+AIKX/79bJdEnW6WgummOJ21pOZC:jkEoK9AL7g0L79brE/J+gC
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\c0ac7e21ae07.2f9b60 MD5: 36bc4fe814873e4f2f4be78498732c70
SHA1: 8678b126b319481415361a341e0de4782d791b68
SHA256: e49d2847aea7b450dcee57cc800680d73dc916699a1bd5a74e286f0ce78129f0
SSDeep: 768:g//sldXLaNJpi/+hBCRtHxgOeM98GMg0PCXzo1MhD7XuxD0w2+:gnsuNJpicBWtRz6so1MhD7exD0w2+
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\c1a466af081e.2f9b60 MD5: 99f0153d446aba0645efb3c252d36104
SHA1: f20f9dfcbd769401a0a5e2644cf3741465babf27
SHA256: 849c30fe3bb3f5f5271eb901d59efe977db690de6461eec2ede30163931e7ce6
SSDeep: 48:5NAJr2MA0Gqq+cfdh2Rj36TeGyVwAHiqeRz9CI6Do3lZWIvfH16woJERx6bcYEXs:5VMA0Hq+TbgA+qeB9CHcVtvDmERxK8bG
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\cc933e45010c.2f9b60 MD5: 592c5d9a70dad334bcc7eb7dfba97cbd
SHA1: c98980d10a211495b3676b016e0ccbb99b3d7ecd
SHA256: 57094c8b09fa0165dabd5e29a9b4ba74af4fb7e6c8ba79b99fe5671623f08eee
SSDeep: 192:jRjT8t15L2abLi+rioegTEm+ocATjNliuLfgITyuup+:jRPbki+rYgEm+hATjyif7yuuU
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\cec6b8cbd9a1.2f9b60 MD5: 55e26c318abee1f1e4cde197591adae6
SHA1: 57e7f7b90cea9d039cfff2ebaa49a4cb48fad0bd
SHA256: cd1658e7f2816bcf27fd72d697917e4d67b3986008cd4514f2173a69788c1436
SSDeep: 192:+DFYqqIJ40PIfSrggtpvMi0u1AosNyCpP4wIm:+DF+S40OSkGpvj1AtNyCp9Im
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\d2cadce0edab.2f9b60 MD5: dc569aa92a260d0cd401d1e9adf2a487
SHA1: fd04d082e57e4bfddb51a0161147f4cfb22655dc
SHA256: 07ee386d3d634855900b7257ce16433d429b3fd45819050c1029d5b6803eb78c
SSDeep: 24:uq0ILZcQMx6jqwFz/BBUJDZkTkwL3MeqnOYpSi7sCBiA0a8kOaQWVYCwSpkax3l:dt9ZBsP7Si7sE09kMdCwbY3l
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\d82a56eaea3d.2f9b60 MD5: f45c7dd6cc99d3a9e583b480b38306eb
SHA1: f94cb228bf503600b6b9744b49e9f4805d2f7cec
SHA256: 0f8fe99e0c617f764588e1c47f0ec73aa5b36d3cb42ed122c2f6dc0513ab1b5a
SSDeep: 48:HA7GZ6FD0eAtLy0N+Xgs231dkaqc1UwmCepHQBr0KMhRozJt5jLpLfmlQNsoB3OO:HAaZ0qt0wqc1U3HUgKM7ozJt5ZfSQNGO
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ec48154fc892.2f9b60 MD5: b703fc6bef7683612ac049501cd99b99
SHA1: 9927c48a69ce211ce1d6bcddabf7448e08837717
SHA256: e8b571c32d6bbf2f6b090dcf39f8c1c8de8fc5bbb67dda6342b89c8d9210d87f
SSDeep: 192:ppy+1v0cPRH90zTyHmLWSaRbiXVk/1/zanm:mY790vYmqRbiXVIt
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ee1b1d194319.2f9b60 MD5: c74f90d6eaa6ffb1d20294d1b67ab855
SHA1: 374abec5f84c56f43a0b0a8dc09a210556b05bfd
SHA256: 185da238aee6ca74bed4bb0504c583676e20a29f595fbaa5bd7a6d12666094cb
SSDeep: 96:n2DKDQAmVo0Y2tyenCQTEEJTgYFT2FcJSomMFCC8+7LEQgvGZ2NbkznmH:uK0Jo0p7TEwAuSotCC8AY6eYzmH
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\f10331344f3c.2f9b60 MD5: 709b3459ba78c4a684b65465337219b9
SHA1: f390f6b096bdc62a1b131810ae2c70f6f07d5497
SHA256: 70a3920ed30cf60e105703aec1d4a14310084af025bf5991ef0fe78976238021
SSDeep: 96:e98VPS/ILhviJm1A0A75gxnd11oUtuAsSuKdVHw2k/wn4P8LaAxfJ:e98Vokem11A7y3TafKdVHw2kg4oaMx
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\f51d7c94988f.2f9b60 MD5: aa36b0428f442d247c9586308c672234
SHA1: d48348ba56e3902ec1f4717b055f2287e2f3eee8
SHA256: c2fcd9a2725a4094118f993f2f11f21ad5ef00e0a215fcd3e5efdb53f84d32f7
SSDeep: 384:hr7x4m2fJIe82qvWsxL1xAlKAb1MbM5rPZ24+ajx359EgBSBUmEnAw07SSs8g:cmOIeIxwlRbKWPA4+8xp9RSB2n40
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\f961f883a909.2f9b60 MD5: 75fe01a33d5b491b481632e35468d4cb
SHA1: c8a36a38e0fa2aa1a32eec5afc542776620830d7
SHA256: e990f4314abdc756ef72a70ffc5e28be5a0f558ae49718d199c5d50aad8fa72a
SSDeep: 96:/AoJFEx3GATpS4x+bYS282D8FQnu881+jczRZD6ax+ZpGvvkwwnD7ocCl8s1P1:/AmEh9Fl55D8Fm5cd8ZikjkWs1d
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\fb53d7dffdc1.2f9b60 MD5: df950887ac148880a3e38a27e0043726
SHA1: d2d712a8381e4630861784ca7b130f5be05b4ee3
SHA256: ac930c15d5cf92299a8c5d5b574f34d9d88981eeb93856a2547d443315e576ed
SSDeep: 96:RKiKaHyiSFiY5mvXxFdVth2P/9LIrzfkoILPA:RPLHyiSVA/2P/90rzMo2PA
ImpHash: - 		Access, Read Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\fe91a3562d1c.2f9b60 MD5: 83be148ac6e068e07ed1b2e36a7b8eb6
SHA1: af1aace56a272c0ce2a157a9ff9d8fa20cf57c93
SHA256: 64edd6db89a4007a0cb8586a4e148368f740396b0403c00bb0e0f82f53062a58
SSDeep: 96:T1xsp9TlcyLe2uyX2qZld10gjKKUuL1bktjg6XrGIZjSF7jqJvHtTIK9zpWJrpY6:T/s/lRlmqZlD0EauiVg6tsSvtU4p18
ImpHash: - 		Access, Read Dropped File
Unknown
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_AssetId.H1W MD5: 951a61306438f77c456ce6f384d3dd96
SHA1: 05c9d175853cad9f324a6afcf144ec04e8ed0410
SHA256: 42e1aaa1e4c99ed862c03a6e11fac9cb39db4c6181bab9284c8291bd8285f7d6
SSDeep: 1536:FJSjxxEiStCX2m8AJ5SfHF6BezlLw++Z6I8IChyeJQopCqsE92/bSi014lxr9IcX:GGUkpzYREiKWx6RibiESYad/A51G6t
ImpHash: - 		Access Modified File
Unknown
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ENVELOPR.DLL.trx_dll MD5: 676a1fd09c0523b1882f33623106cfba
SHA1: b852fb541650b780bb523ea086494dd7d153b09c
SHA256: 84f5150421cb016c73cf67e5ccb5998bd121624b480dfc4507aa019f71d6757d
SSDeep: 384:lN3C5TQKIe5XrlXqY379z78uaEiaMlcYqy8a9krA6:33C5VphXqG7VrpiaGc
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MOR6INT.REST.trx_dll MD5: 25a0e38d27f2184b855d9d4427331885
SHA1: 0b739aaf845d7fca177df6fb3277f3c4af0b70bd
SHA256: 4d799bf5ed018ad12bc893e4733927ce17503e431590c3376c4aa6a2422b5250
SSDeep: 768:Ae/ACfef5yA4DTt3t37NBC4msgNthtLFf+/xSoYK/kLah+0iMi2jXHU+h:AeYiejeYlfboYK+0V9rHUo
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OMSINTL.DLL.trx_dll MD5: 83966ad6ffaa238284c818be651b2eb7
SHA1: e28085665c570cb1121f856dca64072fc083dc42
SHA256: d1c2756a0abb2ed57cb68977519781dc6f60bb528c8621323d409199e567222c
SSDeep: 768:6vhLuJyasnVg2012Ap8UDoaOlTNv5auatly2AXskFaT+KlVPnn2nU3UPQCVzTJ0a:6vhyJyasVgN12ApXM7vN1aIco1G9rHUv
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.DLL.trx_dll MD5: 8447cb7a7e60f815cbccf74dfa8aaa31
SHA1: f8c38ee065094987c99a766ea70a615ef842b54b
SHA256: a497ddac3d6799f6ce6f103dde60edc5b45901b31c6167fb7502026f911ae70e
SSDeep: 768:KqNykgEXkFM+RuJL24y6/qnLYFU4GOLMi2jpvnv:Kqp3CF87y6/qYK4HY95nv
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLWVW.DLL.trx_dll MD5: a78efebee507e087671383b8d606b42b
SHA1: a0308385db9137d63ead461b9ac44a7f83e2710a
SHA256: 5b047880190a7014b67dc4d6ba9fb347890249cc01905a66a7a7ba3fb38bcc1e
SSDeep: 192:xHXkSTaN6KF3ZE2gPjTo/lu+d3A42l28vMIc4SYGAVbeZ+m4/RFWlM4MMOrE3K2o:xHXkWa3F3ZE3Yc++lLvlcLT+FWGt0Xqp
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\SGRES.DLL.trx_dll MD5: a260a3ded9e92dccdfc89976c33868f7
SHA1: 04a20db0115c0a1095a8fad41a41e3ed0c7e7b06
SHA256: 28d492ebf32bec585cd374f744398c61a3f5644faec5419d9e717a77bcebba8b
SSDeep: 192:TB1uDVXZiJNbCuIA5ROaw3VsMDqLxKFSARPtjF1s2RgXb0Ph7GnYhO1bgSkgFqXo:d1qXZijBRO+SqF8hmLoPAnYPSLWhmWO
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ENVELOPR.DLL.trx_dll MD5: 333338900ea202150b25baa315a728c1
SHA1: 1c548021a70fcc2cac7557ec47e1bacf3db34dab
SHA256: c19d1b6e8385ba318e4dd93f7987c4a2d5f489c0cb8522842fb075ba49014f9d
SSDeep: 384:ph9QgfqOM5bBlx2i/c9FScbz9BRTeXjrYlpaIlcZnv:pXQCabBlx2QOnLgjrwpaIOFv
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\Winre.wim MD5: aa7797b506a163504157b9dbcba7b562
SHA1: 9005950f1ad25a9bea39df3aed6378418ac9affa
SHA256: 8b56868743ee911366f273cbf98269893b4b4a7960afd123dddabcbb88b24f12
SSDeep: 196608:7QbHCwJ1oXgdL+PUl6xqojQRljrffo1feRTC+JO7MAVgqBpiTGWs:7UCwJ18yL+cl6ZjeljrffowRxMMGciWs
ImpHash: - 		Access, Read, Write Modified File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\himmqugh.0.cs MD5: 4e38f1613da93333cd2d6e3a47bbf6f2
SHA1: 074b882b20a68193f5d8dcd1a47e346bb3a36d2a
SHA256: 964e6e4e91551cc76640386988111013ddbabbe1f4c98240ac78668e8be731a3
SSDeep: 96:JoglZNIo3nmC3n+LybtzuPU8YuI4IyJkEEVZfdx0L+FdqjMuYK/siCQ6NtMc2MWH:9L38VXqkklffhigOXyjLkEGZnIdV8b
ImpHash: - 		Access, Create, Delete, Write Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\yhwog0u-.0.cs MD5: 4e28262268135106371c3059abd5824e
SHA1: 5500e9902346dcf8ab6c2a86fb6c090471f6870c
SHA256: e09ab1facef869d2af7f52911bb5be2479ab3daccab76cce5582d4884e9ec949
SSDeep: 48:JjRmrzzQW+DMEbH4yxt1855tnfBB+H2+rcyshCES0wO5:JjcrXQsoq5JD43cJhoBC
ImpHash: - 		Access, Create, Delete, Write Dropped File
Unknown
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\yhwog0u-.out MD5: 5f28278d79e778ec88fa979592a48b56
SHA1: de757de1ee89299daf27a642ee1176cf52125a56
SHA256: 7f5344f61ec2227efbff4c5b4d1b92cdd787b602fcd756cacfcbb085976f37d8
SSDeep: 6:IM7mLAwmPwRhMuAu+H2LvFJDdq++bDdqBnUTk4aJ23fEmGsSAE2NUTk4aJ23f1ry:xKNzR37LvMTaMcnPAE2OTaMN+
ImpHash: - 		Access, Create, Delete, Write Dropped File
Unknown
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\c0b989440e43.2f9b60 MD5: 5fa20ec9a5f220e64f06f122deb40910
SHA1: cb81e17ea3eba7dc3b59ec761dca8dee4e4f71ff
SHA256: bf9b9b0d4cd64bbb9141f300304978b847a9d2085e86295eef88113ccbd00ffe
SSDeep: 192:QSKqIv/rdRokXCzufC/w7sAAL5rXYe7o0OsYbWtu:PKqIxekGI7s7L5roe7ogZo
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\c2c09d4a02a0.2f9b60 MD5: 14370ddd9d64604892288e299464e8f6
SHA1: 1735e855e332f075d705d5a44a90c04e0e266695
SHA256: 0663e837b6b4cd83db58bbdd129ae908b984685e3d5db378a3910490212a0bbb
SSDeep: 192:7akfohhuvmZ4IAp3rZpx2pbxPhPuNZpRlcoWM7:7akfkuuNARdpx2rhCZrG1M7
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\d0bb1f55c3e3.2f9b60 MD5: 9aef809c1e3606f041446e42001e49e6
SHA1: 2a79a21816b075d9fba3a5220789842bbe2a09cb
SHA256: e5e9d5f98900a94ca163ef49d6393d747d54bdaef7a32f2841c77b1cf6909812
SSDeep: 48:jr8mg9T5bKlcd9Z+Yi+gvFECMfGtm60FmH3h4UG/b9ni:38mg9Fes+Yi1FECMfv9mX6UT
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\df2e819951a7.2f9b60 MD5: ef71cc146b52a05b703bba869544b233
SHA1: 07b227c9193e8fdb1c0bcc8a83f03743bc0d56de
SHA256: a19eb994feef8bb216e01a26c1208edf4b8ac91250875c483ef5b5e108ac04ef
SSDeep: 768:B7qgvWCuccB8EkupnJ5mD+XQ4DYzHFyp/VDneHQ4wS5PLCAT9xZBV0UcQ9ZAiTfe:Rq1CuccBpku7XCKG62wNL//
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\e20c5eba722c.2f9b60 MD5: 6999cf99ddae9074f7bd0d12f44d6ee1
SHA1: b5dbed2cab76c8223ea9130d0c48a96fde28b162
SHA256: 32ed5d8a4f6d952ad4daafe754d3d8aa9999430b2351745d82ad7d8e02333eda
SSDeep: 96:LkQzDoeF3Wg4+gShgs4hENU9DtudGT4kLtMR0fodRkbE:L50U3WgNgSibZtT8MaRQE
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\ea32907dfb1f.2f9b60 MD5: 7d2be511a6af7bf4a30abb4e41a1ab0a
SHA1: 856a6dabca3249c98a1fb7e1034b635e48a91cb3
SHA256: 51ba302b6242bb80aa5899526d362af7514cef75b4f2ae53cbaa7b1ba6e47200
SSDeep: 384:ueZd/2g/43BqndrXG3Lqu6d7yEYFOJ17XJbRLp3R:ue4130VhRhJTRLpB
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\f2089505b4e2.2f9b60 MD5: 9e5a59a95e1bcc60c33b80213e45ad54
SHA1: de2604cb243d29e1f0cf777f0a90b7e8afb5d04d
SHA256: a6954069f2acebf688f9e35d85c05f1df1911332bca0555d8a13e23982e9d398
SSDeep: 48:zKLSVNGswSLguxUbHuC90jpQ7rAEjirRdnOlIKFFRcVBvfbp:aS/GYxU8dMhjyZSF0BvV
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\Program Files\Microsoft Office\CLIPART\PUB60COR\fa6d4d9c49d4.2f9b60 MD5: d79cbdee8adc596f04f33eb4946622ba
SHA1: b65f6cc4bfa77b7c886d72ea9e1b21e2b8036652
SHA256: 68ed0c44bc277b7a829d4b34c9d0cdf9eaf7d6029c538432772026c8d6070199
SSDeep: 384:BjtO0iu9UxTGnUa6ODyWf5Bibp1EAZnPqJiF+5c8L7Kpq:5L6TGnaODyWfHi9rnPrFCKpq
ImpHash: - 		Access, Read Dropped File
Not Queried
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat MD5: 8c2330e1407d68eac5e444d686e7a352
SHA1: 47dd15a4c148c118e56b9684b780b4b822b0f59c
SHA256: a01252fc3a4f8dfd5ac9a232b7f81df6ea95809f51e166105c4dce776dbee3c3
SSDeep: 768:5ydgylLuPDZjkc/PQj/duaWTnUmTHLuPDZjkc/PQj/duaWTnUmTHLuPDZjkc/PQA:5yeBDZjkq4eHTEDZjkq4eHTEDZjkq4o
ImpHash: - 		Access, Read, Write Modified File
Not Queried
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISINTL.DLL.trx_dll MD5: 08720775de15347a3104aa74f5ce74d3
SHA1: 5caed1ea31741b074a64949caab0e96ee39207ed
SHA256: d64ee1c1c6aab4d446eac6d48036611b9d5a7fd82cdca8d7859e02d09f3ab961
SSDeep: 3072:a9ICxtwg8thVqSuyraNYNqrRNsCgO/h07DAEZnpLdH/WgDJmBxKbWLfQoJ9LYXm+:sXE34yWNf/3/h7JYWEjMu
ImpHash: - 		Access, Read, Write Modified File
Not Queried
C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 01.wma MD5: 709102d6c45637d77d054445af931293
SHA1: 8436e941e66d023562c8fb4694082dd1b621159b
SHA256: b00ea546ae9000fd0761c5e474a8c49fd89ad57b77bb12c8a3aac474bdcdab99
SSDeep: 6144:CsNRQxR2s0RVUxAGMR3+xBuxFAvNhiAn0:CQRQnADtOBQGhip
ImpHash: - 		Access, Read, Write Modified File
Not Queried
C:\Recovery\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\boot.sdi MD5: 28169db56ef7321735934a812b768ccb
SHA1: 27521eed84b95acf24680eb5afbbd17b817d5b40
SHA256: 09601add22b5685ea3d00511b23098d4fd735084c960452a83afa3a338d1526d
SSDeep: 3072:YYvM2kke/pcj53vs/InbrTIHvPnHmC5irUuMo/+ncoZZihnh/Y1:HMR1cRn7y/EouH/cpiM
ImpHash: - 		Access, Read, Write Modified File
Not Queried
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\himmqugh.cmdline MD5: db541baecd1689284977cc4825e6fdcf
SHA1: cfab99ac7571690620dba744d7c991a9a6d90aec
SHA256: 0151c3e7e21816ba64e98ff615f0e7215491b4786bd639f4d61620045e9f3232
SSDeep: 6:pAu+H2LvFJDdq++bDdqBnUTk4aJ23fbVwmGsSAE2NUTk4aJ23fbP:p37LvMTaMWnPAE2OTaMr
ImpHash: - 		Access, Create, Delete, Write Dropped File
Not Queried
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\himmqugh.out MD5: aff4c07dd04680362292658996408485
SHA1: c5a47f2b1fdfb37ce6373b3f25c29887f044dd12
SHA256: 282189c0d9c634f6330466061441cfbe66861d7a702ceaed7f1e9fde2c6452cd
SSDeep: 12:xKNzR37LvMTaMWnPAE2OTaMqKai31bIKIMBj6I5BFR5y:ANzd3M+MWnIE2O+MqKai31bIKIMl6I5G
ImpHash: - 		Access, Create, Delete, Write Dropped File
Not Queried
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\himmqugh.tmp MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SSDeep: 3::
ImpHash: - 		Access, Create, Delete, Read, Write Dropped File
Not Queried
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\Temp\yhwog0u-.cmdline MD5: fa1019d6432c40d0dfd1a29220ff410b
SHA1: c942bde81e94dd2e29d1387699d37ce8afea2471
SHA256: 02e5c257de3635aa04b9ebd5617fe461d98a59130d715f4d2b43bbae1ca947bf
SSDeep: 6:pAu+H2LvFJDdq++bDdqBnUTk4aJ23fEmGsSAE2NUTk4aJ23f1n:p37LvMTaMcnPAE2OTaMNn
ImpHash: - 		Access, Create, Delete, Write Dropped File
Not Queried
C:\ - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Benioku.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Berime.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\IrakHau.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Leame.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\LeesMij.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Leggimi.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\LeiaMe.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Liesmich.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Lisezmoi.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Llegiu-me.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\LueMinut.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMe.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCS.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCT.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeCZE.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHRV.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeHUN.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeJ.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeK.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMePOL.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUM.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeRUS.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeSKY.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\ReadMeUKR.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AGMGPUOptIn.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.CAT - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.CHS - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.CHT - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.CZE - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.DAN - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.DEU - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.ESP - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.EUQ - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.FRA - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.HRV - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.HUN - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.ITA - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.JPN - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.KOR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.NLD - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.NOR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.POL - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.PTB - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.RUM - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.RUS - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.SKY - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.SLV - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.SUO - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.SVE - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.TUR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.UKR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Adobe.Reader.Dependencies.manifest - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.CAT - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.CHS - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.CHT - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.CZE - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.DAN - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.DEU - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.ESP - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.EUQ - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.FRA - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.HRV - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.HUN - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.ITA - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.JPN - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.KOR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.NLD - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.NOR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.POL - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.PTB - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.RUM - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.RUS - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.SKY - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.SLV - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.SUO - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.SVE - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.TUR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.UKR - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\AdobeID.pdf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CAT\DefaultID.pdf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\IDTemplates\CHS\AdobeID.pdf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Javascripts\JSByteCodeWin.bin - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CAT\license.html - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS\2F9B60-Readme.txt - Access, Create, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHS\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT\2F9B60-Readme.txt - Access, Create, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CHT\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\CZE\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DAN\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\DEU\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU\2F9B60-Readme.txt - Access, Create, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ENU\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ESP\license.html - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\EUQ\license.html - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\FRA\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV\2F9B60-Readme.txt - Access, Create
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HRV\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\2F9B60-Readme.txt - Access, Create, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\HUN\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\2F9B60-Readme.txt - Access, Create, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Legal\ITA\eula.ini - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Acroform.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\AdobeCollabSync.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Annots.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\BRdlang32.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Checkers.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\DVA.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\DigSig.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\EScript.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\IA32.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Multimedia.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\PPKLite.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\RdLang32.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\ReadOutLoud.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\SaveAsRTF.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Search.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\SendMail.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Spelling.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\WebLink.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\accessibility.CAT - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\eBook.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\makeaccessible.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\pddom.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\reflow.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\updater.CAT - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Acroform.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\AdobeCollabSync.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Annots.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\BRdlang32.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Checkers.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\DVA.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\DigSig.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Escript.deu - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\IA32.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Multimedia.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\PPKLITE.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\RdLang32.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\ReadOutLoud.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\SaveAsRTF.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Search.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\SendMail.deu - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Spelling.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Weblink.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\accessibility.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\eBook.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\makeaccessible.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\pddom.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\reflow.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\updater.DEU - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\accessibility.FRA - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\RTC.der - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\SPPlugins\ADMPlugin.apl - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\DEXShare.spi - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\bl.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\br.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\create_form.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_all.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\end_review.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\info.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\main.css - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\pdf.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_email.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\rss.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Tracker\tl.gif - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\cryptocme2.sig - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\2d.x3d - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\3difr.x3d - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX8.x3d - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX9.x3d - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\drvSOFT.x3d - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\prc\MyriadCAD.otf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\prcr.x3d - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins3d\tesselate.x3d - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\Accessibility.api - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\adobepdf.xdc - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\pmd.cer - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\2F9B60-Readme.txt - Access, Create, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeFanHeitiStd-Bold.otf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeGothicStd-Bold.otf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeHeitiStd-Regular.otf - Access, Read
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeMingStd-Light.otf - Access, Read
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeMyungjoStd-Medium.otf - Access, Read
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\AdobeSongStd-Light.otf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\KozGoPr6N-Medium.otf - Access, Read
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CIDFont\KozMinPr6N-Regular.otf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\83pv-RKSJ-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90ms-RKSJ-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90ms-RKSJ-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90ms-RKSJ-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90msp-RKSJ-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90msp-RKSJ-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90pv-RKSJ-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90pv-RKSJ-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\90pv-RKSJ-UCS2C - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Add-RKSJ-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Add-RKSJ-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-0 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-1 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-3 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-4 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-5 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-B5pc - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-ETen-B5 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-H-CID - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-H-Host - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-H-Mac - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-CNS1-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-0 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-1 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-3 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-4 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-5 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-GBK-EUC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-GBpc-EUC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-H-CID - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-H-Host - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-H-Mac - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-GB1-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-0 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-1 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-3 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-4 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-5 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-6 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-90ms-RKSJ - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-90pv-RKSJ - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-H-CID - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-H-Host - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-H-Mac - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Japan1-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-0 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-1 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-H-CID - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-H-Host - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-H-Mac - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-KSCms-UHC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-KSCpc-EUC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Adobe-Korea1-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\B5pc-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\B5pc-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\B5pc-UCS2C - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\B5pc-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\CNS-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\CNS-EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\ETHK-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\ETHK-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\ETen-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\ETen-B5-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\ETen-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\ETenms-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\ETenms-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Ext-RKSJ-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Ext-RKSJ-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GB-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GB-EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBK-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBK-EUC-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBK-EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBK2K-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBK2K-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBKp-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBKp-EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBT-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBT-EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBpc-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBpc-EUC-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBpc-EUC-UCS2C - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\GBpc-EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKdla-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKdla-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKdlb-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKdlb-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKgccs-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKgccs-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKm314-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKm314-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKm471-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKm471-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKscs-B5-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\HKscs-B5-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Identity-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\Identity-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSC-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSC-EUC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCms-UHC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCms-UHC-HW-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCms-UHC-HW-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCms-UHC-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCms-UHC-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCpc-EUC-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCpc-EUC-UCS2 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\KSCpc-EUC-UCS2C - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-90ms-RKSJ - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-90pv-RKSJ - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-B5pc - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-ETen-B5 - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-GBK-EUC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-GBpc-EUC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-KSCms-UHC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UCS2-KSCpc-EUC - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniCNS-UCS2-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniCNS-UCS2-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniCNS-UTF16-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniCNS-UTF16-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniGB-UCS2-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniGB-UCS2-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniGB-UTF16-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniGB-UTF16-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS-UCS2-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS-UCS2-HW-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS-UCS2-HW-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS-UCS2-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS-UTF16-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS-UTF16-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS2004-UTF16-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniJIS2004-UTF16-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniKS-UCS2-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniKS-UCS2-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniKS-UTF16-H - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\UniKS-UTF16-V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\CMap\V - Access
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\ENUtxt.pdf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\AdobeArabic-Bold.otf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Font\AdobeArabic-BoldItalic.otf - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_AE.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_BH.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_DZ.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_EG.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_IN.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_IQ.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_JO.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_KW.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_LB.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_LY.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_MA.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_OM.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_QA.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_SA.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_SD.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_SY.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_TN.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ar_YE.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.bg.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.bg_BG.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ca.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ca_ES.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.ca_ES_PREEURO.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.cs.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.cs_CZ.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.da.txt - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\2F9B60-Readme.txt - Access, Create, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\ctl_gb18030.cnv - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\1027.mst - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\1028.mst - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Vigtigt.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Viktig.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Adobe\Reader 10.0\Viktigt.htm - Access, Read, Write
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.CAT - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.CHS - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.CHT - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.CZE - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.DAN - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.DEU - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.ESP - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.EUQ - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.FRA - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.HRV - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.HUN - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.ITA - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.JPN - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.KOR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.NLD - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.NOR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.POL - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.PTB - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.RUM - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.RUS - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.SKY - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.SLV - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.SUO - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.SVE - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.TUR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.UKR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CAT - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHT - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CZE - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.DAN - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.DEU - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.ESP - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.EUQ - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.FRA - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.HRV - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.HUN - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.ITA - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.JPN - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.KOR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.NLD - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.NOR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.PTB - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.RUM - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.RUS - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.SKY - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.SLV - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.SUO - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.SVE - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.TUR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.UKR - Access
Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\ca_ES\Reader_10.0.helpcfg - Access, Read, Write
Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\cs_CZ\Reader_10.0.helpcfg - Access, Read, Write
Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\da_DK\Reader_10.0.helpcfg - Access, Read, Write
Not Available
C:\Program Files (x86)\Common Files\Adobe\HelpCfg\de_DE\Reader_10.0.helpcfg - Access, Read, Write
Not Available
For performance reasons, the remaining 2945 entries are omitted.
The remaining entries can be found in ioc_export.txt or ioc_export.json .
Registry (37)
»
Registry Key Name Operations
HKEY_CURRENT_USER\Environment Access
HKEY_CURRENT_USER\Environment\PSMODULEPATH Access, Read
HKEY_CURRENT_USER\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell Access
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\PowerShell Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell\ExecutionPolicy Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell\path Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\PipelineMaxStackSizeMB Access, Read
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN Access
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\StackVersion Access, Read
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\HardwareEvents Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\HardwareEvents\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Internet Explorer Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Internet Explorer\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Key Management Service Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Key Management Service\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Media Center Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Media Center\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\OAlerts Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\OAlerts\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Windows PowerShell Access
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Windows PowerShell\PowerShell Access
HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell Access
HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell\1 Access
HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell\1\PowerShellEngine Access
HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell\1\PowerShellEngine\ApplicationBase Access, Read
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSMODULEPATH Access, Read
IP (1)
»
IP Protocols Sources
192.168.0.1 UDP, DNS PCAP
Export to TXT Export to JSON
VMRay - Analyzer - www.vmray.com
Legal Note - Privacy Policy
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image