Analysis
-
max time kernel
150s -
max time network
148s -
platform
windows10_x64 -
resource
win10 -
submitted
08-07-2020 10:57
Static task
static1
Behavioral task
behavioral1
Sample
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe
Resource
win7
Behavioral task
behavioral2
Sample
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe
Resource
win10
General
-
Target
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe
-
Size
27KB
-
MD5
9d156a4c57ca4c218a540eca9b0938ae
-
SHA1
61b2b834a66abaa6fba494857732cfb12f09c981
-
SHA256
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c
-
SHA512
fa5ee8c5e5e9baac00d8fa26edf694a1dbce417ed896dcac2c26ddc6aef068d872909879a534f369f91a572aa8b8b803073e083d46e6de86ca338dd2861c70fe
Malware Config
Signatures
-
Drops desktop.ini file(s) 58 IoCs
Processes:
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exedescription ioc Process File opened for modification C:\Users\Public\Libraries\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Saved Games\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Desktop\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Downloads\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Favorites\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\Downloads\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\$Recycle.Bin\S-1-5-21-2066881839-3229799743-3576549721-1000\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\Desktop\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\OneDrive\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Videos\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Documents\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\Documents\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\Pictures\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\Music\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Searches\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\Stationery\Desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu Places\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\AccountPictures\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Public\Videos\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Contacts\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Music\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Links\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Users\Admin\Pictures\desktop.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in Program Files directory 22699 IoCs
Processes:
4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exedescription ioc Process File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\small\time.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmadminicon.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-125_8wekyb3d8bbwe\Assets\contrast-white\Movie-TVStoreLogo.scale-125_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-200_8wekyb3d8bbwe\Assets\contrast-white\WideLogo.scale-200_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-140.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\RADIAL\RADIAL.ELM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\ado\msado27.tlb 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ul-phn.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4.ssl_1.0.0.v20140827-1444.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNotePageLargeTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN114.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\skype_titlebar_logo.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraWideTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\Weather_LogoSmall.targetsize-16.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\mcxml\x-none\PowerView.x-none.msi.16_mondoww.mcxml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AlarmsSmallTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7FR.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteAppList.targetsize-40_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-36_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\ja-jp-sym.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\PDFREFLOW.EXE.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_zh_CN.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\msolap_xl.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.text.nl_ja_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Csi.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\da\msipc.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\cm_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\jscripts\winrthost.js 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\localedata.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\4665_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteNotebookSmallTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\manifests\BuiltinAgaveCommands.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\api-ms-win-crt-multibyte-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\nz_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\gameEnd_background_symbols.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\1938_48x48x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\Office365LogoWLockup.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_base_non_fips.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\OutlookMailMediumTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\mr.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\TEE\en-US.Messaging.config 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libmicrodns_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\microsoft.system.package.metadata\Autogen\JSByteCodeCache_32 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-16.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-80_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\office32mui.msi.16.en-us.tree.dat 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN020.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.Design.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluHandle.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\4583_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-96_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Flattener\api-ms-win-core-file-l2-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubWideTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_zh_CN.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_targetsize-256.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\LockScreenBadgeLogo.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\platform.ini.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\bin\jjs.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\lib\jce.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\PeopleLargeTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.sun.el_2.2.0.v201303151357.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\THEMES.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\illustrations_retina.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\WordInterProviderRanker.bin 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-30_altform-colorize.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5666_40x40x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\SkypeAppList.targetsize-32_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-explorer.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-localization-l1-2-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\SkypeApp\Assets\SkypeLargeTile.scale-100_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Generic-Light.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\HowToPlay\Klondike\Goal_2.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\update-settings.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\WideLogo.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-30.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\HxMail.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntry2019R_PrepidBypass-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_COL.HXT.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\wf_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\PartyChat.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-36_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_el.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-200_8wekyb3d8bbwe\Assets\contrast-black\MusicStoreLogo.scale-200_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ONLNTCOMLIB.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-spi-quicksearch.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\Send2.16.White.png.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-72_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxCalendarWideTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_F_COL.HXK 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\TellMeWord.nrr 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL105.XML.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7ES.LEX.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Fues\Popup_shadow_2_2bp.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\libvlc.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\as90.xsl.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\S_IlluNoInternetConnection_120x80.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Awards\common\King_Of_The_Hill_Unearned_small.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\Glyph_0xecd2.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteSectionSmallTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\contrast-white\OneConnectWideTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\tracedefinition130.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BLENDS\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Core.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Snippets\ShouldNotThrow.snippets.ps1xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_zh_CN.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\ClassicDeck4.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-24_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\Office\StickySelection.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\OutlookMailBadge.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\Match.ps1 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\1249_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6918_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\Catalog\shape_sphere.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.XLS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-72.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxSignature.p7x 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\_Resources\index.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\lib\security\blacklisted.certs.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\WindowsAccessBridge-64.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\contrast-black\OneConnectAppList.targetsize-32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Outlook.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\nacl_irt_x86_64.nexe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\SmallLogo.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Icons\tripeaks_menu_icon.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\lobby_deck_style_fable.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\NL7MODELS000A.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsSmallTile.contrast-white_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\bw_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.core_5.5.0.165303.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\libGLESv2.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Beach\beach_13s.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Flattener\CommonSequencingProperties.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-24_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\animations\OneNoteFRE_PenClick_LTR_Tablet.mp4 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\MEDIA\BOMB.WAV.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\small\yes.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\diff_match_patch_uwp.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntimeR_PrepidBypass-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\OSFROAMINGPROXY.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected][[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupMedTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-text.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\notification_helper.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.properties.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\10910_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\1033\BHOINTL.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\CalculatorAppList.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\AppxManifest.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\TestResults.Tests.ps1 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\EXP_XPS.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Client\AppVLP.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-32_contrast-high.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\api-ms-win-core-xstate-l2-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\io_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\locale\jfluid-server_zh_CN.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Top Shadow.eftx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-annotations-common.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART12.BDR.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe\Assets\Office\Object.scale-140.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubLargeTile.scale-200_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Buttons\Undo\Undo-over.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\GamePlayAssets\Localization\localized_ZH-CN.respack 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SONORA\SONORA.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-72_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql_2.0.100.v20131211-1531.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEERR.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\mk.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_KMS_Client-ul.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\ExchangeBadge.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCHARTCOMMON.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_ja.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\AppxBlockMap.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\accessibility.properties 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_es.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\System\msvcp110.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-GoogleCloudCache-Light.scale-140.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\Install\{0FFF632F-1073-45B0-9B63-F95E8B1E38FA}\83.0.4103.106_chrome_installer.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-40.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\OutlookAccount.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\kw_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-util.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\STUDIO\STUDIO.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\powerview.x-none.msi.16.x-none.boot.tree.dat 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-32_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\hk_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\LinkedInboxWideTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-80.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSYUBIN7.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\5034_48x48x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\WorldClockSmallTile.contrast-white_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\en-US\about_TestDrive.help.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\main-cef-win8.css.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaTypewriterRegular.ttf.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-20.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-white_targetsize-256.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Toolkit\Images\DefaultProfileImage.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Arkadium.Win10.DailyChallenges\Assets\Popups\DiamondBadgeEarned.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6440_48x48x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsStoreLogo.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\mv_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\zlibwapi.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\A12_Spinner_2x.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Defender\MpAzSubmit.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART2.BDR 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.ReportDesign.Common.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\SkypeSrv\SFBAPPSDK.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\librtpvideo_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\7-zip.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Time.winmd 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\OneConnectWideTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-96.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\mc.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Lumia.ViewerPlugin\Assets\IconOpenInRefocus.contrast-high_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\PSReadline\1.2\PSReadline.psm1 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\ado\msadox.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Integration\C2RManifest.dcfmui.msi.16.en-us.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Mso98win32client.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\WideTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.Data.DataFeedClient.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Work\LargeTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\swiftshader\libGLESv2.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-api.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\LargeTile.scale-100_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\SmallTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Flattener\api-ms-win-crt-runtime-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\EssentialResume.dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\manifestAssets\contrast-black\SplashScreen.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-api.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\FaceSdkStoreWrapper.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6767_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_K_COL.HXK 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxCalendarAppList.targetsize-24.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tr-TR\tipresx.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Fues\Upsell_Image.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\39.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\TrafficHub\contrast-black\LargeTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ul-phn.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\TimerMedTile.contrast-white_scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_newfolder-default.svg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailSmallTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\classes.jsa 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxA-Outlook.scale-250.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\klist.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\mcxml\en-us\dcfmui.msi.16_dcfmui.mcxml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_winxp.css.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Microsoft.Xbox.Services.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxA-Exchange.scale-250.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql70.xsl 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\api-ms-win-core-xstate-l2-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_ja.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\management.properties 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSUIGHUR.TTF.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-24_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\MedTile.scale-200_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\LockSync.AAC.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\AppxSignature.p7x 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Bears.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-20_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\small\giggle.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXEV.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\cn_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\STUDIO\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxCalendarLogoExtensions.scale-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-20.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\FileExtension.targetsize-24.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jabswitch.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\lcms.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNotebookLargeTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\d3dcompiler_43.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jaas_nt.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-64_altform-unplated_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\oskmenubase.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\vc_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailMediumTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-api-caching.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\sz_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\Words.pdf.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EXPEDITN\EXPEDITN.ELM.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\freebl3.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\CalculatorSplashScreen.contrast-black_scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\back-arrow-disabled.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\large\giggle.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5671_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\Folder.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javacpl.cpl 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows NT\Accessories\en-US\wordpad.exe.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\mcxml\en-us\proofing.msi.16_proofing.mcxml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraLargeTile.contrast-white_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-125_8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-125_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Pages_R_RHP.aapp.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\ga.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\BuildInfo.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer_3.2.200.v20140827-1444.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\BeLikeExactly.ps1 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\1250_48x48x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\2818_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-compat_ja.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\sa.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_25.25.13009.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubSplashScreen.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailAppList.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\FileExtension.targetsize-16.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_lt.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-200_8wekyb3d8bbwe\Assets\contrast-black\WideLogo.scale-200_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\69_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.d3ad3041.pri 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-96.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\api-ms-win-core-file-l1-2-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\FilterModule.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\Wordcnvpxy.cnv 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\MSSOAPR3.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Place\RTL\LargeTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_Nose.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\win32\jni_md.h 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\gstreamer-lite.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.targetsize-30_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-environment-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\History.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\IVY.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\sfodbc.did 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\CSS7DATA0009.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_LinkDrop32x32.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-ui.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\OutlookMailBadge.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\sw.pak.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\large\fingerscrossed.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\hu_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\MSOSEC.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-140.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690Nmerical.XSL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Logos\Square150x150\PaintMedTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Installer\chrome.7z 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Autumn\mask\12h.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VGX\VGX.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Grace-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-60_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\visicon.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-32_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_zh-CN.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\SaveAsRTF.api 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\BIB.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNotePageWideTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_zh_CN.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-40_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-96_altform-unplated_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ro.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\TelemetryLog.xltx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\System\msvcp100.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\td_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremDemoR_BypassTrial365-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\starttile.dualsim1.wink.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\openssl64.dlla.manifest 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailMediumTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Grace-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\en-us\xlsrvintl.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\SkypeSrv\SFBAPPSDK.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\Effects\effects_lobby_cherryblossoms.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.AnalysisServices.Common.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\COMPASS\COMPASS.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SKY\SKY.ELM.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.UltraWinChart.v11.1.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jps.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\splashscreen.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util-lookup_ja.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvm.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\sdxs.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\Workflow\Density_Selected_Solid.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Lumia.ViewerPlugin\Assets\IconOpenInRefocus.contrast-white_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5606_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdatl3.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmdp64.msi 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_filter-down_32.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Client\msvcp120.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-72.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\small\surprised.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5311_40x40x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000042\mecontrol.png.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Western\mask\mask_corners_queen.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AlarmsSmallTile.contrast-black_scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-settings.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\java.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\HAMMER.WAV 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.targetsize-16_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-256_altform-unplated_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntry2019R_PrepidBypass-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Grace-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo.png.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\SharpDXEngine\Rendering\Shaders\Builtin\Bin\Textured_Inst_VS.fxo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-48_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\OneConnectStoreLogo.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-64_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\manifest.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\us_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\QUAD\PREVIEW.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\osfimm.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Orange Circles.htm 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONENGINE.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Awards\challenge\Go_for_the_Bronze_.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-64_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\fur.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_cs.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\Assets\LargeLogo.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\luac.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraLargeTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.id-id.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\net.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\browser\features\[email protected][[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-100_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DWTRIG20.EXE.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Classic\mask\1s.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxCalendarSmallTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\Assets\Logo.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemePreview\Effects\Fireworks.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\main-cef-ui-theme.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL044.XML 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\HowToPlay\Spider\Goal_4.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\ta.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\wordmui.msi.16.en-us.boot.tree.dat 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-72_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\8041_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\WorldClockWideTile.contrast-black_scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ARIALNB.TTF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\S_IlluEmptyFolder_160.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\MainPageState2\statistics_bp_920.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\msvcp140.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1.10531.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\PeopleAppStoreLogo.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Client.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-spi-quicksearch.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\large\drunk.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_empty_state.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-64.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-48_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarBadge.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.base.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.DataWarehouse.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_sortedby_up_selected_18.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\PurchaseApp.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Flattener\api-ms-win-crt-filesystem-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\10178_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\large\brokenheart.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\xs_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\Assets\Preview.scale-200_layoutdir-LTR.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\offsymxl.ttf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\contrast-black\OneConnectAppList.targetsize-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\Icons\CamMDL2.ttf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\Effects\effects_lobby_stars.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\31.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color32.bmp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\Graph.exe.manifest.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\VVIEWER.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\msoia.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\en-us\msointl30_winrt.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\8498_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Candara.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\System\mfc140u.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Media Player\en-US\wmpnetwk.exe.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemui.msi.16.en-us.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\IRIS\IRIS.INF.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\jmxremote.access 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\Snooze.scale-64.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\Assets\contrast-black\Logo.scale-150_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\MedTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\Wordcnv.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxA-Outlook.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-60_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\locale\updater_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\um_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_gridview.svg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\ProductPoseEstimation27Pts.mdl 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\SplashScreen.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\Fonts\private\SEGOEUISL.TTF.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-output2.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\10393_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Res.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\OutlookMailLargeTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Exchange.scale-300.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailBadge.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SLATE\SLATE.ELM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-30_altform-unplated_contrast-high.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\1033\ClientARMRefer_eula.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Google.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\vcomp140_app.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmia64.msi.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\InsiderHubWideTile.scale-125_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views_3.7.0.v20140408-0703.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\resources.pri 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderLogoExtensions.targetsize-20.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-40_contrast-high.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\FOLDER.ICO 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\HowToPlay\Klondike\Goal_1.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ro.pak.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\MeetingJoinAxOC.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\MedTile.scale-125_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Mozilla Firefox\crashreporter.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Defender\AmStatusInstall.mof 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\_Resources\1.rsrc 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BLUEPRNT\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderWideTile.contrast-white_scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_common.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\rt.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_Hedge.dxt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ADALPREVIOUS.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\sq.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Livetiles\MicrosoftSolitaireAppList.targetsize-30_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4_1.0.800.v20140827-1444.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Tournament\GameModeKlondike.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.zh_CN_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\POWERPNT.EXE.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\sound.properties.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\bin\jdwp.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\EmbossBitmaps\4-Point Star.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgeCalls.h.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\apple-touch-icon-114x114-precomposed.png.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\small\dull.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\bh_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Lumia.ViewerPlugin\CinemagraphDelegate\CinemagraphControl.xaml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Folder-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\FPERSON.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\2475_48x48x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Tournament\Strike.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarSplashLogo.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\OutlookMailWideTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Arkadium.Win10.Xaml.Toolkit\Assets\XboxControl\Internet_icon.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-conio-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsSmallTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxManifest.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libts_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\SkypeAppList.targetsize-24_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Grace-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\bwcapitalized.dotx.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Microsoft.AnalysisServices.AzureClient.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\GamePlayAssets\Localization\localized_SV-SE.respack 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\151.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\PROOF\LTSHYPH_ES.LEX.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_25.25.13009.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubMedTile.scale-125_contrast-high.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\OneConnectSmallTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_LogoSmall.targetsize-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\Registry.dat 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Trial-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\8080_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsStoreLogo.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxBadge.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\dsn.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\McePerfCtr.man.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\WorldClockWideTile.contrast-white_scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Arkadium.Win10.Xaml.Toolkit\Assets\Buttons\Menu\Menu_black-press.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\SmallTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\ka.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\649_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\java.policy.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Fonts\private\DUBAI-REGULAR.TTF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.properties.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\db2v0801.xsl 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_PrepidBypass-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Microsoft.Xbox.SmartGlass.Controls\BridgedWebBrowser.xaml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\salesforce.ini 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.ssl_1.1.0.v20140827-1444.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemePreview\CardBacks\Spider.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\Assets\send.white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5313_48x48x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\release.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6416_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\AppTiles\MapsAppList.targetsize-30_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_zh_CN.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\bin\fontmanager.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-125_kzf8qxf38zg5c\SkypeApp\Assets\SkypeLargeTile.scale-125_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft.NET\ADOMD.NET\130\Microsoft.AnalysisServices.AdomdClient.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.targetsize-48_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxCalendarMediumTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\OneConnectSplashScreen.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\SkypeAppList.targetsize-256_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-32_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\small\makeup.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-io-ui.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_sortedby_up_hover_18.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Mail\msoe.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jconsole.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-125_8wekyb3d8bbwe\resources.pri 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxA-Yahoo-Dark.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Icons\themes.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-GoogleCloudCache-Dark.scale-180.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\d3dcompiler_47.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\snmp.acl.template 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\msadc\msadcor.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteSmallTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-black_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-200_8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-200_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_hu.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\Glyph_0xe7d0.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\StoreAppList.targetsize-32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\ga_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\gh_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\256x256.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\8201_40x40x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxA-Google.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6701_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Tournament\GameModeSpider.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\SharePointPortalSite.ico 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\it.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\_Resources\0.rsrc 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-180.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\ExchangeLargeTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Grace-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-48_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_filter-hover_32.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\msotdintl.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobePiStd.otf.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubSplashWideTile.scale-200_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\WATERMAR\THMBNAIL.PNG 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Tournament\LevelIndicator.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-80_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\ContainExactly.ps1 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\loc\AppXManifestLoc.16.en-us.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateOnDemand.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_chromaprint_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-200_8wekyb3d8bbwe\Assets\contrast-white\WideLogo.scale-200_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-attach.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\AppxSignature.p7x 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-256_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libwav_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Awards\pyramid\Golden_Pharaoh_.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-30_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteSplashLogo.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5311_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QRYINT32.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_Planet.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\starttile.smile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5511_40x40x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-16_altform-unplated_contrast-high.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Generic-Light.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ul.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Grace-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-30_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Autumn\autumn_1h.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\_Resources\4.rsrc 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\mcxml\en-us\osmuxmui.msi.16_osmuxmui.mcxml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.targetsize-24_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCHARTCOMMON.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sampler.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Configuration.winmd 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\AppxSignature.p7x 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32ww.msi.16.x-none.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\lua\http\dialogs\offset_window.html.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SKY\PREVIEW.GIF.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\4627_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-100.png.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-180.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-80_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\OneConnectAppList.targetsize-64.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5665_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemePreview\Effects\CherryBlossoms.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\td_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-explorer.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Defender\MsMpCom.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\COPYING.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.it-it.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraMedTile.contrast-black_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ul-phn.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNotebookLargeTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedAppList.scale-200_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.ShowHelp.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows NT\Accessories\wordpad.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\MainPage\silverIcon.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-black\MedTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\Microsoft.Wallet.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Acrofx32.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\msth8EN.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\AIRWER.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubStoreLogo.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\NAMECONTROLPROXY.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\NETWORK\PREVIEW.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxSignature.p7x 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\PlatformCapabilities\PowerPointCapabilities.json 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\7-Zip\Lang\hu.txt.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\logging.properties.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\SurfaceProfiles\paper_indiarough_512x512.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\5313_24x24x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-80.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\GenericMailLargeTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Author2String.XSL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\ClientEventLogMessages.man.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ul-phn.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\officemui.msi.16.en-us.tree.dat 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PhotosLargeTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\PaintAppList.targetsize-48_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\accicons.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\ht_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.PasswordManager.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libty_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\3difr.x3d.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\EmbossBitmaps\Lightning bolt_icon.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ca.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\66.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteNotebookSmallTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_25.25.13009.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubBadgeLogo.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\StopwatchSmallTile.contrast-black_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Awards\spider\2_Piece_Silk_Suit_.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteWideTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation_1.2.100.v20131119-0908.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\toast.dualsim1.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\1937_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ADAL.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\gt_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sampler.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\core_icons.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\split.avi 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-io-ui.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-loaders.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSO99LRES.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\169.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\AppxManifest.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7_RTL.wmv.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-favorites.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\ExchangeSmallTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_DogEar.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-16_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\contrast-black\OneConnectAppList.targetsize-80.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\cursors.properties.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\xmsrv.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\email_all.gif 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeLargeTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox_1.0.500.v20131211-1531.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Combine_R_RHP.aapp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\StoreMedTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteSectionWideTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\XLLEX.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-256.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_K_COL.HXK.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\NavigationIcons\nav_icons_achievements.targetsize-48.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.DatabaseServices.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsptg.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\VVIEWDWG.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\mcxml\x-none\Office.x-none.msi.16_authored.mcxml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.DataWarehouse.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarSmallTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxLargeTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\SetupTeardown.Tests.ps1 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\OSFINTL.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\GRAPH.EXE.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jjs.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART15.BDR.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\RDCNotificationClient.appx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailAppList.targetsize-72_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\SmallTile.scale-100_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Microsoft.Office.Interop.Access.dao.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Photo Viewer\ImagingEngine.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\concrt140.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\326_36x36x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\_Resources\12.rsrc 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\api-ms-win-crt-string-l1-1-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubSplashSquareTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarWideTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Awards\challenge\Go_for_the_Silver_Unearned_small.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\GamePlayAssets\TriPeaks\ResPacks\tripeaksgameplay.respack 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Icons\Star-Club_icon.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Defender\NisWfp.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\pages\winrthost.htm 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\sqlite.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\microsoft.system.package.metadata\Autogen\JSByteCodeCache_32 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-36_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\HowToPlay\FreeCell\Goal_2.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\RenderingControl.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.dba79ab6.pri 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\kp_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_ja.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\MedTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\LTSHYPH_FR.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\PeopleSmallTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\NAME.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\PilotshubApp.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\javaws.policy 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\ExchangeSmallTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\verify.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Integration\C2RManifest.powerpointmui.msi.16.en-us.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-20_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\JumboDeck4.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\167.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\vn_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Media Player\wmpnetwk.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\EmbossBitmaps\plus.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\AppPackageLargeTile.scale-100_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\OutlookMailLargeTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AlarmsLargeTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART1.BDR 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\Office Word 2003 Look.dotx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.targetsize-256.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\Microsoft.PackageManagement.MsiProvider.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-nodes.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\EntPlat.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-256_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\MSSP7EN.LEX 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\ph_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\main.css 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOPRIV.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOPRIV.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\large\smile.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CASCADE\CASCADE.ELM 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\DEEPBLUE\PREVIEW.GIF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\Microsoft.People.Controls.winmd 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\A12_Spinner_2x.gif.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.scale-200_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\er_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_COL.HXC 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\03_lastfm.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-j2se-1.0.2.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\Office\Simplify.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-black\MedTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\S_IlluCCFilesEmpty_180x180.svg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\bin\tnameserv.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-white_targetsize-16_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxCalendarBadge.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\tabskb.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fontconfig.properties.src 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\mcxml\x-none\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\Fonts\private\GARABD.TTF.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.ViewElements.winmd 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5666_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado28.tlb 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\rsod\excelmui.msi.16.en-us.tree.dat.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\System\msvcr110.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Mock.ps1 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\db\bin\ij.bat.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\api-ms-win-core-timezone-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-templates.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql90.xsl.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\Microsoft.People.Relevance.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\Assets\BadgeLogo2.targetsize-54.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription1-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOIDRES.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\DEEPBLUE\DEEPBLUE.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Smokey Glass.eftx 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Arkadium.Win10.News\Assets\news_button_down.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailMediumTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEODTXT.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\mso20imm.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\servertool.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxA-Generic-Light.scale-300.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageProviderFunctions.psm1.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\GamePlayAssets\Localization\localized_NB-NO.respack 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxBlockMap.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteMediumTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-100_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Mozilla Firefox\browser\blocklist.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6365_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\starttile.dualsim2.smile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\extensions\VLSub.luac 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsSmallTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\id.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-core-kit.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\DcfMsoWrapper.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorSmallTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.ConnectionUI.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\batch_window.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\Images\PiSh_placeholder_small.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EXPEDITN\THMBNAIL.PNG.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5671_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\6449_48x48x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5941_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ScCore.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Advanced-Dark.scale-300.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\Effects\effects_lobby_bubbles.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\en-US\about_BeforeEach_AfterEach.help.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\resources.pri 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8.mp4.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\ads_win10_300x250.scale-100.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Emoticons\small\sheep.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\Icons\jit_rich_capture.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Snippets\ShouldExist.snippets.ps1xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Icons\about.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\tesselate.x3d 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteSectionLargeTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_targetsize-72.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-20.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-api.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\10178_20x20x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.contrast-white_targetsize-256.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\GenericMailWideTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\lua\modules\common.luac.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSORES.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OFFREL.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-conio-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiler.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\manifestAssets\Square44x44Logo.targetsize-16.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\AquariumDeck4.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\CoreEngine\Data\3DBrush\brush_bristles.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macHandle.png.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019DemoR_BypassTrial180-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ul-oob.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-48_altform-colorize.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRLEX.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\ENU\AdobeID.pdf 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\za_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-36_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-filesystem-l1-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial2-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\StopwatchWideTile.contrast-black_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteNotebookWideTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\Lumia.ViewerPlugin\Assets\IconOpenInRefocus.contrast-high_scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraMedTile.contrast-white_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\vc_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderMedTile.contrast-black_scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\manifestAssets\Square71x71Logo.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailSmallTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\PhotosLargeTile.contrast-white_scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-72_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\BIBUtils.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe\Assets\Office\settle.scale-140.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.targetsize-20_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.ja_5.5.0.165303.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\HxAccounts.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\Welcome.html 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup-impl.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\WATERMAR\WATERMAR.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\msjet.xsl.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\en\Microsoft.PackageManagement.resources.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\WideTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeSmallTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AGM.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\Assets\StoreLogo.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOIDRES.DLL 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\core_visualvm.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CASCADE\CASCADE.INF 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Grace-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Grace-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedLargeTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteNotebookMedTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\Assets\AppList.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarWideTile.scale-150.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Comments.aapp 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ppd.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_KMS_Client_AE-ul.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\misc.exe.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailLargeTile.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\TURABIAN.XSL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Jumbo\mask\1h.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Maps.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\Assets\contrast-white\OneConnectAppList.targetsize-72.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Buttons\GiveUp\GiveUp-press.mobile.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemePreview\Themes\jumbo.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\lyncicon.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\bj_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\SETLANG.EXE.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailMediumTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\lt_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-api-visual.xml_hidden 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\eqnedt32.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeDownload\download_bar_base.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.felix.gogo.command_0.10.0.v201209301215.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\Glyph_0xecd0.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppPackageMedTile.scale-125.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.4919d9c8.pri 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\HideExport.ADTS.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Common Files\System\msadc\msadds.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.XLS 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libcc_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe\Assets\Office\PlaneCut.scale-180.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.targetsize-32_altform-unplated_contrast-white.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-api.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\AppxSignature.p7x 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\AppPackageStoreLogo.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-24_altform-unplated.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-ppd.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-24.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\TEE\en-GB.Calendar.ot 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-windows.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxManifest.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-pl.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial4-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.contrast-black_scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_ecc.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Defender\SymSrv.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ul-oob.xrm-ms 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\rsod\dcfmui.msi.16.en-us.boot.tree.dat.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application-views.xml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Mso20win32client.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-black\LargeTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosLogoExtensions.targetsize-40.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Routing.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteAppList.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-36_altform-unplated_contrast-black.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Place\LTR\WideTile.scale-100.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\VFS\SystemX64\concrt140.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\MainPageState2\awards_bp_920.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\ye_16x11.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-80.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.AddinTelemetry.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Windows Defender Advanced Threat Protection\WATPCSP.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\HxMailSmallTile.scale-400.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange Red.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jstat.exe 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\Client.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\CompareWrite.js.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-pl.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ar.pak 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-compat_zh_CN.jar 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\Assets\starttile.dualsim2.surprise.scale-200.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-180.png.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.Extensions.dll 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\en\Microsoft.PackageManagement.ArchiverProviders.resources.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\al_60x42.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\Resources\RetailDemo\data\en-us\3.jpg 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemui.msi.16.en-us.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ul-phn.xrm-ms.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Javascripts\JSByteCodeWin.bin.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\Microsoft Office\root\Flattener\AppVPackaging.dll.manifest 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\6478_32x32x32.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-96.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\mcxml\x-none\OneDriveSetup.x-none.msi.16_OneDriveSetup.mcxml.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\index.html.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\7-Zip\Lang\tt.txt 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\BuildInfo.xml 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ADAL.DLL.SpartCrypt[[email protected]]-[ID-1236D52C].Encrypted 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Tournament\PlayButton.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Awards\klondike\Blizzard-of_Bliss_.png 4f5a62adfac4e97a07025402c42a93b7bf6442d78dcd948203e6267952c4928c.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\over-arrow-navigation.svg.SpartCrypt[