Analysis
-
max time kernel
48s -
max time network
149s -
platform
windows7_x64 -
resource
win7 -
submitted
31-08-2020 12:21
Static task
static1
Behavioral task
behavioral1
Sample
bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe
Resource
win10v200722
windows10_x64
0 signatures
0 seconds
General
-
Target
bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe
-
Size
77KB
-
MD5
4e24780d9700a1cb9d741d7ef51889f1
-
SHA1
4700da92e1f99b576ff517d3fa18103c67ac0d11
-
SHA256
bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4
-
SHA512
c1d2501b95822796d6116711d426463dd95fd059201e11cf19f9ba8709782e6997cd4d2c04eb163199d305e04e04462ed032a53f50f9df0f4ff495dfb75450a0
Score
10/10
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Modifies extensions of user files 4 IoCs
Ransomware generally changes the extension on encrypted files.
description ioc Process File opened for modification C:\Users\Admin\Pictures\WriteConvert.tiff.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Users\Admin\Pictures\DebugApprove.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Users\Admin\Pictures\MoveInitialize.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Users\Admin\Pictures\SendSwitch.tiff.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe -
Drops file in Program Files directory 335 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\WidevineCdm\manifest.json.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\UserControl.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.Office.Tools.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\resources.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\LogoCanary.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdater.cer.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Class.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows Media Player\mpvis.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\CodeFile.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\ResourceInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_extended.xml.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\extensibility.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Extensions\external_extensions.json.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\SmallLogo.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\DataSet.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\WebKit.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\RICHED20.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\external_extensions.json.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\pt-PT.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\swiftshader\libGLESv2.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\LogoBeta.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics\20200616092700.pma.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\VVIEWDWG.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\d3dcompiler_47.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\kn.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\template.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\lv.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\v8_context_snapshot.bin.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\bg.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Module.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\BHOINTL.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AboutBox.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\template.msi.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome_200_percent.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\fa.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IEAWSDC.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\it.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe Root Certificate.cer.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSO.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\docs.crx.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\el.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\SmallLogoCanary.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOHEV.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\hr.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\sentinel.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\sv.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUCRES.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\INLAUNCH.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome_100_percent.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ca.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\fi.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\hi.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\elevation_service.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Tools.Applications.Project.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\bn.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\sl.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Temp\GUM2396.tmp\GoogleUpdateSetup.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\UserControl.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\es-419.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\et.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.mshtml.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\MDIParent.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\VBAOWS10.CHM.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Class.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Services\verisign.bmp.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\notification_helper.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\en-US.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ms.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\PortalConnect.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\PipelineSegments.store.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Thawte Root Certificate.cer.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee90.tlb.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Portal\PortalConnectCore.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\id.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\vi.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AUTHZAX.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.swf.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\HxRuntime.HxS.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Csi.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Form.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\pl.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateBroker.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\83.0.4103.106\83.0.4103.106_chrome_installer.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\VSTAClientPkgUI.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSORES.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\de.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\swiftshader\libEGL.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\SmallLogoBeta.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OLKFSTUB.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfigInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice-install.log.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome_elf.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\System\DirectDB.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\ReadMe.htm.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\drive.crx.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONLNTCOMLIB.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OWSHLP10.CHM.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\System.AddIn.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\ResourceInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\chrome.VisualElementsManifest.xml.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateSetup.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dialog.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\VSTAClientPkg.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPWEC.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNoteSyncPC.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SplashScreen.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NAMEEXT.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\SettingsInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\updater.ini.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ru.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\MEIPreload\manifest.json.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\zh-TW.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Form.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeAUM_rootCert.cer.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdate.cer.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Installer\chrome.7z.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\am.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.Adapter.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Text.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\83.0.4103.106.manifest.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Installer\chrmstp.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdate.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\setup.swf.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\lt.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\master_preferences.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\youtube.crx.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\nb.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ja.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ta.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfo.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxT.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\fil.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateOnDemand.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Internet Explorer\D3DCompiler_47.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows Sidebar\sbdrop.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\NPSWF32.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VGX\VGX.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows Mail\msoe.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextService.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Bears.htm.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee100.tlb.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\da.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\mr.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\tr.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\zh-CN.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\STSCOPY.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\airappinstaller.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\hxdsui.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome.exe.sig.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ml.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPISHELLR.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\VSTARemotingServer.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\VVIEWER.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\MSBuild\Microsoft.Office.InfoPath.targets.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows Defender\MpAsDesc.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.config.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AppConfigurationInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\EmptyDatabase.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Settings.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SettingsInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\Install\{5DF2DCA9-BD54-4513-9B32-2C551D72B961}\83.0.4103.106_chrome_installer.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OCLTINT.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUPLD.INTL.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\MDIParent.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\ActionsPane3.xsd.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ko.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Resource.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AssemblyInfoInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\adodb.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\helpmap.txt.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\InkDiv.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe.config.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\SmallLogoDev.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\stdole.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\SetupMetrics\20200616092334.pma.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateComRegisterShell64.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.stdformat.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\VBE6EXT.OLB.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\nacl_irt_x86_64.nexe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_client.xml.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\gu.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\sr.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\TextFile.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\WidevineCdm\LICENSE.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\VVIEWRES.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome_pwa_launcher.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\Logo.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PPSLAX.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\CsiSoap.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\sw.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\LoginForm.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Updater.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxC.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\Keywords.HxK.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\NamedURLs.HxK.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\uk.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\LogoDev.png.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdaterInstallMgr.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\chrome.dll.sig.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\hu.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NAME.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OWSSUPP.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\eventlog_provider.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ro.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateHelper.msi.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\EmptyDatabase.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\gmail.crx.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Installer\setup.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\cs.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateCore.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\XmlFile.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\msdatasrc.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\he.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msolui100.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfig.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Visualizer.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\VSTAProject.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\libEGL.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\sk.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\VSTAProjectUI.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLPROXY.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\STSUPLD.DLL.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfoInternal.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\digest.s.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\pt-BR.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\te.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\th.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\en-GB.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\es.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\oisctrl.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dataset.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\icudtl.dat.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\ar.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSLaunch.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\fr.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\nl.pak.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\MEIPreload\preloaded_data.pb.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Interface.zip.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\DAO\dao360.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\VSTARemotingServer.tlb.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\AddIns.store.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe File opened for modification C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\libGLESv2.dll.43C420CA9F6C3FD647D9F0016C8988E08FE32A87114C63B68E5C816BEF19A41E bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1092 bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe"C:\Users\Admin\AppData\Local\Temp\bfaebc86c1712aa80f501d859de686078b9f21e89174bd23a19b27af93b40ce4.bin.exe"1⤵
- Modifies extensions of user files
- Drops file in Program Files directory
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:1092