Analysis
-
max time kernel
151s -
max time network
71s -
platform
windows7_x64 -
resource
win7 -
submitted
08-07-2020 10:57
Static task
static1
Behavioral task
behavioral1
Sample
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe
Resource
win7
Behavioral task
behavioral2
Sample
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe
Resource
win10
General
-
Target
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe
-
Size
27KB
-
MD5
9d156a4c57ca4c218a540eca9b0938ae
-
SHA1
61b2b834a66abaa6fba494857732cfb12f09c981
-
SHA256
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c
-
SHA512
fa5ee8c5e5e9baac00d8fa26edf694a1dbce417ed896dcac2c26ddc6aef068d872909879a534f369f91a572aa8b8b803073e083d46e6de86ca338dd2861c70fe
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in Program Files directory 18186 IoCs
Processes:
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exedescription ioc Process File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Seoul 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tokyo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00438_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02371_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.zh_CN_5.5.0.165303.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IEAWSDC.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL105.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\icudt36.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImagesMask.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked-loading.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands_3.6.100.v20140528-1422.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\utilityfunctions.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00391_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mru_on_win7.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Chagos.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\MCPS.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_hail.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0233070.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\ROGERS.COM.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_center.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME02.CSS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR3B.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_underline.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\PLANNERS.ONE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util-lookup.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DVA.api.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\CONVERT\OLJRNL.FAE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47F.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Tegucigalpa.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Premium.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18191_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtau.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\msvcr100.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297757.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE04050_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\gadget.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent_partly-cloudy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\TAB_ON.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0199036.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXT 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151063.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.POC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR28F.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Stanley 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIconMask.bmp.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\EST.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baghdad 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-windows.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\sl.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\OIS_F_COL.HXK.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_On.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sv.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\1033\LOCALDV.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\SessionOwner.ico.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\CLVIEW.EXE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341475.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSHY7ES.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Pangnirtung.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\macroprogress.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Groove.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105246.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\CNFNOT.ICO 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\osclientcerts.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextService.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PSRCHKEY.DAT.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dili 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099171.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178632.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\logo.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR27F.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Inuvik.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\TWLAY32.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\IPDSINTL.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.DPV.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Fortaleza.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PSSKETLG.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\GMT.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Bissau 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santiago.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Krasnoyarsk.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Port_Moresby 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ERROR.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\tr.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\ReadOutLoud.api.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0296279.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\PROG98.POC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_GreenTea.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.WIH 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONLNTCOMLIB.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Lagos.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\fonts\LucidaSansRegular.ttf.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4ADT 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DVA.api 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Cordoba.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mac.css.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382960.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01244_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\FORMS\1033\CONFLICT.ICO.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Mexico_City.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\youtube.crx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jvmticmlr.h 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\MP00646_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02291U.BMP 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jaas_nt.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00192_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105240.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02793_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02361_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN01308_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_browser.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\validation.js.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL096.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15018_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\fr.pak.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0279644.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GROOVE_COL.HXC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome.exe.sig.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\clock.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\ReadConvert.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0150861.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.Infopath.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_rainy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\CSS7DATA000C.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\SOA.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL109.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR5B.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\FOLDPROJ.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0294989.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Stars.htm 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00468_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00194_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7EN.dub 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\eo.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\BCSProxy.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\OUTEX2.ECF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\WSS.ICO.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Cape_Verde 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\EXLIRMV.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0292248.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01245_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Pushpin.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_h.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tongatapu 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0285796.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsound.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_over.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Macquarie 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_over.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0178459.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\psmachine.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SaveAsRTF.api.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\skins\default.vlt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143744.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Saipan 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\gu.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\he.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\ACCDDSF.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search5.api 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Choibalsan 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jar.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0241041.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSPUB_COL.HXC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\NAVBRPH2.POC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libavi_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\SELFCERT.EXE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\CERTINTL.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new_partly-cloudy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Glace_Bay 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Mendoza.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21305_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Horizon.thmx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18197_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\bg_VelvetRose.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\XIMAGE3B.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297759.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\javafx.properties.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\SmallLogoBeta.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_48.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00943_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\TASKREQ.CFG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Seoul.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Ojinaga.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\weather.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Brisbane.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\PROGRAM.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.bat.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15132_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Port_Moresby 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\jfr.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01748_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\System\Ole DB\xmlrw.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18225_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02155_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR19F.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Etc\GMT-7.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\VERSION.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\form_edit.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Equity.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.zh_CN_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\MENUS.JS.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\install.log.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Media.accdt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\zh-cn.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\SplashScreen.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02578_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0281632.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_rest.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Nome.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\msadc\msadcfr.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47F.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\Port_Moresby.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\EXCEL.EXE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SL00260_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\MSAEXP30.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\bin\server\classes.jsa 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Pyongyang 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47F.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ko.pak.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00532_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Majuro 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.properties.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01563_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\ExpenseReport.xltx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.LIC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107748.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\lua\http\dialogs\error_window.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLN.DOC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME41.CSS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Gaza 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\RenameConvertTo.kix 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21297_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SMIMEE.CFG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ko.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.css_1.7.0.v201011041433.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Tijuana.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\TAB_OFF.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\DismountClose.wps.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\keytool.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Media.accdt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382948.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Vancouver 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pago_Pago 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\ADVZIP.DIC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\navBack.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\npdeployJava1.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Chita 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\ext\sunec.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\README.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099175.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10253_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Helsinki 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Atlantic\Bermuda.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Jamaica 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Mail\wab.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143746.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Makassar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH02845G.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\charsets.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\bin\pack200.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01268_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL103.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\simplexml.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous_partly-cloudy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_sun.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.CSS.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PH01255G.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OrielReport.Dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cambridge_Bay 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\DAO\dao360.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\vlm.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\ReadMe.htm 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN058.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\localedata.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\RSWOP.ICM.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00444_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Goose_Bay.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yerevan 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00494_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Reunion 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tripoli.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107482.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\QuickStyles\Classic.dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\2.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\hi.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.JS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Casey 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\alt-rt.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187851.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00159_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0229389.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-output2.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\TAB_OFF.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200289.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Data1.cab 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Beirut.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_HK.properties 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.Design.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Johannesburg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\javaws.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libogg_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02048_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02270_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18181_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR40F.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.Design.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\invalid32x32.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\messageboxerror.ico.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\27.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL081.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL089.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Person.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00760L.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD15184_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImagesMask256Colors.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\MSTORDB.EXE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\classfile_constants.h 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\WEBHED98.POC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_bg.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\attention.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00052_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-desk.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jsadebugd.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Indian\Maldives.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\Notebook03.onepkg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_win.css.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200189.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18212_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\flyout.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\FormatBackup.wm 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200521.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\sv.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00390_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Library\Analysis\ANALYS32.XLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287645.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA00454_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME50.CSS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\twitch.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiling.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\mscss7wre_en.dub 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.mshtml.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaosp.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Guatemala.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\TAB_OFF.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382925.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18180_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Regina 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Brussels 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Newsprint.thmx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Nome 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Hong_Kong 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Pushpin.thmx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\OriginMergeLetter.Dotx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tarawa 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105272.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfontj2d.properties.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18200_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\MSAEXP30.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0337280.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cancun 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341439.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\MEIPreload\manifest.json.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\InstallDeny.ram 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Photo Viewer\ImagingDevices.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02126_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\psuser.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Reykjavik 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee90.tlb 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\wsgen.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\CERT.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\messageboxerror.ico 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\ConvertFromPing.3gp2.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\AUDIOSEARCHLTS.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\CT_ROOTS.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\instrument.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\IN00919_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382926.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\orbd.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-docked.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\settings.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02862_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGSTORYVERT.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10253_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\COUPON.POC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15056_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Khandyga.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01299_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\psfontj2d.properties 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153299.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00221_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0148798.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Tools.Applications.Project.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Azores 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\ADVZIP.DIC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152600.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\Access\Faculty.accdt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\common.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Marengo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\OIS.EXE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\RE00006_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\index.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_te.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.bfc 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\misc\libexport_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annots.api 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\MedianLetter.Dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Antarctica\Casey.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Creston.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zurich 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\master_preferences 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Style\GB.XSL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Guatemala 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\utilityfunctions.js.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\CALENDAR.DPV.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Apia.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePage.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\EXPTOOWS.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14829_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105332.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0200273.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215718.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01805_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18235_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MSTORE.HXS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\ga.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.bat 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0233070.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_cs.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\en-GB.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Boise.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUPLD.INTL.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\CHEVRON.ICO 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Port-au-Prince.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\msadc\msadco.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\STUBBY2.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL082.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01298_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PG_INDEX.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\mc.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14790_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\WMM2CLIP.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\pa-in.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0195428.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\lua\http\vlm_export.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\form_edit.js.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\GIFT.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Ceuta.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\update-settings.ini.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLN.XLS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-modules.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297229.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\46.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\OriginResume.Dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\icudtl.dat.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\bin\fontmanager.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107528.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0151067.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB7.BDR.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Marengo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Cocos.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-windows.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\ka.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143750.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.access.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Media Player\en-US\WMPDMC.exe.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00610_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01292_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ENVELOPR.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\XDPFile_8.ico 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.PH.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\ONENOTE_COL.HXC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ml.pak.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kwajalein.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01805_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\QP.DPV 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Elemental.thmx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jps.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099198.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0297269.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libx265_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\Kiritimati.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santiago 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Swift_Current.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN102.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\Blog.dotx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086424.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14845_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-bootstrap.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\RPLBRF35.CHM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2B.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Bibliography\Style\SIST02.XSL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152716.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Kolkata.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21303_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\descript.ion 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\ApothecaryLetter.dotx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\lua\playlist\newgrounds.luac.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\add_reviewer.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Costa_Rica 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\EET.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\lua\playlist\koreus.luac.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Photo Viewer\PhotoViewer.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_docked.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_vi.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\LICENSE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGSIDEBR.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\Access\Part\Tasks.accdt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\kn.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Folder-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\ReviewRouting_Init.xsn 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_hi.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR23F.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Australia\Broken_Hill.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00685_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\psuser.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\lua\liblua_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-10 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_rainy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\New_Salem.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145879.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN026.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\ZoneInfoMappings 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02073_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01743_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-execution.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME13.CSS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-middle.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\npjp2.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Barbados.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGBOXES.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dushanbe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\La_Rioja 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0233018.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_down.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OFFOWC.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102594.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00668_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\EXCEL_COL.HXT.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Office\Office14\BCSLaunch.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\MEDIA\COIN.WAV.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.ja_5.5.0.165303.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21310_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Sort\YEAR.XSL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\eBook.api.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00050_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02028_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18252_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\newgrounds.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\swiftshader\libEGL.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\fy.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01838_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\RESENDL.ICO 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Windhoek 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-print.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-coredump.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382947.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\BORDERS\MSART3.BDR.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00942_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Installed_resources14.xss.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0215718.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239951.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\BZCRD98.POC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02617_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Module.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\misc\libxml_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\ja.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02092_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter_partly-cloudy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\16.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nome 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0172067.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\MSTORE_COL.HXC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR16F.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_cloudy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Noronha.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticnotification.exsd.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Wordcnv.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\BillingStatement.xltx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14791_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0106146.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_up.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceDaYi.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\jamendo.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-12 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\AccessWeb\SERVWRAP.ASP 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\swiftshader\libGLESv2.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0390072.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.contenttype_3.4.200.v20140207-1251.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\MLCFG32.CPL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\AD.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\digest.s.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextService.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous_partly-cloudy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.properties 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18248_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\AdjacencyReport.dotx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\localizedStrings.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107138.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_bkg.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ro.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\bin\deploy.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.IN.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\calendar.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tbilisi.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)redStateIcon.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multitabs.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO02793_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\CATALOG.DPV.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\skins\skin.catalog 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yakutsk 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Office\Office14\IEAWSDC.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\ext\sunec.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\FORMS\1033\SCHDRESN.CFG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\bin\wsdetect.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\logging.properties 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01243_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\ne.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\mset7.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PROTTPLV.PPT 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nipigon.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\7-zip.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.inject_1.0.0.v20091030.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287024.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_tr.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons\OutSyncPC.ico.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\alt-rt.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115866.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\HICCUP.WAV 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javac.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME55.CSS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\BG_ADOBE.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107488.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL093.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.c.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0187883.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\weblink.api.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\SecStoreFile.ico 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Magadan 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-keymap.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01701_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0205582.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSHY7ES.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\APPTS.ICO 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\meta-index.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\HEADER.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\oisctrl.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01246_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00126_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\drag.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_dot.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceYi.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Defender\en-US\MpAsDesc.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libaom_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Vincennes.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\SNET.NET.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\CERT98SP.POC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-tools.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Document.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\msvcr100.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341636.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Thimphu.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\ContactPicker.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_ON.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Damascus.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-core.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185670.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0287642.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR42F.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\FAX\OrielFax.Dotx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\msadc\msadcer.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152882.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OneNote\SendToOneNoteNames.gpd.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Beulah.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0234001.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153518.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\BIZCARD.DPV.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18202_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Prague.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People\MMHMM.WAV.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\INLAUNCH.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00232_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors\Grayscale.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0301432.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\EADOCUMENTAPPROVAL_REVIEW.XSN.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Havana.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107182.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belem 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01358_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.ES.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\FORMCTL.POC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\fur.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\12.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Eirunepe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Australia\Sydney.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0341738.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\MEDIA\WHOOSH.WAV.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN081.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.SF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser_5.5.0.165303.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Montevideo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18221_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-progress.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\WB01239_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0090070.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Microsoft Office\Office14\1033\BHOINTL.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_rest.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bishkek.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0293240.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\clock.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_distributed.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-lib-uihandler.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH02166_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME10.CSS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX9.x3d.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00478_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR31B.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0086432.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_right.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_partly-cloudy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-io.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\TAB_OFF.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Dili.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PROOF\MSSP7FR.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\SIGN.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pe.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15168_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\MORPH9.DLL.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\ADDINS\ColleagueImport.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\CONVERT\DESKSAM.SAM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGMN002.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PROOF\MSGR3FR.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\jni_md.h 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_rainy.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\maintenanceservice.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00670_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0196400.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PAGESIZE\PGLBL065.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\menu_arrow.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsFormTemplate.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0313965.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libpva_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Lisbon 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bat.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libmft_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Uzhgorod.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02450_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14581_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.Infopath.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-remote.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\utilityfunctions.js.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_right.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Budapest 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Tijuana 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\POWERPNT.EXE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExecutiveReport.dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Indian\Kerguelen.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Indian\Chagos.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107264.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0145168.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.NZ.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\DGREPFRM.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_hyperlink.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\db\LICENSE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02093_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\Efate.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02262_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_right.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-ui.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rainy_River 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00734_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01236_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\java_crw_demo.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02431_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB10.BDR.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\BlackTieNewsletter.dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\NOTE.CFG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107150.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00170_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0216724.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\gstreamer-lite.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.JP.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.HK.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Roses.htm 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\logo.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14981_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\form_edit.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD14882_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyDrop32x32.gif.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107452.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\gstreamer-lite.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_hail.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TR00178_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PAPERS.INI 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Bahia_Banderas.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\msadc\handsafe.reg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\telnet.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0240695.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ExecutiveResume.dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\SOCIALPROVIDER.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0107254.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0185790.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\jquery.jstree.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_snow.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.codec_1.6.0.v201305230611.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Vostok.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\BD21340_.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\gadget.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Dawson 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21519_.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE02265_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\EMAIL11.POC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.cpl.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\bin\server\jvm.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.event_1.3.100.v20140115-1647.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Omsk.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\form_edit.js.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0103812.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\airappinstaller.exe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\logging.properties.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0251301.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libg711_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR37F.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\el.pak.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\sa-jdi.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0102594.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\MedianResume.Dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UTC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BUSINESS.ONE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\CSS7DATA0009.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO01785_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libvcd_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\TAB_ON.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Journal\PDIALOG.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Hardcover.thmx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\TN00234_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_thunderstorm.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImageMask.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0239973.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kuala_Lumpur 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Accra 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search.api.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_docked.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadcfr.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\custom.lua 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00938_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBWIZ\NEWS11.POC.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Module.thmx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0174639.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0212601.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE03257_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\FORMS\1033\SCDRESNS.ICO 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Antarctica\Rothera.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0152704.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SO00935_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santarem 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Document Themes 14\Verve.thmx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0382954.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Bibliography\Sort\TAG.XSL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0153047.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR19F.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\MakeAccessible.api 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\EMABLT32.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME26.CSS.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BLANK.ONE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Monaco 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid_over.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24ImagesMask.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Atlantic\Madeira.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdater.cer 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.swf.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-uisupport.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0213243.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Templates\1033\IntroducingPowerPoint2010.potx.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadcer.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Updater.api 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe.sig 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\SY00127_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Porto_Velho 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Mail\wabmig.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0283209.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR29F.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Cairo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\BTINTERNET.NET.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.SE.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\PUBBA\MSPUB2A.BDR.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\PUBWIZ\BRCH98SP.POC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\readme.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099195.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0105520.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre7\lib\zi\Australia\Lord_Howe.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\PDIR42F.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\jvm.cfg.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA02126_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_issue.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Norfolk.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Reykjavik 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Defender\MsMpLics.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\J0384900.JPG.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\CLIPART\PUB60COR\PE00531_.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AU.XML.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_es-419.dll.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\J0115875.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR00.GIF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-vertical.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\3difr.x3d.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ml.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Maputo.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\README.txt.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\CLIPART\PUB60COR\NA01154_.WMF.SpartCrypt[[email protected]]-[ID-F86B013E].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\J0301480.WMF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe